Logfile of random's system information tool 1.10 (written by random/random)
Run by Feri at 2014-09-19 01:38:50
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 272 GB (60%) free of 455 GB
Total RAM: 3894 MB (59% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:38:58, on 19. 9. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17280)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
C:\Users\Feri\Downloads\CoreTemp32\Core Temp.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Users\Feri\AppData\Local\Temp\Install_18638\delay.exe
C:\Program Files\trend micro\Feri.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.bing.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: 2657e500f3e90131a4e91fb939dcadf40061913 - {11111111-1111-1111-1111-110611191113} - C:\Program Files (x86)\iWebar\iWebar-bho.dll
O2 - BHO: HP SimplePass Identity Protection Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\DigitalPersona\Bin\dpotspluginie8.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: WinToFlash Suggestor - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - (no file)
O9 - Extra 'Tools' menuitem: WinToFlash Suggestor options - {A52C66B3-D4A9-4d10-A67D-2BEF0A85AB3F} - (no file)
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Documention Flash Card Detection Service (hpdoccardsvc) - Hewlett-Packard Developement Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\doccardsvc.exe
O23 - Service: hpqwmiex - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10854 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
"taskhost.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
taskeng.exe {78539D4B-C035-41CC-8BFA-618FCF96985B}
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Users\Feri\Downloads\CoreTemp32\Core Temp.exe"
"C:\Program Files\Hewlett-Packard\HPToneControl\HPToneCtl.exe"
"C:\Program Files\Java\jre6\bin\jusched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\AESTSr64.exe
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"C:\Program Files\DigitalPersona\Bin\DPAgent.exe"
"C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
HydraDM64.exe -h:65992 "Maximize to full desktop" "Maximize to window corners" "Restore desktop"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe" KMPProcess
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe" /hidden
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe" "<hpNotification><Toast><Title>HP Wireless Assistant</Title><Text>Bluetooth®: Disabled
WLAN: Disabled</Text><IconPath>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WA_tray_32_off.ico</IconPath><ID>1552689904</ID><Path>C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe</Path><Parameters></Parameters></Toast></hpNotification>"
C:\Users\Feri\AppData\Local\Temp\Install_18638\delay.exe /S /MAG=smtycdelay /PIXGUID=3029b78f-ab04-42c9-809e-225120539caa
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"taskhost.exe"
/QuitInfo:000000000000075C;00000000000005BC;
"C:\Users\Feri\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\6563fb0e-3562-4199-a0a7-ee44667f7754-11.job - C:\Program Files (x86)\Senses\6563fb0e-3562-4199-a0a7-ee44667f7754-11.exe /rawdata=cPxZ4xyXv3AZZtOLhG1WgwfbkjTNnTdzAl+R4/JNnKz7AXSKaR8Z4KvJHdCEV8wVN3m0pZwHM19adBdeMG6l4LkpTe85+F9IKExrMROi6nlNDYXuTNIveBm5OpiinEvjKoFkOn0cvr2coCvEYI4swexBdisE1STgr0Gy0oxEnxhPEFyTQ8lW232CqeG0nBj5TVj1c4+j1TIT+/UGAACRBjNdBMOOLn3GGtdyo7D2JbOGciar22utFz4xFCrcPp25KJJAmjVi0xBA5tecQJdWYzS/F2szCS9+jgaHgnBOsIEtuq1bMvOt/CPtj6Xf61ZWgBx1aqt8x5MZOEhnOHSjQiI8DzhCwA4AtR0vSOqNqVUTHTamlyoXW/Zi13W8jZiPsROHqdyfZ7o13c761edd5SjMXywH1it3c//+RiMbKVjwZ+9fHw5w/aKTN4M+rLbzH0EoYdYpkg9OUOSfuAlHg/LxGw3W/UJDbF8iaY4uBCRAUUfPSoZfUKCSP7b3fGlQxaqRyL8IX0KzAWRRyTfoyaSQYcQebUyqWJnnqHNjhDnECNSoOLl52+lvvKMlMlH99k3iBGn0Uq/C/XfnFJ0rUwTObtRjaz4eJjha3d0rSoHlkY0Xi5bZAb01pOGKLQ88E3YIMn1JKG2pqSIxgdyOFo3XVxjk8mubJl8DUDqpdwuku2KUtTj0DFVYYfugaJRpBfLdP0kFMLcPrwKQXBid59Zj0jK0V2BVDjKdJ+LqwjDPChcv8z+yIPZRlnedQD2UwFY9VMGyajgl2ny9CKUnV9iScACjK0TSW1CHoKHdigu0L3U2/wkNslJ+rTINFEKf650zIovVsVVz4PG48IQt8mFpxnArtKnNOfL/Fi6afiuAcnv1gisGPh/A2UzOB1u41o5aKXU4GN+qr7We6efkaL5pxJXONhVPYW17oJmq87mYcFZavrH+ElXKLubWi9vHjWqP9yRRzuw8v8qWvU3QZxF/SpNFNXgegD/9RkoeSCnear0MwzkQ47W+AbpQ6CqvvfU4q8GLNdWgF82LrstLM1XhaV3XNxHMOWuMKgHCF4xm80FVnewqDdDBF250iz0gDEcpwJ4Ss01BQsLM1M7Iu+oFC3Lw7vKlDmDzt75WtmHUiGfeLwuilsoYLjUtg79+BQNim5+N137WxeHXrm+mRfgIyMocdVeCVAxu+HHL4I2A8YBqiHheGiT6aQw8+l2+ea8RuqniPD3N6PwB6+PLCP+wGMk0+X706rwzT9snR+3yFDjhuSATxK84yXFxsilWnpazC7kBd/JtF2eVXjzqI4oC9FOQkP5jzlzxZ9Ja+2NoXnDNNFq6uqyNM8CSR07GrD6yqR4cty3UZ8QaIoGeo4BcDKX2+TOyg+ffktUT5RuHdTtwhrJo5Xjn5vXF7AYoiwygbqVg3to5hOprTUUI1a1VIbx6xVPHp2IJRcyHjEELOWZ9NJ036IjLp27AmG8pxd9gCJPsjNXvfB7TG9Y7MB6C4CP2ZyU4If1wypQIicIomKV/QSvitSdxLL5hgGg3oJzuDSMtzEqHyFl04ZnnKrHtsY/7m4LVIJ1z8YZznNskdgbgP/hp757hHs2rHDln1VZC/kQwH7CIboAl2AOklph8KI849ZhDPtlN+rXKA5x+7iJsHwVhQ4TREwJe4YV0RhflR7G6ANqmag+jQfe15KQbvfOBlb3r13EsYtqTTSxepaHXjnlRV6wl5p/kdpMXP2aHQwHWHHtJ1jiQnzgQ/FxyM0vy6+Ip6qySHGgoBrr87GGj1oziaT1SJZBrZyJUSYqQ5hDcwtfyWZpExQ/hOR9nvbypSSXxcX9H/a00xuCcIDmm6PicORFK+9Sg864N5XRZvWvGNqB5Kxv5Mo3ITYLcCzQvJyMgqlUloQXA7gEyqd6lStgrpJPU7Pv5nn7+n8cODAo+LuVwq6OQvG2Qe3KRLgjPZUp5NctKa6XRtItwvA4w+rbAqtK64rcw2GSRkdrY2FrNBy/4k89RWHlKGfyKeHt4nkomz1aU7pVhqJBxWgI2poc/C7yG+AoBtZP7OSsucMVjCaQBBInpivUjqm7xsBQZlKfPvci3uWVSZSoE9SrZHKJMVg/Kck2I5t6UTDIUY4zJdK1LkFwJQeP83utzc+yr8sjGTs/ynC9vcr+/kdOt3LBsVMGGJUUY+LhMjVE1YSBAfxr9P69Z7PoMMdxl89kQAt/eQe+vvHWfttc=
C:\Windows\tasks\6563fb0e-3562-4199-a0a7-ee44667f7754-3.job - C:\Program Files (x86)\Senses\6563fb0e-3562-4199-a0a7-ee44667f7754-3.exe /rawdata=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
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\c94697dc-6b6d-478f-bddd-348b413d6a2a-1.job - C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe /rawdata=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
C:\Windows\tasks\c94697dc-6b6d-478f-bddd-348b413d6a2a-11.job - C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-11.exe /rawdata=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
C:\Windows\tasks\c94697dc-6b6d-478f-bddd-348b413d6a2a-2.job - C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-2.exe /rawdata=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
C:\Windows\tasks\c94697dc-6b6d-478f-bddd-348b413d6a2a-4.job - C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-4.exe /rawdata=kAJwYS1BvM8Ta/FAIYwC7sOqf0wBUtAjJZahcox/MGykY3rIf/YyfU6vXFLKvDyiOMKI9nMAM6ivxyhHRq+n/CXQ2EhGju6wEuaXbn4Fm6VWzZq99Ke3fmgRpqJde5XGFyX2uKKJ68OZcbq5hKWVs9jsCSZITuCTQzofTTI/011am5bNDp9z26/FLvI+a9oms0rX7EzbdS+aqMcD6bLpOQaj8xYxgpokCaSe5crulwaLL4cnQajLJkR4lYxLVURGaieo3jDg5FbyPp5rHUFnW4P/sAJbBC/RzU7hDaMkL+P0I9cHSJa3HceMCjIVfwuLw8oTVCbIO32DUHJluuxM6WaIdJFB0XEJ/l1UcJA3VWJsCn6WaCZ7EOHo754DyJJGvyT012WjU2Sk1o/oELAeK/LSBdcTHVW5W2mI3vcNMax1m+LLKUJsIiM2H7BlT5/75tgX7VT6L/8TZBMVoClto2p7Kg74ui1pX/6AUAcYMToO3HeOqthFwh2WIMuzOOgkvZP/BW0iDCwU976tYavvVA1CMv3SmSCnwPGxgjkkLXyf2LdTAl5nDfZSJXoyMmrG1e09fx7UVE+yyfdsPW+swky0dKcTE4hIrm8+ZyheWexhk78j64Rf1T6HKcUxKrQLZhG/YAymiX6UJ0D5a7J2rQgfKDxYRcoqNO7Xbm3T+ZgCMWE5tIeeX5Qwnab5+CD4GsfAhFv6GIrNaYz/RiKQ3uSuXwWITbyaFdr4EId7voIBIl7p+N4xx7OZI6v/CjkQhksTVbErvNOgyX6vEKrkOWmjkyS7fFzn2NL+g69ACTL/GGvTn4YmTAGZC1Cf1wk9SmIaoAnbmA3vt4CakuaIWE+EHaF4lSlUhp8bvmg1feRYJdieI90YNq14ZJQfUpK6ukzxAT8tEfA1gcRw3mpGN7bn9uhMuuYVuQoHx4YknhQGR0dK9UfPClO31u3+/Yb5fM5qeG6JB+RXmWt2AJvNfMthHn9v0dpFrzPxcRQSdxFATQnJ1T5hShOR+r+zC5cwe0CPyviQ4sj8ESZn4zoj8NC4zb0IljqCJOb/HYe+P6n+4uQYzSyor93Ux3h0DeciDAiDMVGnopM4mq2aM4lHIsz9gKcin6Mx+jFHCLtMxaYQ7mIgXt/qd5A55u/Qk2ze7QqFesnmFS+tkqIuhbj5alk+FpV+YlEmbpKr9uhw33VHPgFR77MNsAq05oiP2YYpZGLJ7+CNPF/dy5gVYmhNY9msR9xut2OT+RabK/R2aOlhHwGW0b4JyBeyc8/jKw28JsjD/t22Kds3RZXIlPpgrPY/9FyWDwVK3DAtsii2OYNpHoKCFQj8Vq9PV1MTpPWs8QIIcasrVdrp+RU75tD+0XR+PRdHtrCOK+sZSfCWFuNdKTH1u/K0k1ApAczt6JeT3OujAjosJuu57fQ0WxT/GIUPZyICJ3kePcs63MR9ZvM/CnaZIC31WdIQNBJn5jZ+1ZzWbYe79sG8AZLtu2eCpbe6BkMMPQtcpnFPgKECw6Ppxu75V2QZYNYY8mCCuJtOi7ijgoKoCpAzTX3u7QX3FQ6HX4y8+jJEl8hLJ0+ZwfGpHVdhQ6bfV44P3F8DkscuiB3QqchZE77KfSDzNUiO4JGBJ3XulIYfagA9oFkMtCOUTtnm3yWb413WTdeC1G+QqfVVrwe5K5skA1LPCTYjbrav60s1cd5FkW2yghKjIciIiHoIc/B0UDbQ5+8GfOmaIfmPtgo6e+K17xU+PdgAgSwhU6NudL2fJBksbG9f4aqK6H2HXq/lB9i3nSq6SwrtCCT4YMzEK0F20Fq7qUGRKzHxzwZ4r63CnHLDlQCNVBSWy3XN6JVl1vTh0S6pMlDhvLULmJ6Bbq6lWwBsLUoH7w==
C:\Windows\tasks\c94697dc-6b6d-478f-bddd-348b413d6a2a-6.job - C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-6.exe /rawdata=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
C:\Windows\tasks\c94697dc-6b6d-478f-bddd-348b413d6a2a-7.job - C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-7.exe /rawdata=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
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2.job - C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-2.exe /rawdata=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
=========Mozilla firefox=========
ProfilePath - C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "chrome://speeddial/content/speeddial.xul"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
C:\Program Files (x86)\Mozilla Firefox\extensions\
firefox@firefox.sk
urlbox@firefox.sk
C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191113}]
iWebar - C:\Program Files (x86)\iWebar\iWebar-bho64.dll [2014-09-19 883048]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{395610AE-C624-4f58-B89E-23733EA00F9A}]
HP SimplePass Identity Protection Extension - C:\Program Files\DigitalPersona\Bin\dpotspluginie8.dll [2009-12-30 2213128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-09-11 612248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-30 43520]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191113}]
iWebar - C:\Program Files (x86)\iWebar\iWebar-bho.dll [2014-09-19 652648]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{395610AE-C624-4f58-B89E-23733EA00F9A}]
HP SimplePass Identity Protection Extension - C:\Program Files (x86)\DigitalPersona\Bin\dpotspluginie8.dll [2009-12-30 1262856]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-09-11 457712]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-05-30 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-01-22 166424]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-01-22 390680]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-01-22 410136]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-04-10 2104104]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-01-14 487424]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
"HPToneControl"=C:\Program Files\Hewlett-Packard\HPToneControl\HPTonectl.exe [2009-08-19 107832]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-05-30 172032]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2009-12-16 8192]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HydraVisionDesktopManager"=C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [2014-04-17 1967616]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-01-08 3674320]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easybits Recovery]
C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Envy Guides AutoPlay]
C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\hpdocstart.exe [2010-03-24 76584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2008-12-08 54576]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2010-01-22 2363392]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wintoflashvddc]
[]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Java\jre6\bin\jusched.exe [2010-05-30 149280]
""= []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-09-11 4085896]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-04-17 767200]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-01-22 268800]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-09-19 01:38:50 ----D---- C:\rsit
2014-09-19 01:38:50 ----D---- C:\Program Files\trend micro
2014-09-19 01:14:59 ----D---- C:\Program Files (x86)\iWebar
2014-09-19 01:14:10 ----D---- C:\Program Files (x86)\globalUpdate
2014-09-19 01:14:08 ----D---- C:\Program Files (x86)\Senses
2014-09-19 01:03:59 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-09-19 01:02:46 ----D---- C:\AdwCleaner
2014-09-18 14:29:21 ----D---- C:\Windows\Migration
2014-09-18 14:26:31 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-18 14:22:15 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-09-18 14:22:15 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-09-18 12:36:55 ----A---- C:\Windows\explorer.exe
2014-09-18 12:36:54 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-09-18 12:36:53 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-09-18 12:36:53 ----A---- C:\Windows\system32\WMPhoto.dll
2014-09-18 12:36:52 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-09-18 12:36:52 ----A---- C:\Windows\system32\d3d10warp.dll
2014-09-18 12:36:42 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-09-18 12:36:42 ----A---- C:\Windows\system32\d2d1.dll
2014-09-18 12:36:24 ----A---- C:\Windows\system32\drivers\bthport.sys
2014-09-18 12:36:23 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2014-09-18 12:36:19 ----A---- C:\Windows\system32\fsutil.exe
2014-09-18 12:36:19 ----A---- C:\Windows\system32\esent.dll
2014-09-18 12:36:18 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-09-18 12:36:18 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-09-18 12:36:18 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-09-18 12:36:18 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-09-18 12:36:17 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-09-18 12:36:17 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-09-18 12:36:17 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-09-18 12:36:17 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-09-18 12:32:16 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-09-18 12:32:16 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-09-18 12:32:15 ----A---- C:\Windows\system32\spoolsv.exe
2014-09-18 12:32:15 ----A---- C:\Windows\splwow64.exe
2014-09-18 12:14:07 ----D---- C:\Windows\system32\MRT
2014-09-18 12:14:00 ----A---- C:\Windows\system32\MRT.exe
2014-09-18 12:05:29 ----D---- C:\Windows\SYSWOW64\Wat
2014-09-18 12:05:29 ----D---- C:\Windows\system32\Wat
2014-09-18 03:06:05 ----A---- C:\Windows\system32\wmploc.DLL
2014-09-18 03:06:04 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-09-18 03:06:04 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-09-18 03:06:02 ----A---- C:\Windows\system32\wmp.dll
2014-09-18 01:54:11 ----D---- C:\7dfe590c07e7d46d901171a242b9
2014-09-18 01:50:22 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-09-18 01:44:46 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\url.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-09-18 01:44:40 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\wininet.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\wextract.exe
2014-09-18 01:44:40 ----A---- C:\Windows\system32\webcheck.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\urlmon.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\url.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-09-18 01:44:40 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-09-18 01:44:40 ----A---- C:\Windows\system32\msrating.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\msls31.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\mshtmler.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\mshtmled.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\msfeedssync.exe
2014-09-18 01:44:40 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\msfeeds.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\licmgr10.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\jsproxy.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\jsIntl.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\jscript9diag.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\jscript9.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\inseng.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\iexpress.exe
2014-09-18 01:44:40 ----A---- C:\Windows\system32\ieui.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\iesysprep.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\iesetup.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\iertutil.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\iernonce.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\ieframe.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\iedkcs32.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\ieapfltr.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\ieapfltr.dat
2014-09-18 01:44:40 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\ie4uinit.exe
2014-09-18 01:44:40 ----A---- C:\Windows\system32\icardie.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\elshyph.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\dxtrans.dll
2014-09-18 01:44:40 ----A---- C:\Windows\system32\dxtmsft.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\vbscript.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\pngfilt.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\occache.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\mshtml.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\mshta.exe
2014-09-18 01:44:39 ----A---- C:\Windows\system32\jscript.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\imgutil.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\ieUnatt.exe
2014-09-18 01:44:39 ----A---- C:\Windows\system32\iepeers.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-09-18 01:44:39 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-09-18 01:41:53 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-09-18 01:41:53 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\XpsPrint.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\UIAnimation.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\FntCache.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\dxgi.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\DWrite.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\d3d10level9.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\d3d10core.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\d3d10_1.dll
2014-09-18 01:41:53 ----A---- C:\Windows\system32\d3d10.dll
2014-09-18 01:00:50 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-09-18 01:00:49 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-09-18 01:00:49 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-09-18 01:00:49 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-09-18 01:00:47 ----A---- C:\Windows\system32\WUDFx.dll
2014-09-18 01:00:47 ----A---- C:\Windows\system32\WUDFHost.exe
2014-09-18 01:00:47 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-09-17 23:58:53 ----D---- C:\d5a25a2c76fd5f6abe6105ffd152
2014-09-17 23:56:04 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-09-17 23:56:04 ----A---- C:\Windows\system32\wmi.dll
2014-09-17 23:56:04 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-09-17 20:41:55 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2014-09-17 20:41:55 ----A---- C:\Windows\system32\infocardapi.dll
2014-09-17 20:41:54 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2014-09-17 20:41:54 ----A---- C:\Windows\system32\icardagt.exe
2014-09-17 20:41:53 ----A---- C:\Windows\SYSWOW64\icardres.dll
2014-09-17 20:41:53 ----A---- C:\Windows\system32\icardres.dll
2014-09-17 20:41:30 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-09-17 20:41:30 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-09-17 18:58:02 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-09-17 18:58:02 ----A---- C:\Windows\system32\xmllite.dll
2014-09-17 18:57:55 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-09-17 18:57:55 ----A---- C:\Windows\system32\msieftp.dll
2014-09-17 18:57:54 ----A---- C:\Windows\system32\odbctrac.dll
2014-09-17 18:57:54 ----A---- C:\Windows\system32\odbccu32.dll
2014-09-17 18:57:54 ----A---- C:\Windows\system32\odbccr32.dll
2014-09-17 18:57:54 ----A---- C:\Windows\system32\odbccp32.dll
2014-09-17 18:57:53 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-09-17 18:57:53 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-09-17 18:57:53 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-09-17 18:57:53 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-09-17 18:57:53 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-09-17 18:57:52 ----A---- C:\Windows\system32\wwansvc.dll
2014-09-17 18:57:52 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-09-17 18:57:49 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-09-17 18:57:49 ----A---- C:\Windows\system32\comctl32.dll
2014-09-17 18:57:41 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-09-17 18:57:41 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-09-17 18:57:41 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-09-17 18:57:41 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-09-17 18:57:36 ----A---- C:\Windows\system32\mstscax.dll
2014-09-17 18:57:35 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-09-17 18:57:35 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-09-17 18:57:34 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-09-17 18:57:34 ----A---- C:\Windows\system32\tsgqec.dll
2014-09-17 18:57:34 ----A---- C:\Windows\system32\aaclient.dll
2014-09-17 18:57:18 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-09-17 18:57:18 ----A---- C:\Windows\system32\wintrust.dll
2014-09-17 18:57:07 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-09-17 18:57:07 ----A---- C:\Windows\system32\CPFilters.dll
2014-09-17 18:57:06 ----A---- C:\Windows\system32\sbe.dll
2014-09-17 18:57:05 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-09-17 18:56:59 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-09-17 18:56:59 ----A---- C:\Windows\system32\quartz.dll
2014-09-17 18:56:57 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-09-17 18:56:57 ----A---- C:\Windows\system32\qdvd.dll
2014-09-17 18:56:49 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-09-17 18:56:49 ----A---- C:\Windows\system32\ntshrui.dll
2014-09-17 18:56:39 ----A---- C:\Windows\system32\tquery.dll
2014-09-17 18:56:38 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-09-17 18:56:38 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-09-17 18:56:38 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-09-17 18:56:38 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-09-17 18:56:38 ----A---- C:\Windows\system32\mssrch.dll
2014-09-17 18:56:37 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-09-17 18:56:37 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-09-17 18:56:37 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-09-17 18:56:37 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-09-17 18:56:37 ----A---- C:\Windows\system32\mssvp.dll
2014-09-17 18:56:37 ----A---- C:\Windows\system32\mssphtb.dll
2014-09-17 18:56:37 ----A---- C:\Windows\system32\mssph.dll
2014-09-17 18:56:36 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-09-17 18:56:36 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-09-17 18:56:36 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-09-17 18:56:36 ----A---- C:\Windows\system32\msscntrs.dll
2014-09-17 18:56:35 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-09-17 18:56:07 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-09-17 18:56:07 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-09-17 18:56:06 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-09-17 18:56:05 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-09-17 18:56:05 ----A---- C:\Windows\system32\usp10.dll
2014-09-17 18:56:03 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-09-17 18:56:03 ----A---- C:\Windows\system32\webio.dll
2014-09-17 18:56:01 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-09-17 18:56:01 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-09-17 18:51:01 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-09-17 18:51:01 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-09-17 18:51:01 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-09-17 18:51:01 ----A---- C:\Windows\system32\cryptsvc.dll
2014-09-17 18:51:01 ----A---- C:\Windows\system32\cryptnet.dll
2014-09-17 18:51:01 ----A---- C:\Windows\system32\crypt32.dll
2014-09-17 18:50:52 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-09-17 18:50:52 ----A---- C:\Windows\system32\wer.dll
2014-09-17 18:50:51 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-09-17 18:50:51 ----A---- C:\Windows\system32\imagehlp.dll
2014-09-17 18:50:50 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-09-17 18:50:50 ----A---- C:\Windows\system32\drivers\netio.sys
2014-09-17 18:50:50 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-09-17 18:49:49 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-09-17 18:49:49 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-09-17 18:49:49 ----A---- C:\Windows\system32\msxml6.dll
2014-09-17 18:49:49 ----A---- C:\Windows\system32\msxml3.dll
2014-09-17 18:49:48 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-09-17 18:49:48 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-09-17 18:49:48 ----A---- C:\Windows\system32\msxml6r.dll
2014-09-17 18:49:48 ----A---- C:\Windows\system32\msxml3r.dll
2014-09-17 18:48:47 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-09-17 18:48:47 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-09-17 18:48:42 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-09-17 18:48:42 ----A---- C:\Windows\system32\osk.exe
2014-09-17 18:48:33 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-09-17 18:48:28 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-09-17 18:48:28 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-09-17 18:48:28 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-09-17 18:48:28 ----A---- C:\Windows\system32\credui.dll
2014-09-17 18:48:18 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-09-17 18:48:18 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-09-17 18:48:18 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-09-17 18:48:18 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-09-17 18:48:18 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-09-17 18:48:18 ----A---- C:\Windows\system32\lpk.dll
2014-09-17 18:48:18 ----A---- C:\Windows\system32\fontsub.dll
2014-09-17 18:48:18 ----A---- C:\Windows\system32\dciman32.dll
2014-09-17 18:48:18 ----A---- C:\Windows\system32\atmlib.dll
2014-09-17 18:48:18 ----A---- C:\Windows\system32\atmfd.dll
2014-09-17 18:48:17 ----A---- C:\Windows\system32\mfc42u.dll
2014-09-17 18:48:17 ----A---- C:\Windows\system32\mfc42.dll
2014-09-17 18:48:16 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-09-17 18:48:16 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-09-17 18:48:12 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-09-17 18:48:12 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-09-17 18:48:12 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-09-17 18:48:12 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-09-17 18:48:12 ----A---- C:\Windows\system32\secproc_isv.dll
2014-09-17 18:48:12 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-09-17 18:48:12 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-09-17 18:48:12 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-09-17 18:48:12 ----A---- C:\Windows\system32\RMActivate.exe
2014-09-17 18:48:11 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-09-17 18:48:11 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-09-17 18:48:11 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-09-17 18:48:11 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-09-17 18:48:11 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-09-17 18:48:11 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-09-17 18:48:11 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-09-17 18:48:11 ----A---- C:\Windows\system32\secproc.dll
2014-09-17 18:48:11 ----A---- C:\Windows\system32\msdrm.dll
2014-09-17 18:47:43 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-09-17 18:47:43 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-09-17 18:47:43 ----A---- C:\Windows\system32\drivers\usbohci.sys
2014-09-17 18:47:43 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-09-17 18:47:43 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-09-17 18:47:43 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-09-17 18:47:43 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-09-17 18:47:42 ----A---- C:\Windows\system32\d3d11.dll
2014-09-17 18:47:41 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-09-17 18:47:39 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-09-17 18:47:39 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-09-17 18:47:34 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-09-17 18:47:34 ----A---- C:\Windows\system32\qedit.dll
2014-09-17 18:47:26 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-09-17 18:47:26 ----A---- C:\Windows\system32\rdpwsx.dll
2014-09-17 18:47:26 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-09-17 18:47:24 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-09-17 18:47:22 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-09-17 18:47:22 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-09-17 18:47:18 ----A---- C:\Windows\system32\drivers\afd.sys
2014-09-17 18:47:17 ----A---- C:\Windows\system32\Wdfres.dll
2014-09-17 18:47:17 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-09-17 18:47:17 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-09-17 18:44:42 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-09-17 18:44:40 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-09-17 18:44:40 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-09-17 18:44:40 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-09-17 18:44:40 ----A---- C:\Windows\system32\nlasvc.dll
2014-09-17 18:44:40 ----A---- C:\Windows\system32\netcorehc.dll
2014-09-17 18:44:40 ----A---- C:\Windows\system32\ncsi.dll
2014-09-17 18:44:40 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-09-17 18:44:39 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-09-17 18:44:39 ----A---- C:\Windows\system32\nlaapi.dll
2014-09-17 18:44:39 ----A---- C:\Windows\system32\netevent.dll
2014-09-17 18:44:39 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-09-17 18:44:28 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-09-17 18:44:28 ----A---- C:\Windows\system32\tzres.dll
2014-09-17 18:44:24 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-09-17 18:44:24 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-09-17 18:44:23 ----A---- C:\Windows\system32\profsvc.dll
2014-09-17 18:44:22 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-09-17 18:44:22 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-09-17 18:44:22 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-09-17 18:44:22 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-09-17 18:44:22 ----A---- C:\Windows\system32\dnsapi.dll
2014-09-17 18:43:40 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-09-17 18:43:40 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-09-17 18:43:40 ----A---- C:\Windows\system32\WebClnt.dll
2014-09-17 18:43:40 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-09-17 18:43:40 ----A---- C:\Windows\system32\davclnt.dll
2014-09-17 18:43:39 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-09-17 18:43:39 ----A---- C:\Windows\system32\dpnet.dll
2014-09-17 18:43:36 ----A---- C:\Windows\system32\msi.dll
2014-09-17 18:43:35 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-09-17 18:43:35 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-09-17 18:43:35 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-09-17 18:43:35 ----A---- C:\Windows\system32\msihnd.dll
2014-09-17 18:43:35 ----A---- C:\Windows\system32\consent.exe
2014-09-17 18:43:35 ----A---- C:\Windows\system32\authui.dll
2014-09-17 18:43:35 ----A---- C:\Windows\system32\appinfo.dll
2014-09-17 18:43:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-09-17 18:43:16 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-09-17 18:43:16 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-09-17 18:43:15 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-09-17 18:43:15 ----A---- C:\Windows\system32\winlogon.exe
2014-09-17 18:43:15 ----A---- C:\Windows\system32\objsel.dll
2014-09-17 18:43:15 ----A---- C:\Windows\system32\KernelBase.dll
2014-09-17 18:43:14 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-09-17 18:43:14 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-09-17 18:43:14 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-09-17 18:43:14 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-09-17 18:43:14 ----A---- C:\Windows\system32\smss.exe
2014-09-17 18:43:14 ----A---- C:\Windows\system32\dimsroam.dll
2014-09-17 18:43:14 ----A---- C:\Windows\system32\cngprovider.dll
2014-09-17 18:43:14 ----A---- C:\Windows\system32\adprovider.dll
2014-09-17 18:43:13 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-09-17 18:43:13 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-09-17 18:43:13 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-09-17 18:43:13 ----A---- C:\Windows\system32\wincredprovider.dll
2014-09-17 18:43:13 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-09-17 18:43:13 ----A---- C:\Windows\system32\csrsrv.dll
2014-09-17 18:43:13 ----A---- C:\Windows\system32\capiprovider.dll
2014-09-17 18:43:11 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-09-17 18:43:11 ----A---- C:\Windows\system32\apisetschema.dll
2014-09-17 18:43:02 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-09-17 18:41:58 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-09-17 18:41:58 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-09-17 18:41:58 ----A---- C:\Windows\system32\drivers\srv.sys
2014-09-17 18:41:57 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-09-17 18:41:57 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-09-17 18:41:56 ----A---- C:\Windows\system32\cdd.dll
2014-09-17 18:41:53 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-09-17 18:41:52 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-09-17 18:41:52 ----A---- C:\Windows\system32\mswsock.dll
2014-09-17 18:41:44 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-09-17 18:41:44 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-09-17 18:41:44 ----A---- C:\Windows\system32\Wpc.dll
2014-09-17 18:41:44 ----A---- C:\Windows\system32\gameux.dll
2014-09-17 18:41:26 ----A---- C:\Windows\system32\psisdecd.dll
2014-09-17 18:41:25 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-09-17 18:41:23 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-09-17 18:40:37 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-09-17 18:40:37 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-09-17 18:40:37 ----A---- C:\Windows\system32\tdh.dll
2014-09-17 18:40:37 ----A---- C:\Windows\system32\ntdll.dll
2014-09-17 18:40:37 ----A---- C:\Windows\system32\advapi32.dll
2014-09-17 18:40:36 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-09-17 18:40:32 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-09-17 18:39:49 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-09-17 18:39:49 ----A---- C:\Windows\system32\iologmsg.dll
2014-09-17 18:39:49 ----A---- C:\Windows\system32\drivers\storport.sys
2014-09-17 18:39:49 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-09-17 18:39:49 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-09-17 18:39:42 ----A---- C:\Windows\system32\schannel.dll
2014-09-17 18:39:41 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-09-17 18:39:41 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-09-17 18:39:41 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-09-17 18:39:41 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-09-17 18:39:41 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-09-17 18:39:41 ----A---- C:\Windows\system32\wdigest.dll
2014-09-17 18:39:41 ----A---- C:\Windows\system32\TSpkg.dll
2014-09-17 18:39:41 ----A---- C:\Windows\system32\ncrypt.dll
2014-09-17 18:39:41 ----A---- C:\Windows\system32\msv1_0.dll
2014-09-17 18:39:40 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-09-17 18:39:40 ----A---- C:\Windows\system32\credssp.dll
2014-09-17 18:39:33 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-09-17 18:39:33 ----A---- C:\Windows\system32\synceng.dll
2014-09-17 18:39:27 ----A---- C:\Windows\system32\winresume.exe
2014-09-17 18:39:27 ----A---- C:\Windows\system32\winload.exe
2014-09-17 18:39:27 ----A---- C:\Windows\system32\kdusb.dll
2014-09-17 18:39:27 ----A---- C:\Windows\system32\kd1394.dll
2014-09-17 18:39:26 ----A---- C:\Windows\system32\kdcom.dll
2014-09-17 18:39:21 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-09-17 18:39:21 ----A---- C:\Windows\system32\shdocvw.dll
2014-09-17 18:39:12 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-09-17 18:39:12 ----A---- C:\Windows\system32\win32spl.dll
2014-09-17 18:39:11 ----A---- C:\Windows\system32\taskhost.exe
2014-09-17 18:38:22 ----A---- C:\Windows\system32\shell32.dll
2014-09-17 18:38:21 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-09-17 18:38:18 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-09-17 18:38:18 ----A---- C:\Windows\system32\cryptdlg.dll
2014-09-17 18:38:10 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-09-17 18:38:09 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-09-17 18:38:09 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-09-17 18:38:09 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-09-17 18:38:09 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-09-17 18:37:48 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-09-17 18:37:48 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-09-17 18:37:47 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-09-17 18:37:47 ----A---- C:\Windows\system32\netapi32.dll
2014-09-17 18:37:47 ----A---- C:\Windows\system32\browser.dll
2014-09-17 18:37:47 ----A---- C:\Windows\system32\browcli.dll
2014-09-17 18:37:46 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-09-17 18:37:45 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-09-17 18:37:45 ----A---- C:\Windows\system32\wow64win.dll
2014-09-17 18:37:45 ----A---- C:\Windows\system32\wow64.dll
2014-09-17 18:37:45 ----A---- C:\Windows\system32\kernel32.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-09-17 18:37:44 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-09-17 18:37:44 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-09-17 18:37:44 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-09-17 18:37:44 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-09-17 18:37:44 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-09-17 18:37:44 ----A---- C:\Windows\system32\wow64cpu.dll
2014-09-17 18:37:44 ----A---- C:\Windows\system32\winsrv.dll
2014-09-17 18:37:44 ----A---- C:\Windows\system32\ntvdm64.dll
2014-09-17 18:37:44 ----A---- C:\Windows\system32\conhost.exe
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-09-17 18:37:43 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-09-17 18:37:42 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-09-17 18:37:41 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-09-17 18:37:41 ----A---- C:\Windows\SYSWOW64\user.exe
2014-09-17 18:37:39 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-09-17 18:37:39 ----A---- C:\Windows\system32\prevhost.exe
2014-09-17 18:37:39 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-09-17 18:37:38 ----A---- C:\Windows\system32\srcore.dll
2014-09-17 18:37:37 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-09-17 18:37:36 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-09-17 18:37:34 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-09-17 18:37:34 ----A---- C:\Windows\system32\inetcomm.dll
2014-09-17 18:37:31 ----A---- C:\Windows\system32\msvcrt.dll
2014-09-17 18:37:30 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-09-17 18:37:29 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-09-17 18:37:26 ----A---- C:\Windows\system32\certutil.exe
2014-09-17 18:37:25 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-09-17 18:37:24 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-09-17 18:37:24 ----A---- C:\Windows\system32\certenc.dll
2014-09-17 18:37:08 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-09-17 18:37:08 ----A---- C:\Windows\system32\lsasrv.dll
2014-09-17 18:37:08 ----A---- C:\Windows\system32\kerberos.dll
2014-09-17 18:37:07 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-09-17 18:37:07 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-09-17 18:36:54 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-09-17 18:36:54 ----A---- C:\Windows\system32\scrrun.dll
2014-09-17 18:36:54 ----A---- C:\Windows\system32\cscript.exe
2014-09-17 18:36:53 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-09-17 18:36:53 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-09-17 18:36:53 ----A---- C:\Windows\system32\wscript.exe
2014-09-17 18:36:48 ----A---- C:\Windows\system32\lsass.exe
2014-09-17 18:36:48 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-09-17 18:36:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-09-17 18:36:48 ----A---- C:\Windows\system32\drivers\cng.sys
2014-09-17 18:36:47 ----A---- C:\Windows\system32\sspisrv.dll
2014-09-17 18:36:47 ----A---- C:\Windows\system32\sspicli.dll
2014-09-17 18:36:47 ----A---- C:\Windows\system32\secur32.dll
2014-09-17 18:36:26 ----A---- C:\Windows\system32\localspl.dll
2014-09-17 18:36:25 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-09-17 18:36:25 ----A---- C:\Windows\system32\win32k.sys
2014-09-17 18:36:25 ----A---- C:\Windows\system32\gdi32.dll
2014-09-17 18:36:24 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-09-17 18:36:22 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-09-17 18:36:22 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-09-17 18:36:22 ----A---- C:\Windows\system32\oleaut32.dll
2014-09-17 18:36:22 ----A---- C:\Windows\system32\oleacc.dll
2014-09-17 18:36:20 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-09-17 18:36:20 ----A---- C:\Windows\system32\EncDec.dll
2014-09-17 18:35:52 ----A---- C:\Windows\system32\aepdu.dll
2014-09-17 18:35:52 ----A---- C:\Windows\system32\aeinv.dll
2014-09-17 18:35:49 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-09-17 18:35:48 ----A---- C:\Windows\system32\cdosys.dll
2014-09-17 18:34:00 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-09-17 18:34:00 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-09-17 18:34:00 ----A---- C:\Windows\system32\nshwfp.dll
2014-09-17 18:34:00 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-09-17 18:34:00 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-09-17 18:33:58 ----A---- C:\Windows\system32\scavengeui.dll
2014-09-17 18:33:55 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-09-17 18:33:55 ----A---- C:\Windows\system32\rpcrt4.dll
2014-09-17 18:32:58 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-09-17 18:32:58 ----A---- C:\Windows\system32\packager.dll
2014-09-17 16:56:08 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-09-17 16:56:08 ----A---- C:\Windows\system32\rdpcore.dll
2014-09-17 16:56:08 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-09-17 16:46:13 ----A---- C:\Windows\system32\wups2.dll
2014-09-17 16:46:13 ----A---- C:\Windows\system32\wucltux.dll
2014-09-17 16:46:13 ----A---- C:\Windows\system32\wuaueng.dll
2014-09-17 16:46:13 ----A---- C:\Windows\system32\wuauclt.exe
2014-09-17 16:46:01 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-09-17 16:46:01 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-09-17 16:46:01 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-09-17 16:46:01 ----A---- C:\Windows\system32\wups.dll
2014-09-17 16:46:01 ----A---- C:\Windows\system32\wudriver.dll
2014-09-17 16:46:01 ----A---- C:\Windows\system32\wuapi.dll
2014-09-17 16:45:52 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-09-17 16:45:52 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-09-17 16:45:52 ----A---- C:\Windows\system32\wuwebv.dll
2014-09-17 16:45:52 ----A---- C:\Windows\system32\wuapp.exe
2014-09-16 17:46:56 ----D---- C:\Windows\system32\SPReview
2014-09-16 17:46:16 ----D---- C:\Windows\system32\EventProviders
2014-09-16 16:23:15 ----A---- C:\Windows\system32\netfxperf.dll
2014-09-16 16:23:15 ----A---- C:\Windows\system32\dfshim.dll
2014-09-16 16:23:08 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-09-16 16:23:03 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-09-16 16:23:03 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-09-16 16:22:58 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2014-09-16 16:22:58 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2014-09-16 16:22:58 ----A---- C:\Windows\system32\sysmain.dll
2014-09-16 16:22:56 ----A---- C:\Windows\system32\MSVidCtl.dll
2014-09-16 16:22:54 ----A---- C:\Windows\system32\mscoree.dll
2014-09-16 16:22:53 ----A---- C:\Windows\system32\mmcndmgr.dll
2014-09-16 16:22:52 ----A---- C:\Windows\system32\xpsservices.dll
2014-09-16 16:22:52 ----A---- C:\Windows\system32\mf.dll
2014-09-16 16:22:49 ----A---- C:\Windows\system32\schedsvc.dll
2014-09-16 16:22:49 ----A---- C:\Windows\system32\ole32.dll
2014-09-16 16:22:48 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2014-09-16 16:22:48 ----A---- C:\Windows\system32\spwizui.dll
2014-09-16 16:22:47 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-09-16 16:22:47 ----A---- C:\Windows\system32\wevtsvc.dll
2014-09-16 16:22:47 ----A---- C:\Windows\system32\taskschd.dll
2014-09-16 16:22:47 ----A---- C:\Windows\system32\RacEngn.dll
2014-09-16 16:22:47 ----A---- C:\Windows\system32\diagperf.dll
2014-09-16 16:22:46 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2014-09-16 16:22:46 ----A---- C:\Windows\system32\vssapi.dll
2014-09-16 16:22:46 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2014-09-16 16:22:46 ----A---- C:\Windows\system32\ExplorerFrame.dll
2014-09-16 16:22:45 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2014-09-16 16:22:44 ----A---- C:\Windows\system32\UIRibbon.dll
2014-09-16 16:22:42 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2014-09-16 16:22:42 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2014-09-16 16:22:42 ----A---- C:\Windows\system32\WsmSvc.dll
2014-09-16 16:22:42 ----A---- C:\Windows\system32\WMVCORE.DLL
2014-09-16 16:22:42 ----A---- C:\Windows\system32\rdpdd.dll
2014-09-16 16:22:42 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2014-09-16 16:22:42 ----A---- C:\Windows\system32\PresentationHost.exe
2014-09-16 16:22:41 ----A---- C:\Windows\system32\spreview.exe
2014-09-16 16:22:41 ----A---- C:\Windows\system32\spinstall.exe
2014-09-16 16:22:41 ----A---- C:\Windows\system32\MPSSVC.dll
2014-09-16 16:22:41 ----A---- C:\Windows\system32\CertEnroll.dll
2014-09-16 16:22:40 ----A---- C:\Windows\system32\WinSAT.exe
2014-09-16 16:22:40 ----A---- C:\Windows\system32\d3d9.dll
2014-09-16 16:22:39 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2014-09-16 16:22:39 ----A---- C:\Windows\system32\SearchFolder.dll
2014-09-16 16:22:38 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2014-09-16 16:22:38 ----A---- C:\Windows\system32\VSSVC.exe
2014-09-16 16:22:38 ----A---- C:\Windows\system32\gpsvc.dll
2014-09-16 16:22:38 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2014-09-16 16:22:37 ----A---- C:\Windows\system32\dwmcore.dll
2014-09-16 16:22:37 ----A---- C:\Windows\system32\dbgeng.dll
2014-09-16 16:22:36 ----A---- C:\Windows\system32\drivers\http.sys
2014-09-16 16:22:35 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2014-09-16 16:22:35 ----A---- C:\Windows\system32\actxprxy.dll
2014-09-16 16:22:34 ----A---- C:\Windows\SYSWOW64\ole32.dll
2014-09-16 16:22:34 ----A---- C:\Windows\system32\termsrv.dll
2014-09-16 16:22:34 ----A---- C:\Windows\system32\qmgr.dll
2014-09-16 16:22:34 ----A---- C:\Windows\system32\audiosrv.dll
2014-09-16 16:22:33 ----A---- C:\Windows\system32\sqmapi.dll
2014-09-16 16:22:33 ----A---- C:\Windows\system32\mstsc.exe
2014-09-16 16:22:32 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2014-09-16 16:22:32 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2014-09-16 16:22:32 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2014-09-16 16:22:32 ----A---- C:\Windows\system32\winhttp.dll
2014-09-16 16:22:32 ----A---- C:\Windows\system32\netlogon.dll
2014-09-16 16:22:32 ----A---- C:\Windows\system32\imapi2fs.dll
2014-09-16 16:22:31 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2014-09-16 16:22:31 ----A---- C:\Windows\system32\wbengine.exe
2014-09-16 16:22:31 ----A---- C:\Windows\system32\setupapi.dll
2014-09-16 16:22:31 ----A---- C:\Windows\system32\rpcss.dll
2014-09-16 16:22:31 ----A---- C:\Windows\system32\QAGENTRT.DLL
2014-09-16 16:22:31 ----A---- C:\Windows\system32\propsys.dll
2014-09-16 16:22:30 ----A---- C:\Windows\system32\werconcpl.dll
2014-09-16 16:22:30 ----A---- C:\Windows\system32\taskeng.exe
2014-09-16 16:22:30 ----A---- C:\Windows\system32\odbc32.dll
2014-09-16 16:22:29 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-09-16 16:22:29 ----A---- C:\Windows\system32\user32.dll
2014-09-16 16:22:28 ----A---- C:\Windows\system32\WSDApi.dll
2014-09-16 16:22:28 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-09-16 16:22:28 ----A---- C:\Windows\system32\drivers\netbt.sys
2014-09-16 16:22:28 ----A---- C:\Windows\system32\dhcpcore.dll
2014-09-16 16:22:28 ----A---- C:\Windows\system32\certmgr.dll
2014-09-16 16:22:27 ----A---- C:\Windows\SYSWOW64\certcli.dll
2014-09-16 16:22:27 ----A---- C:\Windows\system32\tsmf.dll
2014-09-16 16:22:27 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2014-09-16 16:22:26 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2014-09-16 16:22:26 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2014-09-16 16:22:26 ----A---- C:\Windows\system32\shlwapi.dll
2014-09-16 16:22:26 ----A---- C:\Windows\system32\netshell.dll
2014-09-16 16:22:26 ----A---- C:\Windows\system32\msdtctm.dll
2014-09-16 16:22:26 ----A---- C:\Windows\system32\framedynos.dll
2014-09-16 16:22:25 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2014-09-16 16:22:25 ----A---- C:\Windows\system32\ws2_32.dll
2014-09-16 16:22:25 ----A---- C:\Windows\system32\wmicmiplugin.dll
2014-09-16 16:22:25 ----A---- C:\Windows\system32\netcfgx.dll
2014-09-16 16:22:24 ----A---- C:\Windows\system32\lsm.exe
2014-09-16 16:22:24 ----A---- C:\Windows\system32\comdlg32.dll
2014-09-16 16:22:23 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2014-09-16 16:22:23 ----A---- C:\Windows\system32\wmpps.dll
2014-09-16 16:22:23 ----A---- C:\Windows\system32\Query.dll
2014-09-16 16:22:23 ----A---- C:\Windows\system32\drvstore.dll
2014-09-16 16:22:23 ----A---- C:\Windows\system32\apphelp.dll
2014-09-16 16:22:22 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2014-09-16 16:22:22 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2014-09-16 16:22:22 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2014-09-16 16:22:22 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2014-09-16 16:22:22 ----A---- C:\Windows\system32\wpdshext.dll
2014-09-16 16:22:22 ----A---- C:\Windows\system32\Vault.dll
2014-09-16 16:22:22 ----A---- C:\Windows\system32\QAGENT.DLL
2014-09-16 16:22:22 ----A---- C:\Windows\system32\cmd.exe
2014-09-16 16:22:22 ----A---- C:\Windows\system32\BFE.DLL
2014-09-16 16:22:22 ----A---- C:\Windows\system32\azroles.dll
2014-09-16 16:22:21 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2014-09-16 16:22:21 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2014-09-16 16:22:21 ----A---- C:\Windows\system32\samsrv.dll
2014-09-16 16:22:21 ----A---- C:\Windows\system32\lpksetup.exe
2014-09-16 16:22:21 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2014-09-16 16:22:20 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2014-09-16 16:22:20 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2014-09-16 16:22:19 ----A---- C:\Windows\SYSWOW64\Query.dll
2014-09-16 16:22:19 ----A---- C:\Windows\system32\sxs.dll
2014-09-16 16:22:19 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2014-09-16 16:22:18 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-09-16 16:22:18 ----A---- C:\Windows\SYSWOW64\upnp.dll
2014-09-16 16:22:18 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2014-09-16 16:22:18 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2014-09-16 16:22:18 ----A---- C:\Windows\system32\Wldap32.dll
2014-09-16 16:22:18 ----A---- C:\Windows\system32\taskcomp.dll
2014-09-16 16:22:18 ----A---- C:\Windows\system32\pnidui.dll
2014-09-16 16:22:18 ----A---- C:\Windows\system32\mfds.dll
2014-09-16 16:22:18 ----A---- C:\Windows\system32\mcbuilder.exe
2014-09-16 16:22:18 ----A---- C:\Windows\system32\ipsmsnap.dll
2014-09-16 16:22:18 ----A---- C:\Windows\system32\hgprint.dll
2014-09-16 16:22:17 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2014-09-16 16:22:17 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2014-09-16 16:22:17 ----A---- C:\Windows\system32\webservices.dll
2014-09-16 16:22:17 ----A---- C:\Windows\system32\SessEnv.dll
2014-09-16 16:22:16 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2014-09-16 16:22:16 ----A---- C:\Windows\system32\winsta.dll
2014-09-16 16:22:16 ----A---- C:\Windows\system32\sqlsrv32.dll
2014-09-16 16:22:16 ----A---- C:\Windows\system32\fveapi.dll
2014-09-16 16:22:16 ----A---- C:\Windows\system32\dot3api.dll
2014-09-16 16:22:12 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2014-09-16 16:22:12 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2014-09-16 16:22:12 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2014-09-16 16:22:12 ----A---- C:\Windows\system32\prncache.dll
2014-09-16 16:22:12 ----A---- C:\Windows\system32\mcmde.dll
2014-09-16 16:22:12 ----A---- C:\Windows\system32\drivers\volsnap.sys
2014-09-16 16:22:12 ----A---- C:\Windows\system32\drivers\msrpc.sys
2014-09-16 16:22:11 ----A---- C:\Windows\SYSWOW64\userenv.dll
2014-09-16 16:22:11 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2014-09-16 16:22:11 ----A---- C:\Windows\system32\WMNetMgr.dll
2014-09-16 16:22:11 ----A---- C:\Windows\system32\wlanpref.dll
2014-09-16 16:22:11 ----A---- C:\Windows\system32\vpnike.dll
2014-09-16 16:22:11 ----A---- C:\Windows\system32\schtasks.exe
2014-09-16 16:22:10 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2014-09-16 16:22:10 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2014-09-16 16:22:10 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2014-09-16 16:22:10 ----A---- C:\Windows\system32\userenv.dll
2014-09-16 16:22:10 ----A---- C:\Windows\system32\photowiz.dll
2014-09-16 16:22:10 ----A---- C:\Windows\system32\evr.dll
2014-09-16 16:22:10 ----A---- C:\Windows\system32\drivers\rdbss.sys
2014-09-16 16:22:10 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2014-09-16 16:22:09 ----A---- C:\Windows\SYSWOW64\cmd.exe
2014-09-16 16:22:09 ----A---- C:\Windows\system32\wmpmde.dll
2014-09-16 16:22:09 ----A---- C:\Windows\system32\sppobjs.dll
2014-09-16 16:22:09 ----A---- C:\Windows\system32\IPSECSVC.DLL
2014-09-16 16:22:09 ----A---- C:\Windows\system32\FXSSVC.exe
2014-09-16 16:22:09 ----A---- C:\Windows\system32\framedyn.dll
2014-09-16 16:22:09 ----A---- C:\Windows\system32\AudioSes.dll
2014-09-16 16:22:08 ----A---- C:\Windows\system32\WMPEncEn.dll
2014-09-16 16:22:08 ----A---- C:\Windows\system32\wmpeffects.dll
2014-09-16 16:22:08 ----A---- C:\Windows\system32\SyncCenter.dll
2014-09-16 16:22:08 ----A---- C:\Windows\system32\srvsvc.dll
2014-09-16 16:22:08 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-09-16 16:22:07 ----A---- C:\Windows\system32\shsvcs.dll
2014-09-16 16:22:07 ----A---- C:\Windows\system32\fde.dll
2014-09-16 16:22:06 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2014-09-16 16:22:06 ----A---- C:\Windows\SYSWOW64\propsys.dll
2014-09-16 16:22:06 ----A---- C:\Windows\SYSWOW64\mfds.dll
2014-09-16 16:22:06 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2014-09-16 16:22:06 ----A---- C:\Windows\system32\WinSATAPI.dll
2014-09-16 16:22:06 ----A---- C:\Windows\system32\stobject.dll
2014-09-16 16:22:06 ----A---- C:\Windows\system32\netdiagfx.dll
Nejake hrozby v avaste
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Nejake hrozby v avaste
2014-09-16 16:22:06 ----A---- C:\Windows\system32\localsec.dll
2014-09-16 16:22:06 ----A---- C:\Windows\system32\imapi2.dll
2014-09-16 16:22:06 ----A---- C:\Windows\system32\bcryptprimitives.dll
2014-09-16 16:22:05 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-09-16 16:22:05 ----A---- C:\Windows\system32\inetpp.dll
2014-09-16 16:22:05 ----A---- C:\Windows\system32\drivers\udfs.sys
2014-09-16 16:22:05 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2014-09-16 16:22:04 ----A---- C:\Windows\SYSWOW64\azroles.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\tcpipcfg.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\spp.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\QSHVHOST.DLL
2014-09-16 16:22:04 ----A---- C:\Windows\system32\netid.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\biocpl.dll
2014-09-16 16:22:03 ----A---- C:\Windows\SYSWOW64\themeui.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\scansetting.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\printui.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\mspbda.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\msinfo32.exe
2014-09-16 16:22:02 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2014-09-16 16:22:02 ----A---- C:\Windows\SYSWOW64\spp.dll
2014-09-16 16:22:02 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2014-09-16 16:22:02 ----A---- C:\Windows\system32\wusa.exe
2014-09-16 16:22:02 ----A---- C:\Windows\system32\vds.exe
2014-09-16 16:22:02 ----A---- C:\Windows\system32\pla.dll
2014-09-16 16:22:02 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2014-09-16 16:22:02 ----A---- C:\Windows\system32\msdri.dll
2014-09-16 16:22:02 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2014-09-16 16:22:02 ----A---- C:\Windows\system32\aitagent.exe
2014-09-16 16:22:01 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2014-09-16 16:22:01 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\wiaservc.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\rpchttp.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\mscms.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\drivers\pci.sys
2014-09-16 16:22:00 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2014-09-16 16:22:00 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2014-09-16 16:22:00 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2014-09-16 16:22:00 ----A---- C:\Windows\system32\XpsRasterService.dll
2014-09-16 16:22:00 ----A---- C:\Windows\system32\wisptis.exe
2014-09-16 16:22:00 ----A---- C:\Windows\system32\PkgMgr.exe
2014-09-16 16:22:00 ----A---- C:\Windows\system32\ocsetup.exe
2014-09-16 16:22:00 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2014-09-16 16:22:00 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2014-09-16 16:21:59 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2014-09-16 16:21:59 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-09-16 16:21:59 ----A---- C:\Windows\SYSWOW64\calc.exe
2014-09-16 16:21:59 ----A---- C:\Windows\system32\sppwinob.dll
2014-09-16 16:21:59 ----A---- C:\Windows\system32\ocsetapi.dll
2014-09-16 16:21:59 ----A---- C:\Windows\system32\DXP.dll
2014-09-16 16:21:58 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\wpdbusenum.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\wcncsvc.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\mprapi.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\eapp3hst.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\drivers\volmgr.sys
2014-09-16 16:21:58 ----A---- C:\Windows\system32\drivers\msdsm.sys
2014-09-16 16:21:58 ----A---- C:\Windows\system32\ci.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\cfgmgr32.dll
2014-09-16 16:21:57 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\upnp.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\t2embed.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\Robocopy.exe
2014-09-16 16:21:57 ----A---- C:\Windows\system32\eapphost.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\sxs.dll
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\stobject.dll
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\netshell.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\thumbcache.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\scecli.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2014-09-16 16:21:56 ----A---- C:\Windows\system32\hal.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\DxpTaskSync.dll
2014-09-16 16:21:55 ----A---- C:\Windows\SYSWOW64\prncache.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\puiobj.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\msasn1.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\iasrad.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\dwmredir.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2014-09-16 16:21:55 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2014-09-16 16:21:54 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2014-09-16 16:21:54 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2014-09-16 16:21:54 ----A---- C:\Windows\SYSWOW64\printui.dll
2014-09-16 16:21:54 ----A---- C:\Windows\system32\themeui.dll
2014-09-16 16:21:54 ----A---- C:\Windows\system32\onex.dll
2014-09-16 16:21:54 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2014-09-16 16:21:53 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2014-09-16 16:21:53 ----A---- C:\Windows\SYSWOW64\net1.exe
2014-09-16 16:21:52 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\wlangpui.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\wdc.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\scesrv.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\rasmans.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\msftedit.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\wiadefui.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\VAN.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\StructuredQuery.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\sdengin2.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\netcenter.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\dskquoui.dll
2014-09-16 16:21:50 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2014-09-16 16:21:50 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2014-09-16 16:21:50 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\wscapi.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\SndVol.exe
2014-09-16 16:21:50 ----A---- C:\Windows\system32\samcli.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\regapi.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\iasacct.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\drivers\termdd.sys
2014-09-16 16:21:50 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2014-09-16 16:21:49 ----A---- C:\Windows\system32\TabSvc.dll
2014-09-16 16:21:49 ----A---- C:\Windows\system32\srchadmin.dll
2014-09-16 16:21:49 ----A---- C:\Windows\system32\QUTIL.DLL
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\webservices.dll
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\fde.dll
2014-09-16 16:21:48 ----A---- C:\Windows\system32\wksprt.exe
2014-09-16 16:21:48 ----A---- C:\Windows\system32\setupcl.exe
2014-09-16 16:21:48 ----A---- C:\Windows\system32\rastls.dll
2014-09-16 16:21:48 ----A---- C:\Windows\system32\drivers\msahci.sys
2014-09-16 16:21:47 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2014-09-16 16:21:47 ----A---- C:\Windows\system32\tapisrv.dll
2014-09-16 16:21:47 ----A---- C:\Windows\system32\netiohlp.dll
2014-09-16 16:21:47 ----A---- C:\Windows\system32\drivers\acpi.sys
2014-09-16 16:21:46 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2014-09-16 16:21:46 ----A---- C:\Windows\SYSWOW64\pla.dll
2014-09-16 16:21:46 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\msconfig.exe
2014-09-16 16:21:46 ----A---- C:\Windows\system32\mimefilt.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\lsmproxy.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\ListSvc.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\hgcpl.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\drivers\raspptp.sys
2014-09-16 16:21:46 ----A---- C:\Windows\system32\drivers\ks.sys
2014-09-16 16:21:46 ----A---- C:\Windows\system32\clusapi.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\basecsp.dll
2014-09-16 16:21:45 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-09-16 16:21:45 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2014-09-16 16:21:45 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-09-16 16:21:45 ----A---- C:\Windows\system32\fdeploy.dll
2014-09-16 16:21:45 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2014-09-16 16:21:45 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2014-09-16 16:21:44 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2014-09-16 16:21:44 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2014-09-16 16:21:44 ----A---- C:\Windows\system32\WFS.exe
2014-09-16 16:21:44 ----A---- C:\Windows\system32\riched20.dll
2014-09-16 16:21:44 ----A---- C:\Windows\system32\mtxclu.dll
2014-09-16 16:21:44 ----A---- C:\Windows\system32\dnscmmc.dll
2014-09-16 16:21:43 ----A---- C:\Windows\system32\RpcRtRemote.dll
2014-09-16 16:21:43 ----A---- C:\Windows\system32\powercpl.dll
2014-09-16 16:21:43 ----A---- C:\Windows\system32\logoncli.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\winmm.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\onex.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\themecpl.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\sharemediacpl.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\SensorsCpl.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\nci.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\eudcedit.exe
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\autochk.exe
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2014-09-16 16:21:41 ----A---- C:\Windows\system32\netjoin.dll
2014-09-16 16:21:41 ----A---- C:\Windows\system32\Narrator.exe
2014-09-16 16:21:41 ----A---- C:\Windows\system32\Faultrep.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\samcli.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\proquota.exe
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\msutb.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\wkssvc.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\vpnikeapi.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\sppcomapi.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\cabview.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\autochk.exe
2014-09-16 16:21:40 ----A---- C:\Windows\system32\autofmt.exe
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\regapi.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\shsetup.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\nshipsec.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\fms.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\autoconv.exe
2014-09-16 16:21:39 ----A---- C:\Windows\system32\audiodg.exe
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\wwanconn.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\wpd_ci.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\wlanui.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\sdclt.exe
2014-09-16 16:21:38 ----A---- C:\Windows\system32\prntvpt.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\mscorier.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\drivers\winusb.sys
2014-09-16 16:21:38 ----A---- C:\Windows\system32\drivers\wanarp.sys
2014-09-16 16:21:38 ----A---- C:\Windows\system32\drivers\scsiport.sys
2014-09-16 16:21:38 ----A---- C:\Windows\system32\bcdsrv.dll
2014-09-16 16:21:37 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2014-09-16 16:21:37 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2014-09-16 16:21:37 ----A---- C:\Windows\system32\SmiEngine.dll
2014-09-16 16:21:37 ----A---- C:\Windows\system32\fontext.dll
2014-09-16 16:21:37 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2014-09-16 16:21:37 ----A---- C:\Windows\system32\dps.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\wdc.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\netid.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\mprddm.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\mblctr.exe
2014-09-16 16:21:36 ----A---- C:\Windows\system32\Display.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\batmeter.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\AxInstSv.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\Vault.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\untfs.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\nci.dll
2014-09-16 16:21:35 ----A---- C:\Windows\system32\wmpsrcwp.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2014-09-16 16:21:34 ----A---- C:\Windows\system32\usercpl.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\rtutils.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\provsvc.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\DiagCpl.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\bootres.dll
2014-09-16 16:21:33 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2014-09-16 16:21:33 ----A---- C:\Windows\system32\wpccpl.dll
2014-09-16 16:21:33 ----A---- C:\Windows\system32\sppsvc.exe
2014-09-16 16:21:33 ----A---- C:\Windows\system32\rasppp.dll
2014-09-16 16:21:33 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2014-09-16 16:21:32 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2014-09-16 16:21:32 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2014-09-16 16:21:32 ----A---- C:\Windows\SYSWOW64\Display.dll
2014-09-16 16:21:32 ----A---- C:\Windows\system32\SndVolSSO.dll
2014-09-16 16:21:32 ----A---- C:\Windows\system32\dxdiagn.dll
2014-09-16 16:21:32 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2014-09-16 16:21:32 ----A---- C:\Windows\system32\dot3cfg.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\userinit.exe
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2014-09-16 16:21:31 ----A---- C:\Windows\system32\taskmgr.exe
2014-09-16 16:21:31 ----A---- C:\Windows\system32\proquota.exe
2014-09-16 16:21:31 ----A---- C:\Windows\system32\prnfldr.dll
2014-09-16 16:21:31 ----A---- C:\Windows\system32\pdh.dll
2014-09-16 16:21:31 ----A---- C:\Windows\system32\hbaapi.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2014-09-16 16:21:30 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2014-09-16 16:21:30 ----A---- C:\Windows\system32\untfs.dll
2014-09-16 16:21:30 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2014-09-16 16:21:30 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2014-09-16 16:21:29 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2014-09-16 16:21:29 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2014-09-16 16:21:29 ----A---- C:\Windows\SYSWOW64\cabview.dll
2014-09-16 16:21:29 ----A---- C:\Windows\system32\userinit.exe
2014-09-16 16:21:29 ----A---- C:\Windows\system32\accessibilitycpl.dll
2014-09-16 16:21:28 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2014-09-16 16:21:28 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2014-09-16 16:21:28 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2014-09-16 16:21:28 ----A---- C:\Windows\system32\zipfldr.dll
2014-09-16 16:21:28 ----A---- C:\Windows\system32\slui.exe
2014-09-16 16:21:27 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2014-09-16 16:21:27 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2014-09-16 16:21:27 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\scecli.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\mscms.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\localsec.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\fontext.dll
2014-09-16 16:21:26 ----A---- C:\Windows\system32\sud.dll
2014-09-16 16:21:26 ----A---- C:\Windows\system32\dot3svc.dll
2014-09-16 16:21:26 ----A---- C:\Windows\system32\DeviceCenter.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\twext.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\taskbarcpl.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\networkmap.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\cryptui.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\ActionCenter.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\VAN.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\uxlib.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\recovery.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\OobeFldr.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\dsuiext.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2014-09-16 16:21:24 ----A---- C:\Windows\system32\bcdedit.exe
2014-09-16 16:21:24 ----A---- C:\Windows\system32\azroleui.dll
2014-09-16 16:21:23 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2014-09-16 16:21:23 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2014-09-16 16:21:23 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\tzutil.exe
2014-09-16 16:21:23 ----A---- C:\Windows\system32\sisbkup.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\isoburn.exe
2014-09-16 16:21:23 ----A---- C:\Windows\system32\efscore.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\cca.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\asycfilt.dll
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\systemcpl.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\syncui.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\shwebsvc.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\sdcpl.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\recdisc.exe
2014-09-16 16:21:22 ----A---- C:\Windows\system32\netplwiz.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\httpapi.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\drivers\sdbus.sys
2014-09-16 16:21:22 ----A---- C:\Windows\system32\drivers\mpio.sys
2014-09-16 16:21:22 ----A---- C:\Windows\system32\autoplay.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\wlanmsm.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\sysclass.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\sdrsvc.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\ncryptui.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\certcli.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\wusa.exe
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\sud.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\vdsutil.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\spwizeng.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\msvidc32.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\MFPlay.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2014-09-16 16:21:19 ----A---- C:\Windows\system32\termmgr.dll
2014-09-16 16:21:19 ----A---- C:\Windows\system32\sethc.exe
2014-09-16 16:21:19 ----A---- C:\Windows\system32\rstrui.exe
2014-09-16 16:21:19 ----A---- C:\Windows\system32\msscp.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\ftp.exe
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\sqlcese30.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\ReAgent.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\ntlanman.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2014-09-16 16:21:17 ----A---- C:\Windows\SYSWOW64\efscore.dll
2014-09-16 16:21:17 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\ssText3d.scr
2014-09-16 16:21:17 ----A---- C:\Windows\system32\rdpd3d.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\iyuv_32.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\iTVData.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\iprtrmgr.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\syncui.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\srvcli.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\slwga.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-09-16 16:21:15 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2014-09-16 16:21:15 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2014-09-16 16:21:15 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\wavemsp.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\ntprint.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\nslookup.exe
2014-09-16 16:21:15 ----A---- C:\Windows\system32\NAPHLPR.DLL
2014-09-16 16:21:15 ----A---- C:\Windows\system32\msiexec.exe
2014-09-16 16:21:15 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\acppage.dll
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\sethc.exe
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\riched20.dll
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-09-16 16:21:14 ----A---- C:\Windows\system32\srrstr.dll
2014-09-16 16:21:14 ----A---- C:\Windows\system32\sppnp.dll
2014-09-16 16:21:14 ----A---- C:\Windows\system32\bcdboot.exe
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\migisol.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\fms.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\dpx.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\activeds.dll
2014-09-16 16:21:13 ----A---- C:\Windows\system32\networkexplorer.dll
2014-09-16 16:21:13 ----A---- C:\Windows\system32\fsquirt.exe
2014-09-16 16:21:13 ----A---- C:\Windows\system32\certprop.dll
2014-09-16 16:21:13 ----A---- C:\Windows\system32\cabinet.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2014-09-16 16:21:12 ----A---- C:\Windows\system32\wkscli.dll
2014-09-16 16:21:12 ----A---- C:\Windows\system32\remotepg.dll
2014-09-16 16:21:12 ----A---- C:\Windows\system32\dfrgui.exe
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wvc.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wsqmcons.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wsnmp32.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wmpdxm.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\WinSCard.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\net1.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\ftp.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\blackbox.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\wvc.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\twext.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\mstask.dll
2014-09-16 16:21:10 ----A---- C:\Windows\system32\wmdrmdev.dll
2014-09-16 16:21:10 ----A---- C:\Windows\system32\WerFaultSecure.exe
2014-09-16 16:21:10 ----A---- C:\Windows\system32\msyuv.dll
2014-09-16 16:21:10 ----A---- C:\Windows\system32\mfps.dll
2014-09-16 16:21:09 ----A---- C:\Windows\twain_32.dll
2014-09-16 16:21:09 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2014-09-16 16:21:09 ----A---- C:\Windows\SYSWOW64\qcap.dll
2014-09-16 16:21:09 ----A---- C:\Windows\SYSWOW64\qasf.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\unimdmat.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-09-16 16:21:09 ----A---- C:\Windows\system32\OpcServices.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\msrle32.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\mapistub.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\mapi32.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\iscsium.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\Bubbles.scr
2014-09-16 16:21:08 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2014-09-16 16:21:08 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2014-09-16 16:21:08 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\tsbyuv.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\seclogon.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\Ribbons.scr
2014-09-16 16:21:08 ----A---- C:\Windows\system32\Mystify.scr
2014-09-16 16:21:08 ----A---- C:\Windows\system32\ifsutil.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\diskraid.exe
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2014-09-16 16:21:07 ----A---- C:\Windows\system32\muifontsetup.dll
2014-09-16 16:21:07 ----A---- C:\Windows\system32\drivers\umbus.sys
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\wmpshell.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2014-09-16 16:21:06 ----A---- C:\Windows\system32\rdpencom.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\perfmon.exe
2014-09-16 16:21:06 ----A---- C:\Windows\system32\netutils.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\AzSqlExt.dll
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\acppage.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\umb.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\tlscsp.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\qasf.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2014-09-16 16:21:05 ----A---- C:\Windows\system32\FXSAPI.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\dbghelp.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\ActionQueue.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\raschap.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\input.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\wpdwcn.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\wiavideo.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\syssetup.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\runonce.exe
2014-09-16 16:21:04 ----A---- C:\Windows\system32\raschap.dll
2014-09-16 16:21:04 ----A---- C:\Windows\bfsvc.exe
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2014-09-16 16:21:03 ----A---- C:\Windows\system32\WMADMOD.DLL
2014-09-16 16:21:03 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2014-09-16 16:21:03 ----A---- C:\Windows\system32\MdSched.exe
2014-09-16 16:21:02 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2014-09-16 16:21:01 ----A---- C:\Windows\system32\WMVSDECD.DLL
2014-09-16 16:21:01 ----A---- C:\Windows\system32\vdsbas.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\runonce.exe
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\onexui.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\logagent.exe
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2014-09-16 16:21:00 ----A---- C:\Windows\system32\nltest.exe
2014-09-16 16:21:00 ----A---- C:\Windows\system32\mstask.dll
2014-09-16 16:21:00 ----A---- C:\Windows\system32\Mcx2Svc.dll
2014-09-16 16:21:00 ----A---- C:\Windows\system32\drivers\rmcast.sys
2014-09-16 16:21:00 ----A---- C:\Windows\system32\bitsadmin.exe
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\shacct.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\wmdrmnet.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\vss_ps.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\tabcal.exe
2014-09-16 16:20:59 ----A---- C:\Windows\system32\shacct.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2014-09-16 16:20:59 ----A---- C:\Windows\system32\cscapi.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2014-09-16 16:20:58 ----A---- C:\Windows\system32\WPDSp.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2014-09-16 16:20:58 ----A---- C:\Windows\system32\qcap.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\msnetobj.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\logman.exe
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\pdh.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\logman.exe
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2014-09-16 16:20:57 ----A---- C:\Windows\system32\spbcd.dll
2014-09-16 16:20:57 ----A---- C:\Windows\system32\qdv.dll
2014-09-16 16:20:57 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\utildll.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2014-09-16 16:20:56 ----A---- C:\Windows\system32\takeown.exe
2014-09-16 16:20:56 ----A---- C:\Windows\system32\PnPUnattend.exe
2014-09-16 16:20:56 ----A---- C:\Windows\system32\fphc.dll
2014-09-16 16:20:56 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2014-09-16 16:20:56 ----A---- C:\Windows\system32\dot3ui.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\takeown.exe
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\fphc.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\vfwwdm32.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\EhStorAPI.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\amstream.dll
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2014-09-16 16:20:54 ----A---- C:\Windows\system32\shimgvw.dll
2014-09-16 16:20:54 ----A---- C:\Windows\system32\QCLIPROV.DLL
2014-09-16 16:20:54 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2014-09-16 16:20:54 ----A---- C:\Windows\system32\djoin.exe
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\qdv.dll
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2014-09-16 16:20:53 ----A---- C:\Windows\system32\nrpsrv.dll
2014-09-16 16:20:53 ----A---- C:\Windows\system32\iasrecst.dll
2014-09-16 16:20:53 ----A---- C:\Windows\system32\cmstp.exe
2014-09-16 16:20:53 ----A---- C:\Windows\system32\CertPolEng.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\cca.dll
2014-09-16 16:20:52 ----A---- C:\Windows\system32\WavDest.dll
2014-09-16 16:20:52 ----A---- C:\Windows\system32\MultiDigiMon.exe
2014-09-16 16:20:52 ----A---- C:\Windows\system32\KMSVC.DLL
2014-09-16 16:20:52 ----A---- C:\Windows\system32\fdProxy.dll
2014-09-16 16:20:52 ----A---- C:\Windows\system32\drivers\pacer.sys
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2014-09-16 16:20:51 ----A---- C:\Windows\system32\sscore.dll
2014-09-16 16:20:51 ----A---- C:\Windows\system32\relog.exe
2014-09-16 16:20:51 ----A---- C:\Windows\system32\mydocs.dll
2014-09-16 16:20:51 ----A---- C:\Windows\system32\mobsync.exe
2014-09-16 16:20:51 ----A---- C:\Windows\system32\iscsicli.exe
2014-09-16 16:20:51 ----A---- C:\Windows\system32\diskpart.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\relog.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\amstream.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\msdmo.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\itircl.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\dot3msm.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\resutils.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\itircl.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2014-09-16 16:20:49 ----A---- C:\Windows\system32\FXSTIFF.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\netutils.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\findstr.exe
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\sppc.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\onexui.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\mciqtz32.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\luainstall.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\choice.exe
2014-09-16 16:20:48 ----A---- C:\Windows\system32\findstr.exe
2014-09-16 16:20:48 ----A---- C:\Windows\system32\eappgnui.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\drivers\tunnel.sys
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\sppc.dll
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\schedcli.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\repair-bde.exe
2014-09-16 16:20:47 ----A---- C:\Windows\system32\manage-bde.exe
2014-09-16 16:20:47 ----A---- C:\Windows\system32\inetmib1.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\drivers\dfsc.sys
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\spopk.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\spopk.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\RDPENCDD.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\profprov.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\odbcconf.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\fixmapi.exe
2014-09-16 16:20:45 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2014-09-16 16:20:45 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2014-09-16 16:20:45 ----A---- C:\Windows\system32\FXSMON.dll
2014-09-16 16:20:45 ----A---- C:\Windows\system32\elsTrans.dll
2014-09-16 16:20:44 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2014-09-16 16:20:44 ----A---- C:\Windows\SYSWOW64\perfts.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\wshbth.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\UIRibbonRes.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\TRAPI.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\drivers\tdi.sys
2014-09-16 16:20:43 ----A---- C:\Windows\SYSWOW64\imm32.dll
2014-09-16 16:20:43 ----A---- C:\Windows\system32\napdsnap.dll
2014-09-16 16:20:43 ----A---- C:\Windows\system32\LogonUI.exe
2014-09-16 16:20:43 ----A---- C:\Windows\system32\dsauth.dll
2014-09-16 16:20:42 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2014-09-16 16:20:42 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2014-09-16 16:20:42 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2014-09-16 16:20:42 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2014-09-16 16:20:42 ----A---- C:\Windows\system32\FXSUNATD.exe
2014-09-16 16:20:42 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2014-09-16 16:20:42 ----A---- C:\Windows\system32\cscdll.dll
2014-09-16 16:20:42 ----A---- C:\Windows\system32\bitsperf.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2014-09-16 16:20:40 ----A---- C:\Windows\system32\wsdchngr.dll
2014-09-16 16:20:40 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\sscore.dll
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\shgina.dll
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\riched32.dll
2014-09-16 16:20:39 ----A---- C:\Windows\system32\shgina.dll
2014-09-16 16:20:37 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2014-09-16 16:20:35 ----A---- C:\Windows\system32\wshirda.dll
2014-09-16 16:20:35 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2014-09-16 16:20:34 ----A---- C:\Windows\system32\drivers\hidusb.sys
2014-09-16 16:20:34 ----A---- C:\Windows\system32\drivers\appid.sys
2014-09-16 16:20:33 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2014-09-16 16:20:33 ----A---- C:\Windows\system32\riched32.dll
2014-09-16 16:20:33 ----A---- C:\Windows\system32\rdpcfgex.dll
2014-09-16 16:20:33 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2014-09-16 16:20:32 ----A---- C:\Windows\system32\spwmp.dll
2014-09-16 16:20:32 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2014-09-16 16:20:32 ----A---- C:\Windows\system32\browseui.dll
2014-09-16 16:20:31 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-09-16 16:20:31 ----A---- C:\Windows\SYSWOW64\browseui.dll
2014-09-16 16:20:31 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2014-09-16 16:20:31 ----A---- C:\Windows\system32\drivers\cdrom.sys
2014-09-16 16:20:31 ----A---- C:\Windows\system32\C_ISCII.DLL
2014-09-16 16:20:30 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2014-09-16 16:20:30 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2014-09-16 16:20:30 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-09-16 16:20:30 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2014-09-16 16:20:30 ----A---- C:\Windows\system32\shunimpl.dll
2014-09-16 16:20:30 ----A---- C:\Windows\system32\dxmasf.dll
2014-09-16 16:20:30 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2014-09-16 16:20:30 ----A---- C:\Windows\system32\drivers\scfilter.sys
2014-09-16 16:20:30 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2014-09-16 16:20:29 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2014-09-16 16:20:29 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2014-09-16 16:20:29 ----A---- C:\Windows\system32\KBDTUF.DLL
2014-09-16 16:20:29 ----A---- C:\Windows\system32\KBDSF.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2014-09-16 16:20:27 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDTUQ.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDSG.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDPO.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDNEPR.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDINTAM.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDINBEN.DLL
2014-09-16 16:20:26 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2014-09-16 16:20:26 ----A---- C:\Windows\system32\kbdlk41a.dll
2014-09-16 16:20:26 ----A---- C:\Windows\system32\KBDGKL.DLL
2014-09-16 16:20:25 ----A---- C:\Windows\system32\KBDGR1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDUS.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDMON.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDLT1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDGEO.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDCZ1.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2014-09-16 16:20:23 ----A---- C:\Windows\system32\nlsbres.dll
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDTURME.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDMAORI.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINTEL.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINORI.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINMAR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINKAN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINHIN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDBULG.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDBLR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\dpnaddr.dll
2014-09-16 16:20:22 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2014-09-16 16:20:22 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2014-09-16 16:20:22 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2014-09-16 16:20:22 ----A---- C:\Windows\system32\spwizres.dll
2014-09-16 16:20:22 ----A---- C:\Windows\system32\pifmgr.dll
2014-09-16 16:20:22 ----A---- C:\Windows\system32\BlbEvents.dll
2014-09-16 16:20:08 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2014-09-16 16:20:08 ----A---- C:\Windows\system32\dpx.dll
2014-09-16 16:19:50 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2014-09-16 16:17:45 ----A---- C:\Windows\system32\wbemcomn.dll
2014-09-15 19:16:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-09-15 19:16:53 ----A---- C:\Windows\system32\poqexec.exe
2014-09-13 12:40:09 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-09-13 12:31:14 ----D---- C:\ProgramData\smdmf
2014-09-13 12:29:55 ----D---- C:\Program Files (x86)\MediaHuman
2014-09-13 00:38:55 ----SD---- C:\Windows\system32\CompatTel
2014-09-13 00:35:46 ----D---- C:\Program Files (x86)\MSXML 4.0
2014-09-13 00:35:03 ----A---- C:\Windows\system32\browserchoice.exe
2014-09-12 13:24:15 ----D---- C:\ProgramData\ATI
2014-09-12 13:17:53 ----D---- C:\Users\Feri\AppData\Roaming\library_dir
2014-09-12 13:14:20 ----D---- C:\ProgramData\AMD
2014-09-12 13:14:19 ----D---- C:\Program Files (x86)\AMD AVT
2014-09-12 13:12:14 ----D---- C:\Program Files\AMD
2014-09-12 13:11:27 ----D---- C:\Program Files\Common Files\ATI Technologies
2014-09-12 13:11:08 ----D---- C:\ProgramData\Package Cache
2014-09-12 13:10:23 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-09-12 13:09:05 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-09-12 13:07:36 ----D---- C:\Program Files\ATI Technologies
2014-09-12 13:06:21 ----D---- C:\AMD
2014-09-12 12:52:00 ----D---- C:\Program Files (x86)\HELP
2014-09-12 12:36:56 ----D---- C:\ProgramData\Electronic Arts
2014-09-12 03:01:27 ----D---- C:\ProgramData\Recovery
2014-09-11 22:26:20 ----D---- C:\Program Files (x86)\Counter-Strike 1.6
2014-09-11 19:43:03 ----D---- C:\ProgramData\Origin
2014-09-11 19:15:59 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-09-11 19:15:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-09-11 19:15:59 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-09-11 19:15:59 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-09-11 19:15:59 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-09-11 19:15:59 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-09-11 19:15:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-09-11 19:15:58 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-09-11 19:15:56 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-09-11 19:15:56 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-09-11 19:15:55 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-09-11 19:15:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-09-11 19:15:55 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-09-11 19:15:55 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-09-11 19:15:55 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-09-11 19:15:55 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-09-11 19:15:54 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-09-11 19:15:54 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-09-11 19:15:53 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-09-11 19:15:53 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-09-11 19:15:53 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-09-11 19:15:53 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-09-11 19:15:52 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-09-11 19:15:52 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-09-11 19:15:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-09-11 19:15:51 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-09-11 19:15:49 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-09-11 19:15:49 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-09-11 19:15:48 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-09-11 19:15:47 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-09-11 19:15:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-09-11 19:15:47 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-09-11 19:15:47 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-09-11 19:15:46 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-09-11 19:15:46 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-09-11 19:15:45 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-09-11 19:15:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-09-11 19:15:45 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-09-11 19:15:45 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-09-11 19:15:45 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-09-11 19:15:45 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-09-11 19:15:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-09-11 19:15:44 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-09-11 19:15:43 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-09-11 19:15:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-09-11 19:15:43 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-09-11 19:15:43 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-09-11 19:15:42 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-09-11 19:15:42 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-09-11 19:15:42 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-09-11 19:15:42 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-09-11 19:15:42 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-09-11 19:15:42 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-09-11 19:15:41 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-09-11 19:15:41 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-09-11 19:15:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-09-11 19:15:40 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-09-11 19:15:39 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-09-11 19:15:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-09-11 19:15:39 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-09-11 19:15:39 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-09-11 19:15:38 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-09-11 19:15:38 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-09-11 19:15:37 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-09-11 19:15:36 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-09-11 19:15:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-09-11 19:15:36 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-09-11 19:15:36 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-09-11 19:15:35 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-09-11 19:15:35 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-09-11 19:15:34 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-09-11 19:15:34 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-09-11 19:15:33 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-09-11 19:15:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-09-11 19:15:33 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-09-11 19:15:33 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-09-11 19:15:32 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-09-11 19:15:32 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-09-11 19:15:31 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-09-11 19:15:31 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-09-11 19:15:30 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-09-11 19:15:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-09-11 19:15:30 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-09-11 19:15:30 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-09-11 19:15:29 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-09-11 19:15:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-09-11 19:15:29 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-09-11 19:15:29 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-09-11 19:15:28 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-09-11 19:15:28 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-09-11 19:15:27 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-09-11 19:15:27 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-09-11 19:15:26 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-09-11 19:15:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-09-11 19:15:26 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-09-11 19:15:26 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-09-11 19:15:25 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-09-11 19:15:25 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-09-11 19:15:24 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-09-11 19:15:24 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-09-11 19:15:23 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-09-11 19:15:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-09-11 19:15:23 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-09-11 19:15:23 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-09-11 19:15:22 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-09-11 19:15:22 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-09-11 19:15:21 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-09-11 19:15:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-09-11 19:15:21 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-09-11 19:15:21 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-09-11 19:15:20 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-09-11 19:15:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-09-11 19:15:20 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-09-11 19:15:20 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-09-11 19:15:18 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-09-11 19:15:18 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-09-11 19:15:18 ----A---- C:\Windows\system32\xinput1_3.dll
2014-09-11 19:15:18 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-09-11 19:15:17 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-09-11 19:15:17 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-09-11 19:15:15 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-09-11 19:15:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-09-11 19:15:15 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-09-11 19:15:15 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-09-11 19:15:13 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-09-11 19:15:13 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-09-11 19:15:13 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-09-11 19:15:13 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-09-11 19:15:12 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-09-11 19:15:12 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-09-11 19:15:11 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-09-11 19:15:11 ----A---- C:\Windows\system32\d3dx10.dll
2014-09-11 19:15:09 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-09-11 19:15:09 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-09-11 19:15:09 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-09-11 19:15:09 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-09-11 19:15:07 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-09-11 19:15:06 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-09-11 19:15:06 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-09-11 19:15:06 ----A---- C:\Windows\system32\xinput1_2.dll
2014-09-11 19:15:06 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-09-11 19:15:05 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-09-11 19:15:05 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-09-11 19:15:05 ----A---- C:\Windows\system32\xinput1_1.dll
2014-09-11 19:15:05 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-09-11 19:15:04 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-09-11 19:15:04 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-09-11 19:14:59 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-09-11 19:14:59 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-09-11 19:14:58 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-09-11 19:14:58 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-09-11 19:14:58 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-09-11 19:14:58 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-09-11 19:14:56 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-09-11 19:14:56 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-09-11 19:14:55 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-09-11 19:14:55 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-09-11 19:14:54 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-09-11 19:14:54 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-09-11 19:14:53 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-09-11 19:14:53 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-09-11 19:14:52 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-09-11 19:14:52 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-09-11 19:14:50 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-09-11 19:14:50 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-09-11 19:02:33 ----D---- C:\Program Files (x86)\FIFA 14
2014-09-11 19:00:14 ----D---- C:\Users\Feri\AppData\Roaming\AVAST Software
2014-09-11 18:55:26 ----D---- C:\Program Files (x86)\Google
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswsp.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-09-11 18:55:08 ----A---- C:\Windows\system32\aswBoot.exe
2014-09-11 18:55:01 ----A---- C:\Windows\avastSS.scr
2014-09-11 18:52:47 ----D---- C:\Feri
2014-09-11 18:47:42 ----D---- C:\Program Files\AVAST Software
2014-09-11 18:46:43 ----D---- C:\ProgramData\AVAST Software
2014-09-11 18:03:08 ----D---- C:\Program Files (x86)\Adobe
2014-09-11 17:58:30 ----D---- C:\Users\Feri\AppData\Roaming\Macromedia
2014-09-11 17:58:30 ----D---- C:\Users\Feri\AppData\Roaming\Adobe
2014-09-11 17:58:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-09-11 17:58:16 ----D---- C:\Windows\system32\Macromed
2014-09-11 17:51:05 ----D---- C:\Users\Feri\AppData\Roaming\vlc
2014-09-11 17:50:45 ----D---- C:\Program Files (x86)\VideoLAN
2014-09-11 17:43:20 ----N---- C:\Windows\system32\MpSigStub.exe
2014-09-11 17:40:06 ----D---- C:\Users\Feri\AppData\Roaming\WinRAR
2014-09-11 17:40:00 ----D---- C:\Program Files\WinRAR
2014-09-11 17:39:20 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-09-11 17:39:20 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-09-11 17:38:48 ----D---- C:\Users\Feri\AppData\Roaming\Winamp
2014-09-11 17:38:48 ----D---- C:\Program Files (x86)\Winamp
2014-09-11 17:37:56 ----D---- C:\Users\Feri\AppData\Roaming\uTorrent
2014-09-11 17:37:03 ----D---- C:\Program Files (x86)\PANDORA.TV
2014-09-11 17:36:54 ----D---- C:\Program Files (x86)\The KMPlayer
2014-09-11 17:35:11 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2014-09-11 17:35:06 ----D---- C:\Users\Feri\AppData\Roaming\DAEMON Tools Lite
2014-09-11 17:35:05 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-09-11 17:34:29 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-09-11 17:34:20 ----D---- C:\Program Files\CCleaner
2014-09-11 17:32:57 ----D---- C:\Users\Feri\AppData\Roaming\Mozilla
2014-09-11 17:32:52 ----D---- C:\ProgramData\Mozilla
2014-09-11 17:32:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-11 17:20:53 ----D---- C:\Users\Feri\AppData\Roaming\HpUpdate
2014-09-11 17:16:52 ----D---- C:\Users\Feri\AppData\Roaming\ATI
2014-09-11 17:16:46 ----D---- C:\Downloads
2014-09-11 17:15:30 ----D---- C:\Users\Feri\AppData\Roaming\Identities
2014-09-11 17:15:18 ----D---- C:\Users\Feri\AppData\Roaming\hpqlog
2014-09-11 17:12:53 ----D---- C:\Users\Feri\AppData\Roaming\Hewlett-Packard
2014-09-11 17:10:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-09-11 17:10:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-09-11 17:09:50 ----D---- C:\Program Files (x86)\Microsoft
2014-09-11 17:09:27 ----D---- C:\Program Files (x86)\Windows Live SkyDrive
2014-09-11 17:09:22 ----D---- C:\Program Files (x86)\Windows Live
2014-09-11 17:06:25 ----D---- C:\ProgramData\Adobe
2014-09-11 17:05:36 ----D---- C:\Users\Feri\AppData\Roaming\DigitalPersona
2014-09-11 17:05:19 ----SD---- C:\Users\Feri\AppData\Roaming\Microsoft
2014-09-11 17:05:19 ----D---- C:\Users\Feri\AppData\Roaming\Media Center Programs
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Šablony
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Plocha
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Oblíbené položky
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Nabídka Start
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Dokumenty
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Data aplikací
2014-09-11 17:02:22 ----SHD---- C:\System Volume Information
2014-09-11 17:02:22 ----ASH---- C:\pagefile.sys
2014-09-11 17:02:14 ----ASH---- C:\hiberfil.sys
======List of files/folders modified in the last 1 month======
2014-09-19 01:38:55 ----D---- C:\Windows\Temp
2014-09-19 01:38:50 ----RD---- C:\Program Files
2014-09-19 01:27:59 ----D---- C:\Windows\Microsoft.NET
2014-09-19 01:21:59 ----D---- C:\Windows\system32\config
2014-09-19 01:16:36 ----D---- C:\Windows\System32
2014-09-19 01:16:36 ----D---- C:\Windows\inf
2014-09-19 01:16:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-09-19 01:16:06 ----D---- C:\Windows\Tasks
2014-09-19 01:16:06 ----D---- C:\Windows\system32\Tasks
2014-09-19 01:15:53 ----HD---- C:\ProgramData
2014-09-19 01:15:19 ----SHD---- C:\Windows\Installer
2014-09-19 01:14:59 ----D---- C:\Program Files (x86)
2014-09-19 01:10:20 ----D---- C:\Windows\SoftwareDistribution
2014-09-19 01:09:32 ----D---- C:\Windows
2014-09-19 01:09:28 ----A---- C:\Windows\SYSWOW64\log.txt
2014-09-19 01:08:36 ----D---- C:\Windows\Panther
2014-09-19 01:08:30 ----D---- C:\Windows\Logs
2014-09-19 01:08:30 ----D---- C:\Windows\debug
2014-09-19 01:04:38 ----D---- C:\Windows\system32\drivers
2014-09-19 01:04:29 ----AD---- C:\ProgramData\Temp
2014-09-19 01:03:59 ----D---- C:\Windows\SysWOW64
2014-09-19 01:01:18 ----D---- C:\Windows\system32\wdi
2014-09-19 00:32:22 ----A---- C:\Windows\win.ini
2014-09-18 20:36:50 ----D---- C:\Windows\system32\DriverStore
2014-09-18 17:34:57 ----HD---- C:\Windows\system32\GroupPolicy
2014-09-18 17:34:57 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-09-18 14:36:57 ----D---- C:\Windows\winsxs
2014-09-18 14:35:26 ----D---- C:\Windows\SYSWOW64\en-US
2014-09-18 14:35:25 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-09-18 14:35:25 ----D---- C:\Windows\system32\sk-SK
2014-09-18 14:35:25 ----D---- C:\Windows\system32\en-US
2014-09-18 14:29:21 ----SD---- C:\ProgramData\Microsoft
2014-09-18 14:27:50 ----D---- C:\Windows\system32\catroot2
2014-09-18 14:27:50 ----D---- C:\Windows\system32\catroot
2014-09-18 14:17:16 ----D---- C:\Windows\Prefetch
2014-09-18 13:57:28 ----D---- C:\Windows\system32\drivers\UMDF
2014-09-18 12:23:53 ----RSD---- C:\Windows\assembly
2014-09-18 12:06:10 ----D---- C:\Program Files (x86)\Windows Media Player
2014-09-18 12:06:09 ----D---- C:\Windows\ehome
2014-09-18 12:06:09 ----D---- C:\Program Files\Windows Media Player
2014-09-18 12:06:08 ----D---- C:\Program Files\Common Files\System
2014-09-18 12:06:06 ----D---- C:\Windows\PolicyDefinitions
2014-09-18 12:06:06 ----D---- C:\Program Files\Internet Explorer
2014-09-18 12:06:06 ----D---- C:\Program Files (x86)\Internet Explorer
2014-09-18 12:06:04 ----D---- C:\Windows\SYSWOW64\migration
2014-09-18 12:06:00 ----D---- C:\Windows\system32\migration
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\it-IT
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\el-GR
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\es-ES
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\de-DE
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\da-DK
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-09-18 12:05:55 ----D---- C:\Windows\system32\pt-PT
2014-09-18 12:05:55 ----D---- C:\Windows\system32\pt-BR
2014-09-18 12:05:55 ----D---- C:\Windows\system32\pl-PL
2014-09-18 12:05:55 ----D---- C:\Windows\system32\ko-KR
2014-09-18 12:05:55 ----D---- C:\Windows\system32\it-IT
2014-09-18 12:05:55 ----D---- C:\Windows\system32\hu-HU
2014-09-18 12:05:54 ----D---- C:\Windows\system32\zh-TW
2014-09-18 12:05:54 ----D---- C:\Windows\system32\zh-HK
2014-09-18 12:05:54 ----D---- C:\Windows\system32\zh-CN
2014-09-18 12:05:54 ----D---- C:\Windows\system32\tr-TR
2014-09-18 12:05:54 ----D---- C:\Windows\system32\sv-SE
2014-09-18 12:05:54 ----D---- C:\Windows\system32\ru-RU
2014-09-18 12:05:54 ----D---- C:\Windows\system32\nl-NL
2014-09-18 12:05:54 ----D---- C:\Windows\system32\ja-JP
2014-09-18 12:05:54 ----D---- C:\Windows\system32\fr-FR
2014-09-18 12:05:54 ----D---- C:\Windows\system32\fi-FI
2014-09-18 12:05:54 ----D---- C:\Windows\system32\es-ES
2014-09-18 12:05:54 ----D---- C:\Windows\system32\el-GR
2014-09-18 12:05:54 ----D---- C:\Windows\system32\de-DE
2014-09-18 12:05:54 ----D---- C:\Windows\system32\cs-CZ
2014-09-18 12:05:53 ----D---- C:\Windows\system32\nb-NO
2014-09-18 12:05:53 ----D---- C:\Windows\system32\da-DK
2014-09-18 12:05:52 ----D---- C:\Windows\AppPatch
2014-09-18 12:05:37 ----D---- C:\Windows\SYSWOW64\Dism
2014-09-18 12:05:36 ----D---- C:\Windows\system32\drivers\en-US
2014-09-18 12:05:36 ----D---- C:\Windows\system32\Dism
2014-09-18 12:05:35 ----RSD---- C:\Windows\Fonts
2014-09-18 12:05:34 ----D---- C:\Program Files\Windows Defender
2014-09-18 12:05:34 ----D---- C:\Program Files (x86)\Windows Defender
2014-09-18 12:05:30 ----D---- C:\Windows\system32\wbem
2014-09-18 12:05:01 ----D---- C:\Windows\system32\Boot
2014-09-18 02:23:26 ----D---- C:\Windows\rescache
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Sidebar
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Mail
2014-09-17 16:37:21 ----D---- C:\Program Files\Windows Sidebar
2014-09-17 16:37:21 ----D---- C:\Program Files\Windows Mail
2014-09-17 16:37:21 ----D---- C:\Program Files\DVD Maker
2014-09-17 16:37:20 ----D---- C:\Program Files\Windows Portable Devices
2014-09-17 16:37:20 ----D---- C:\Program Files\Windows Photo Viewer
2014-09-17 16:37:19 ----D---- C:\Windows\servicing
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\Setup
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\oobe
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\en
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2014-09-17 16:37:07 ----D---- C:\Windows\SYSWOW64\wbem
2014-09-17 16:37:07 ----D---- C:\Windows\SYSWOW64\sppui
2014-09-17 16:37:07 ----D---- C:\Windows\SYSWOW64\manifeststore
2014-09-17 16:37:06 ----D---- C:\Windows\SYSWOW64\migwiz
2014-09-17 16:36:32 ----D---- C:\Windows\system32\oobe
2014-09-17 16:36:32 ----D---- C:\Windows\system32\AdvancedInstallers
2014-09-17 16:36:31 ----D---- C:\Windows\system32\sppui
2014-09-17 16:36:31 ----D---- C:\Windows\system32\Setup
2014-09-17 16:36:31 ----D---- C:\Windows\system32\manifeststore
2014-09-17 16:36:27 ----D---- C:\Windows\system32\migwiz
2014-09-16 17:52:18 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2014-09-16 17:52:18 ----A---- C:\Windows\system32\msclmd.dll
2014-09-13 00:38:50 ----D---- C:\Windows\SYSWOW64\winrm
2014-09-13 00:38:50 ----D---- C:\Windows\SYSWOW64\slmgr
2014-09-13 00:38:50 ----D---- C:\Windows\SYSWOW64\cs
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\WCN
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\MUI
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\DriverStore
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\drivers
2014-09-13 00:38:42 ----D---- C:\Windows\SYSWOW64\com
2014-09-13 00:38:42 ----D---- C:\Windows\system32\winrm
2014-09-13 00:38:42 ----D---- C:\Windows\system32\sysprep
2014-09-13 00:38:42 ----D---- C:\Windows\system32\slmgr
2014-09-13 00:38:42 ----D---- C:\Windows\system32\cs
2014-09-13 00:38:42 ----D---- C:\Windows\IME
2014-09-13 00:38:34 ----D---- C:\Windows\system32\WCN
2014-09-13 00:38:34 ----D---- C:\Windows\system32\MUI
2014-09-13 00:38:29 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2014-09-13 00:38:28 ----D---- C:\Windows\system32\com
2014-09-13 00:38:14 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2014-09-13 00:38:10 ----D---- C:\Windows\en-US
2014-09-13 00:38:06 ----D---- C:\Windows\Speech
2014-09-12 13:14:18 ----D---- C:\Program Files (x86)\Common Files
2014-09-12 13:14:15 ----D---- C:\Program Files (x86)\ATI Technologies
2014-09-12 13:11:27 ----D---- C:\Program Files\Common Files
2014-09-11 17:28:59 ----D---- C:\Program Files (x86)\Downloaded Installations
2014-09-11 17:27:53 ----D---- C:\Program Files\Hewlett-Packard
2014-09-11 17:27:09 ----RD---- C:\Program Files (x86)\Online Services
2014-09-11 17:23:48 ----D---- C:\ProgramData\Norton
2014-09-11 17:20:45 ----D---- C:\ProgramData\Microsoft Help
2014-09-11 17:20:43 ----D---- C:\Program Files (x86)\Microsoft Office
2014-09-11 17:20:42 ----D---- C:\Program Files (x86)\Microsoft Works
2014-09-11 17:19:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-09-11 17:18:27 ----D---- C:\Program Files (x86)\HP Games
2014-09-11 17:18:24 ----D---- C:\ProgramData\WildTangent
2014-09-11 17:15:28 ----SHD---- C:\$Recycle.Bin
2014-09-11 17:15:22 ----D---- C:\SwSetup
2014-09-11 17:11:43 ----HD---- C:\SYSTEM.SAV
2014-09-11 17:11:43 ----D---- C:\Windows\system32\restore
2014-09-11 17:11:39 ----SHD---- C:\Recovery
2014-09-11 17:11:39 ----D---- C:\Windows\system32\Recovery
2014-09-11 17:05:16 ----RD---- C:\Users
2014-09-11 17:04:59 ----D---- C:\Program Files\Windows NT
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-09-11 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-09-11 224896]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-09-11 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-09-11 1041168]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-09-11 427360]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-09-11 283200]
R1 DVMIO;DeviceVM IO Service; C:\Windows\system32\DRIVERS\dvmio.sys [2010-01-29 20056]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-09-11 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-09-11 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-09-11 92008]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 41272]
R3 ALSysIO;ALSysIO; \??\C:\Users\Feri\AppData\Local\Temp\ALSysIO64.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 15376384]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 638976]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-12-19 94720]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-05-01 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-01-22 8034368]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-28 295424]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-01-14 505856]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-04-10 315440]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-09-30 121872]
S3 AVerAF35;HP USB DVB-T TV Tuner; C:\Windows\System32\Drivers\HPAF35.sys [2009-10-19 511104]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-07 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2010-01-07 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-01-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-07 21160]
S3 HPIR;HP TV Tuner Infrared Receiver; C:\Windows\system32\DRIVERS\HPIR.sys [2009-09-24 94208]
S3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-01-22 8034368]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-12 232992]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 239616]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-09-11 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-12-29 873248]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2009-12-30 444680]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-01-25 514232]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2009-10-15 120832]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2009-12-16 102968]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 30520]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-01-22 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-01 325656]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe [2010-01-14 244736]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-01 2533400]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-01-06 2184496]
R3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2009-12-17 230968]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-19 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-11 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-11 267440]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-19 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-11 116648]
S3 hpdoccardsvc;HP Documention Flash Card Detection Service; C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\doccardsvc.exe [2010-03-24 83240]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-18 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-13 114288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-09-18 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
2014-09-16 16:22:06 ----A---- C:\Windows\system32\imapi2.dll
2014-09-16 16:22:06 ----A---- C:\Windows\system32\bcryptprimitives.dll
2014-09-16 16:22:05 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-09-16 16:22:05 ----A---- C:\Windows\system32\inetpp.dll
2014-09-16 16:22:05 ----A---- C:\Windows\system32\drivers\udfs.sys
2014-09-16 16:22:05 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2014-09-16 16:22:04 ----A---- C:\Windows\SYSWOW64\azroles.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\tcpipcfg.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\spp.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\QSHVHOST.DLL
2014-09-16 16:22:04 ----A---- C:\Windows\system32\netid.dll
2014-09-16 16:22:04 ----A---- C:\Windows\system32\biocpl.dll
2014-09-16 16:22:03 ----A---- C:\Windows\SYSWOW64\themeui.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\scansetting.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\printui.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\mspbda.dll
2014-09-16 16:22:03 ----A---- C:\Windows\system32\msinfo32.exe
2014-09-16 16:22:02 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2014-09-16 16:22:02 ----A---- C:\Windows\SYSWOW64\spp.dll
2014-09-16 16:22:02 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2014-09-16 16:22:02 ----A---- C:\Windows\system32\wusa.exe
2014-09-16 16:22:02 ----A---- C:\Windows\system32\vds.exe
2014-09-16 16:22:02 ----A---- C:\Windows\system32\pla.dll
2014-09-16 16:22:02 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2014-09-16 16:22:02 ----A---- C:\Windows\system32\msdri.dll
2014-09-16 16:22:02 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2014-09-16 16:22:02 ----A---- C:\Windows\system32\aitagent.exe
2014-09-16 16:22:01 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2014-09-16 16:22:01 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\wiaservc.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\rpchttp.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\mscms.dll
2014-09-16 16:22:01 ----A---- C:\Windows\system32\drivers\pci.sys
2014-09-16 16:22:00 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2014-09-16 16:22:00 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2014-09-16 16:22:00 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2014-09-16 16:22:00 ----A---- C:\Windows\system32\XpsRasterService.dll
2014-09-16 16:22:00 ----A---- C:\Windows\system32\wisptis.exe
2014-09-16 16:22:00 ----A---- C:\Windows\system32\PkgMgr.exe
2014-09-16 16:22:00 ----A---- C:\Windows\system32\ocsetup.exe
2014-09-16 16:22:00 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2014-09-16 16:22:00 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2014-09-16 16:21:59 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2014-09-16 16:21:59 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-09-16 16:21:59 ----A---- C:\Windows\SYSWOW64\calc.exe
2014-09-16 16:21:59 ----A---- C:\Windows\system32\sppwinob.dll
2014-09-16 16:21:59 ----A---- C:\Windows\system32\ocsetapi.dll
2014-09-16 16:21:59 ----A---- C:\Windows\system32\DXP.dll
2014-09-16 16:21:58 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\wpdbusenum.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\wcncsvc.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\mprapi.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\eapp3hst.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\drivers\volmgr.sys
2014-09-16 16:21:58 ----A---- C:\Windows\system32\drivers\msdsm.sys
2014-09-16 16:21:58 ----A---- C:\Windows\system32\ci.dll
2014-09-16 16:21:58 ----A---- C:\Windows\system32\cfgmgr32.dll
2014-09-16 16:21:57 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\upnp.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\t2embed.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\Robocopy.exe
2014-09-16 16:21:57 ----A---- C:\Windows\system32\eapphost.dll
2014-09-16 16:21:57 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\sxs.dll
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\stobject.dll
2014-09-16 16:21:56 ----A---- C:\Windows\SYSWOW64\netshell.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\thumbcache.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\scecli.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2014-09-16 16:21:56 ----A---- C:\Windows\system32\hal.dll
2014-09-16 16:21:56 ----A---- C:\Windows\system32\DxpTaskSync.dll
2014-09-16 16:21:55 ----A---- C:\Windows\SYSWOW64\prncache.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\puiobj.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\msasn1.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\iasrad.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\dwmredir.dll
2014-09-16 16:21:55 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2014-09-16 16:21:55 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2014-09-16 16:21:54 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2014-09-16 16:21:54 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2014-09-16 16:21:54 ----A---- C:\Windows\SYSWOW64\printui.dll
2014-09-16 16:21:54 ----A---- C:\Windows\system32\themeui.dll
2014-09-16 16:21:54 ----A---- C:\Windows\system32\onex.dll
2014-09-16 16:21:54 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2014-09-16 16:21:53 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2014-09-16 16:21:53 ----A---- C:\Windows\SYSWOW64\net1.exe
2014-09-16 16:21:52 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\wlangpui.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\wdc.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\scesrv.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\rasmans.dll
2014-09-16 16:21:52 ----A---- C:\Windows\system32\msftedit.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\wiadefui.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\VAN.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\StructuredQuery.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\sdengin2.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\netcenter.dll
2014-09-16 16:21:51 ----A---- C:\Windows\system32\dskquoui.dll
2014-09-16 16:21:50 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2014-09-16 16:21:50 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2014-09-16 16:21:50 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\wscapi.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\SndVol.exe
2014-09-16 16:21:50 ----A---- C:\Windows\system32\samcli.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\regapi.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\iasacct.dll
2014-09-16 16:21:50 ----A---- C:\Windows\system32\drivers\termdd.sys
2014-09-16 16:21:50 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2014-09-16 16:21:49 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2014-09-16 16:21:49 ----A---- C:\Windows\system32\TabSvc.dll
2014-09-16 16:21:49 ----A---- C:\Windows\system32\srchadmin.dll
2014-09-16 16:21:49 ----A---- C:\Windows\system32\QUTIL.DLL
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\webservices.dll
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2014-09-16 16:21:48 ----A---- C:\Windows\SYSWOW64\fde.dll
2014-09-16 16:21:48 ----A---- C:\Windows\system32\wksprt.exe
2014-09-16 16:21:48 ----A---- C:\Windows\system32\setupcl.exe
2014-09-16 16:21:48 ----A---- C:\Windows\system32\rastls.dll
2014-09-16 16:21:48 ----A---- C:\Windows\system32\drivers\msahci.sys
2014-09-16 16:21:47 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2014-09-16 16:21:47 ----A---- C:\Windows\system32\tapisrv.dll
2014-09-16 16:21:47 ----A---- C:\Windows\system32\netiohlp.dll
2014-09-16 16:21:47 ----A---- C:\Windows\system32\drivers\acpi.sys
2014-09-16 16:21:46 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2014-09-16 16:21:46 ----A---- C:\Windows\SYSWOW64\pla.dll
2014-09-16 16:21:46 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\msconfig.exe
2014-09-16 16:21:46 ----A---- C:\Windows\system32\mimefilt.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\lsmproxy.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\ListSvc.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\hgcpl.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\drivers\raspptp.sys
2014-09-16 16:21:46 ----A---- C:\Windows\system32\drivers\ks.sys
2014-09-16 16:21:46 ----A---- C:\Windows\system32\clusapi.dll
2014-09-16 16:21:46 ----A---- C:\Windows\system32\basecsp.dll
2014-09-16 16:21:45 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-09-16 16:21:45 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2014-09-16 16:21:45 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-09-16 16:21:45 ----A---- C:\Windows\system32\fdeploy.dll
2014-09-16 16:21:45 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2014-09-16 16:21:45 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2014-09-16 16:21:44 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2014-09-16 16:21:44 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2014-09-16 16:21:44 ----A---- C:\Windows\system32\WFS.exe
2014-09-16 16:21:44 ----A---- C:\Windows\system32\riched20.dll
2014-09-16 16:21:44 ----A---- C:\Windows\system32\mtxclu.dll
2014-09-16 16:21:44 ----A---- C:\Windows\system32\dnscmmc.dll
2014-09-16 16:21:43 ----A---- C:\Windows\system32\RpcRtRemote.dll
2014-09-16 16:21:43 ----A---- C:\Windows\system32\powercpl.dll
2014-09-16 16:21:43 ----A---- C:\Windows\system32\logoncli.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\winmm.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2014-09-16 16:21:42 ----A---- C:\Windows\SYSWOW64\onex.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\themecpl.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\sharemediacpl.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\SensorsCpl.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\nci.dll
2014-09-16 16:21:42 ----A---- C:\Windows\system32\eudcedit.exe
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\autochk.exe
2014-09-16 16:21:41 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2014-09-16 16:21:41 ----A---- C:\Windows\system32\netjoin.dll
2014-09-16 16:21:41 ----A---- C:\Windows\system32\Narrator.exe
2014-09-16 16:21:41 ----A---- C:\Windows\system32\Faultrep.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\samcli.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\proquota.exe
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\msutb.dll
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2014-09-16 16:21:40 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\wkssvc.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\vpnikeapi.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\sppcomapi.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\cabview.dll
2014-09-16 16:21:40 ----A---- C:\Windows\system32\autochk.exe
2014-09-16 16:21:40 ----A---- C:\Windows\system32\autofmt.exe
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\regapi.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2014-09-16 16:21:39 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\shsetup.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\nshipsec.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\fms.dll
2014-09-16 16:21:39 ----A---- C:\Windows\system32\autoconv.exe
2014-09-16 16:21:39 ----A---- C:\Windows\system32\audiodg.exe
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2014-09-16 16:21:38 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\wwanconn.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\wpd_ci.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\wlanui.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\sdclt.exe
2014-09-16 16:21:38 ----A---- C:\Windows\system32\prntvpt.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\mscorier.dll
2014-09-16 16:21:38 ----A---- C:\Windows\system32\drivers\winusb.sys
2014-09-16 16:21:38 ----A---- C:\Windows\system32\drivers\wanarp.sys
2014-09-16 16:21:38 ----A---- C:\Windows\system32\drivers\scsiport.sys
2014-09-16 16:21:38 ----A---- C:\Windows\system32\bcdsrv.dll
2014-09-16 16:21:37 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2014-09-16 16:21:37 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2014-09-16 16:21:37 ----A---- C:\Windows\system32\SmiEngine.dll
2014-09-16 16:21:37 ----A---- C:\Windows\system32\fontext.dll
2014-09-16 16:21:37 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2014-09-16 16:21:37 ----A---- C:\Windows\system32\dps.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\wdc.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\netid.dll
2014-09-16 16:21:36 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\mprddm.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\mblctr.exe
2014-09-16 16:21:36 ----A---- C:\Windows\system32\Display.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\batmeter.dll
2014-09-16 16:21:36 ----A---- C:\Windows\system32\AxInstSv.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\Vault.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\untfs.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-09-16 16:21:35 ----A---- C:\Windows\SYSWOW64\nci.dll
2014-09-16 16:21:35 ----A---- C:\Windows\system32\wmpsrcwp.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2014-09-16 16:21:34 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2014-09-16 16:21:34 ----A---- C:\Windows\system32\usercpl.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\rtutils.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\provsvc.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\DiagCpl.dll
2014-09-16 16:21:34 ----A---- C:\Windows\system32\bootres.dll
2014-09-16 16:21:33 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2014-09-16 16:21:33 ----A---- C:\Windows\system32\wpccpl.dll
2014-09-16 16:21:33 ----A---- C:\Windows\system32\sppsvc.exe
2014-09-16 16:21:33 ----A---- C:\Windows\system32\rasppp.dll
2014-09-16 16:21:33 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2014-09-16 16:21:32 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2014-09-16 16:21:32 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2014-09-16 16:21:32 ----A---- C:\Windows\SYSWOW64\Display.dll
2014-09-16 16:21:32 ----A---- C:\Windows\system32\SndVolSSO.dll
2014-09-16 16:21:32 ----A---- C:\Windows\system32\dxdiagn.dll
2014-09-16 16:21:32 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2014-09-16 16:21:32 ----A---- C:\Windows\system32\dot3cfg.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\userinit.exe
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2014-09-16 16:21:31 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2014-09-16 16:21:31 ----A---- C:\Windows\system32\taskmgr.exe
2014-09-16 16:21:31 ----A---- C:\Windows\system32\proquota.exe
2014-09-16 16:21:31 ----A---- C:\Windows\system32\prnfldr.dll
2014-09-16 16:21:31 ----A---- C:\Windows\system32\pdh.dll
2014-09-16 16:21:31 ----A---- C:\Windows\system32\hbaapi.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2014-09-16 16:21:30 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2014-09-16 16:21:30 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2014-09-16 16:21:30 ----A---- C:\Windows\system32\untfs.dll
2014-09-16 16:21:30 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2014-09-16 16:21:30 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2014-09-16 16:21:29 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2014-09-16 16:21:29 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2014-09-16 16:21:29 ----A---- C:\Windows\SYSWOW64\cabview.dll
2014-09-16 16:21:29 ----A---- C:\Windows\system32\userinit.exe
2014-09-16 16:21:29 ----A---- C:\Windows\system32\accessibilitycpl.dll
2014-09-16 16:21:28 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2014-09-16 16:21:28 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2014-09-16 16:21:28 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2014-09-16 16:21:28 ----A---- C:\Windows\system32\zipfldr.dll
2014-09-16 16:21:28 ----A---- C:\Windows\system32\slui.exe
2014-09-16 16:21:27 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2014-09-16 16:21:27 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2014-09-16 16:21:27 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\scecli.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\mscms.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\localsec.dll
2014-09-16 16:21:26 ----A---- C:\Windows\SYSWOW64\fontext.dll
2014-09-16 16:21:26 ----A---- C:\Windows\system32\sud.dll
2014-09-16 16:21:26 ----A---- C:\Windows\system32\dot3svc.dll
2014-09-16 16:21:26 ----A---- C:\Windows\system32\DeviceCenter.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2014-09-16 16:21:25 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\twext.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\taskbarcpl.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\networkmap.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\cryptui.dll
2014-09-16 16:21:25 ----A---- C:\Windows\system32\ActionCenter.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\VAN.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2014-09-16 16:21:24 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\uxlib.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\recovery.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\OobeFldr.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\dsuiext.dll
2014-09-16 16:21:24 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2014-09-16 16:21:24 ----A---- C:\Windows\system32\bcdedit.exe
2014-09-16 16:21:24 ----A---- C:\Windows\system32\azroleui.dll
2014-09-16 16:21:23 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2014-09-16 16:21:23 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2014-09-16 16:21:23 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\tzutil.exe
2014-09-16 16:21:23 ----A---- C:\Windows\system32\sisbkup.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\isoburn.exe
2014-09-16 16:21:23 ----A---- C:\Windows\system32\efscore.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\cca.dll
2014-09-16 16:21:23 ----A---- C:\Windows\system32\asycfilt.dll
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2014-09-16 16:21:22 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\systemcpl.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\syncui.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\shwebsvc.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\sdcpl.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\recdisc.exe
2014-09-16 16:21:22 ----A---- C:\Windows\system32\netplwiz.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\httpapi.dll
2014-09-16 16:21:22 ----A---- C:\Windows\system32\drivers\sdbus.sys
2014-09-16 16:21:22 ----A---- C:\Windows\system32\drivers\mpio.sys
2014-09-16 16:21:22 ----A---- C:\Windows\system32\autoplay.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2014-09-16 16:21:21 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\wlanmsm.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\sysclass.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\sdrsvc.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\ncryptui.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\certcli.dll
2014-09-16 16:21:21 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\wusa.exe
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\sud.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2014-09-16 16:21:20 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\vdsutil.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\spwizeng.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\msvidc32.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\MFPlay.dll
2014-09-16 16:21:20 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2014-09-16 16:21:19 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2014-09-16 16:21:19 ----A---- C:\Windows\system32\termmgr.dll
2014-09-16 16:21:19 ----A---- C:\Windows\system32\sethc.exe
2014-09-16 16:21:19 ----A---- C:\Windows\system32\rstrui.exe
2014-09-16 16:21:19 ----A---- C:\Windows\system32\msscp.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\ftp.exe
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2014-09-16 16:21:18 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\sqlcese30.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\ReAgent.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\ntlanman.dll
2014-09-16 16:21:18 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2014-09-16 16:21:17 ----A---- C:\Windows\SYSWOW64\efscore.dll
2014-09-16 16:21:17 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\ssText3d.scr
2014-09-16 16:21:17 ----A---- C:\Windows\system32\rdpd3d.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\iyuv_32.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\iTVData.dll
2014-09-16 16:21:17 ----A---- C:\Windows\system32\iprtrmgr.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\syncui.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2014-09-16 16:21:16 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\srvcli.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\slwga.dll
2014-09-16 16:21:16 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-09-16 16:21:15 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2014-09-16 16:21:15 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2014-09-16 16:21:15 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\wavemsp.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\ntprint.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\nslookup.exe
2014-09-16 16:21:15 ----A---- C:\Windows\system32\NAPHLPR.DLL
2014-09-16 16:21:15 ----A---- C:\Windows\system32\msiexec.exe
2014-09-16 16:21:15 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2014-09-16 16:21:15 ----A---- C:\Windows\system32\acppage.dll
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\sethc.exe
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\riched20.dll
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2014-09-16 16:21:14 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-09-16 16:21:14 ----A---- C:\Windows\system32\srrstr.dll
2014-09-16 16:21:14 ----A---- C:\Windows\system32\sppnp.dll
2014-09-16 16:21:14 ----A---- C:\Windows\system32\bcdboot.exe
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\migisol.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\fms.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\dpx.dll
2014-09-16 16:21:13 ----A---- C:\Windows\SYSWOW64\activeds.dll
2014-09-16 16:21:13 ----A---- C:\Windows\system32\networkexplorer.dll
2014-09-16 16:21:13 ----A---- C:\Windows\system32\fsquirt.exe
2014-09-16 16:21:13 ----A---- C:\Windows\system32\certprop.dll
2014-09-16 16:21:13 ----A---- C:\Windows\system32\cabinet.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2014-09-16 16:21:12 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2014-09-16 16:21:12 ----A---- C:\Windows\system32\wkscli.dll
2014-09-16 16:21:12 ----A---- C:\Windows\system32\remotepg.dll
2014-09-16 16:21:12 ----A---- C:\Windows\system32\dfrgui.exe
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2014-09-16 16:21:11 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wvc.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wsqmcons.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wsnmp32.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\wmpdxm.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\WinSCard.dll
2014-09-16 16:21:11 ----A---- C:\Windows\system32\net1.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\ftp.exe
2014-09-16 16:21:11 ----A---- C:\Windows\system32\blackbox.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\wvc.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\twext.dll
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2014-09-16 16:21:10 ----A---- C:\Windows\SYSWOW64\mstask.dll
2014-09-16 16:21:10 ----A---- C:\Windows\system32\wmdrmdev.dll
2014-09-16 16:21:10 ----A---- C:\Windows\system32\WerFaultSecure.exe
2014-09-16 16:21:10 ----A---- C:\Windows\system32\msyuv.dll
2014-09-16 16:21:10 ----A---- C:\Windows\system32\mfps.dll
2014-09-16 16:21:09 ----A---- C:\Windows\twain_32.dll
2014-09-16 16:21:09 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2014-09-16 16:21:09 ----A---- C:\Windows\SYSWOW64\qcap.dll
2014-09-16 16:21:09 ----A---- C:\Windows\SYSWOW64\qasf.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\unimdmat.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-09-16 16:21:09 ----A---- C:\Windows\system32\OpcServices.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\msrle32.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\mapistub.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\mapi32.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\iscsium.dll
2014-09-16 16:21:09 ----A---- C:\Windows\system32\Bubbles.scr
2014-09-16 16:21:08 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2014-09-16 16:21:08 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2014-09-16 16:21:08 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\tsbyuv.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\seclogon.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\Ribbons.scr
2014-09-16 16:21:08 ----A---- C:\Windows\system32\Mystify.scr
2014-09-16 16:21:08 ----A---- C:\Windows\system32\ifsutil.dll
2014-09-16 16:21:08 ----A---- C:\Windows\system32\diskraid.exe
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2014-09-16 16:21:07 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2014-09-16 16:21:07 ----A---- C:\Windows\system32\muifontsetup.dll
2014-09-16 16:21:07 ----A---- C:\Windows\system32\drivers\umbus.sys
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2014-09-16 16:21:06 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\wmpshell.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2014-09-16 16:21:06 ----A---- C:\Windows\system32\rdpencom.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\perfmon.exe
2014-09-16 16:21:06 ----A---- C:\Windows\system32\netutils.dll
2014-09-16 16:21:06 ----A---- C:\Windows\system32\AzSqlExt.dll
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2014-09-16 16:21:05 ----A---- C:\Windows\SYSWOW64\acppage.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\umb.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\tlscsp.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\qasf.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2014-09-16 16:21:05 ----A---- C:\Windows\system32\FXSAPI.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\dbghelp.dll
2014-09-16 16:21:05 ----A---- C:\Windows\system32\ActionQueue.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\raschap.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\input.dll
2014-09-16 16:21:04 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\wpdwcn.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\wiavideo.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\syssetup.dll
2014-09-16 16:21:04 ----A---- C:\Windows\system32\runonce.exe
2014-09-16 16:21:04 ----A---- C:\Windows\system32\raschap.dll
2014-09-16 16:21:04 ----A---- C:\Windows\bfsvc.exe
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2014-09-16 16:21:03 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2014-09-16 16:21:03 ----A---- C:\Windows\system32\WMADMOD.DLL
2014-09-16 16:21:03 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2014-09-16 16:21:03 ----A---- C:\Windows\system32\MdSched.exe
2014-09-16 16:21:02 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2014-09-16 16:21:01 ----A---- C:\Windows\system32\WMVSDECD.DLL
2014-09-16 16:21:01 ----A---- C:\Windows\system32\vdsbas.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\runonce.exe
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\onexui.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\logagent.exe
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2014-09-16 16:21:00 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2014-09-16 16:21:00 ----A---- C:\Windows\system32\nltest.exe
2014-09-16 16:21:00 ----A---- C:\Windows\system32\mstask.dll
2014-09-16 16:21:00 ----A---- C:\Windows\system32\Mcx2Svc.dll
2014-09-16 16:21:00 ----A---- C:\Windows\system32\drivers\rmcast.sys
2014-09-16 16:21:00 ----A---- C:\Windows\system32\bitsadmin.exe
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\shacct.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2014-09-16 16:20:59 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\wmdrmnet.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\vss_ps.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\tabcal.exe
2014-09-16 16:20:59 ----A---- C:\Windows\system32\shacct.dll
2014-09-16 16:20:59 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2014-09-16 16:20:59 ----A---- C:\Windows\system32\cscapi.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2014-09-16 16:20:58 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2014-09-16 16:20:58 ----A---- C:\Windows\system32\WPDSp.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2014-09-16 16:20:58 ----A---- C:\Windows\system32\qcap.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\msnetobj.dll
2014-09-16 16:20:58 ----A---- C:\Windows\system32\logman.exe
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\pdh.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\logman.exe
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2014-09-16 16:20:57 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2014-09-16 16:20:57 ----A---- C:\Windows\system32\spbcd.dll
2014-09-16 16:20:57 ----A---- C:\Windows\system32\qdv.dll
2014-09-16 16:20:57 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\utildll.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2014-09-16 16:20:56 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2014-09-16 16:20:56 ----A---- C:\Windows\system32\takeown.exe
2014-09-16 16:20:56 ----A---- C:\Windows\system32\PnPUnattend.exe
2014-09-16 16:20:56 ----A---- C:\Windows\system32\fphc.dll
2014-09-16 16:20:56 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2014-09-16 16:20:56 ----A---- C:\Windows\system32\dot3ui.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\takeown.exe
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\fphc.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2014-09-16 16:20:55 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\vfwwdm32.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\EhStorAPI.dll
2014-09-16 16:20:55 ----A---- C:\Windows\system32\amstream.dll
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2014-09-16 16:20:54 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2014-09-16 16:20:54 ----A---- C:\Windows\system32\shimgvw.dll
2014-09-16 16:20:54 ----A---- C:\Windows\system32\QCLIPROV.DLL
2014-09-16 16:20:54 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2014-09-16 16:20:54 ----A---- C:\Windows\system32\djoin.exe
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\qdv.dll
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-09-16 16:20:53 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2014-09-16 16:20:53 ----A---- C:\Windows\system32\nrpsrv.dll
2014-09-16 16:20:53 ----A---- C:\Windows\system32\iasrecst.dll
2014-09-16 16:20:53 ----A---- C:\Windows\system32\cmstp.exe
2014-09-16 16:20:53 ----A---- C:\Windows\system32\CertPolEng.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2014-09-16 16:20:52 ----A---- C:\Windows\SYSWOW64\cca.dll
2014-09-16 16:20:52 ----A---- C:\Windows\system32\WavDest.dll
2014-09-16 16:20:52 ----A---- C:\Windows\system32\MultiDigiMon.exe
2014-09-16 16:20:52 ----A---- C:\Windows\system32\KMSVC.DLL
2014-09-16 16:20:52 ----A---- C:\Windows\system32\fdProxy.dll
2014-09-16 16:20:52 ----A---- C:\Windows\system32\drivers\pacer.sys
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2014-09-16 16:20:51 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2014-09-16 16:20:51 ----A---- C:\Windows\system32\sscore.dll
2014-09-16 16:20:51 ----A---- C:\Windows\system32\relog.exe
2014-09-16 16:20:51 ----A---- C:\Windows\system32\mydocs.dll
2014-09-16 16:20:51 ----A---- C:\Windows\system32\mobsync.exe
2014-09-16 16:20:51 ----A---- C:\Windows\system32\iscsicli.exe
2014-09-16 16:20:51 ----A---- C:\Windows\system32\diskpart.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\relog.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2014-09-16 16:20:50 ----A---- C:\Windows\SYSWOW64\amstream.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\msdmo.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\itircl.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\dot3msm.dll
2014-09-16 16:20:50 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\resutils.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\itircl.dll
2014-09-16 16:20:49 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2014-09-16 16:20:49 ----A---- C:\Windows\system32\FXSTIFF.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\netutils.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\findstr.exe
2014-09-16 16:20:48 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\sppc.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\onexui.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\mciqtz32.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\luainstall.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\choice.exe
2014-09-16 16:20:48 ----A---- C:\Windows\system32\findstr.exe
2014-09-16 16:20:48 ----A---- C:\Windows\system32\eappgnui.dll
2014-09-16 16:20:48 ----A---- C:\Windows\system32\drivers\tunnel.sys
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\sppc.dll
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2014-09-16 16:20:47 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\schedcli.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\repair-bde.exe
2014-09-16 16:20:47 ----A---- C:\Windows\system32\manage-bde.exe
2014-09-16 16:20:47 ----A---- C:\Windows\system32\inetmib1.dll
2014-09-16 16:20:47 ----A---- C:\Windows\system32\drivers\dfsc.sys
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\spopk.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2014-09-16 16:20:46 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\spopk.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\RDPENCDD.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\profprov.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\odbcconf.dll
2014-09-16 16:20:46 ----A---- C:\Windows\system32\fixmapi.exe
2014-09-16 16:20:45 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2014-09-16 16:20:45 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2014-09-16 16:20:45 ----A---- C:\Windows\system32\FXSMON.dll
2014-09-16 16:20:45 ----A---- C:\Windows\system32\elsTrans.dll
2014-09-16 16:20:44 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2014-09-16 16:20:44 ----A---- C:\Windows\SYSWOW64\perfts.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\wshbth.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\UIRibbonRes.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\TRAPI.dll
2014-09-16 16:20:44 ----A---- C:\Windows\system32\drivers\tdi.sys
2014-09-16 16:20:43 ----A---- C:\Windows\SYSWOW64\imm32.dll
2014-09-16 16:20:43 ----A---- C:\Windows\system32\napdsnap.dll
2014-09-16 16:20:43 ----A---- C:\Windows\system32\LogonUI.exe
2014-09-16 16:20:43 ----A---- C:\Windows\system32\dsauth.dll
2014-09-16 16:20:42 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2014-09-16 16:20:42 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2014-09-16 16:20:42 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2014-09-16 16:20:42 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2014-09-16 16:20:42 ----A---- C:\Windows\system32\FXSUNATD.exe
2014-09-16 16:20:42 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2014-09-16 16:20:42 ----A---- C:\Windows\system32\cscdll.dll
2014-09-16 16:20:42 ----A---- C:\Windows\system32\bitsperf.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2014-09-16 16:20:41 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2014-09-16 16:20:40 ----A---- C:\Windows\system32\wsdchngr.dll
2014-09-16 16:20:40 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\sscore.dll
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\shgina.dll
2014-09-16 16:20:39 ----A---- C:\Windows\SYSWOW64\riched32.dll
2014-09-16 16:20:39 ----A---- C:\Windows\system32\shgina.dll
2014-09-16 16:20:37 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2014-09-16 16:20:35 ----A---- C:\Windows\system32\wshirda.dll
2014-09-16 16:20:35 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2014-09-16 16:20:34 ----A---- C:\Windows\system32\drivers\hidusb.sys
2014-09-16 16:20:34 ----A---- C:\Windows\system32\drivers\appid.sys
2014-09-16 16:20:33 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2014-09-16 16:20:33 ----A---- C:\Windows\system32\riched32.dll
2014-09-16 16:20:33 ----A---- C:\Windows\system32\rdpcfgex.dll
2014-09-16 16:20:33 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2014-09-16 16:20:32 ----A---- C:\Windows\system32\spwmp.dll
2014-09-16 16:20:32 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2014-09-16 16:20:32 ----A---- C:\Windows\system32\browseui.dll
2014-09-16 16:20:31 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-09-16 16:20:31 ----A---- C:\Windows\SYSWOW64\browseui.dll
2014-09-16 16:20:31 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2014-09-16 16:20:31 ----A---- C:\Windows\system32\drivers\cdrom.sys
2014-09-16 16:20:31 ----A---- C:\Windows\system32\C_ISCII.DLL
2014-09-16 16:20:30 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2014-09-16 16:20:30 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2014-09-16 16:20:30 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-09-16 16:20:30 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2014-09-16 16:20:30 ----A---- C:\Windows\system32\shunimpl.dll
2014-09-16 16:20:30 ----A---- C:\Windows\system32\dxmasf.dll
2014-09-16 16:20:30 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2014-09-16 16:20:30 ----A---- C:\Windows\system32\drivers\scfilter.sys
2014-09-16 16:20:30 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2014-09-16 16:20:29 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2014-09-16 16:20:29 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2014-09-16 16:20:29 ----A---- C:\Windows\system32\KBDTUF.DLL
2014-09-16 16:20:29 ----A---- C:\Windows\system32\KBDSF.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2014-09-16 16:20:27 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDTUQ.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDSG.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDPO.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDNEPR.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDINTAM.DLL
2014-09-16 16:20:27 ----A---- C:\Windows\system32\KBDINBEN.DLL
2014-09-16 16:20:26 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2014-09-16 16:20:26 ----A---- C:\Windows\system32\kbdlk41a.dll
2014-09-16 16:20:26 ----A---- C:\Windows\system32\KBDGKL.DLL
2014-09-16 16:20:25 ----A---- C:\Windows\system32\KBDGR1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDUS.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDMON.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDLT1.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDGEO.DLL
2014-09-16 16:20:24 ----A---- C:\Windows\system32\KBDCZ1.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2014-09-16 16:20:23 ----A---- C:\Windows\system32\nlsbres.dll
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDTURME.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDMAORI.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINTEL.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINORI.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINMAR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINKAN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDINHIN.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDBULG.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDBLR.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-09-16 16:20:23 ----A---- C:\Windows\system32\dpnaddr.dll
2014-09-16 16:20:22 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2014-09-16 16:20:22 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2014-09-16 16:20:22 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2014-09-16 16:20:22 ----A---- C:\Windows\system32\spwizres.dll
2014-09-16 16:20:22 ----A---- C:\Windows\system32\pifmgr.dll
2014-09-16 16:20:22 ----A---- C:\Windows\system32\BlbEvents.dll
2014-09-16 16:20:08 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2014-09-16 16:20:08 ----A---- C:\Windows\system32\dpx.dll
2014-09-16 16:19:50 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2014-09-16 16:17:45 ----A---- C:\Windows\system32\wbemcomn.dll
2014-09-15 19:16:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-09-15 19:16:53 ----A---- C:\Windows\system32\poqexec.exe
2014-09-13 12:40:09 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-09-13 12:31:14 ----D---- C:\ProgramData\smdmf
2014-09-13 12:29:55 ----D---- C:\Program Files (x86)\MediaHuman
2014-09-13 00:38:55 ----SD---- C:\Windows\system32\CompatTel
2014-09-13 00:35:46 ----D---- C:\Program Files (x86)\MSXML 4.0
2014-09-13 00:35:03 ----A---- C:\Windows\system32\browserchoice.exe
2014-09-12 13:24:15 ----D---- C:\ProgramData\ATI
2014-09-12 13:17:53 ----D---- C:\Users\Feri\AppData\Roaming\library_dir
2014-09-12 13:14:20 ----D---- C:\ProgramData\AMD
2014-09-12 13:14:19 ----D---- C:\Program Files (x86)\AMD AVT
2014-09-12 13:12:14 ----D---- C:\Program Files\AMD
2014-09-12 13:11:27 ----D---- C:\Program Files\Common Files\ATI Technologies
2014-09-12 13:11:08 ----D---- C:\ProgramData\Package Cache
2014-09-12 13:10:23 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-09-12 13:09:05 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-09-12 13:07:36 ----D---- C:\Program Files\ATI Technologies
2014-09-12 13:06:21 ----D---- C:\AMD
2014-09-12 12:52:00 ----D---- C:\Program Files (x86)\HELP
2014-09-12 12:36:56 ----D---- C:\ProgramData\Electronic Arts
2014-09-12 03:01:27 ----D---- C:\ProgramData\Recovery
2014-09-11 22:26:20 ----D---- C:\Program Files (x86)\Counter-Strike 1.6
2014-09-11 19:43:03 ----D---- C:\ProgramData\Origin
2014-09-11 19:15:59 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-09-11 19:15:59 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-09-11 19:15:59 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-09-11 19:15:59 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-09-11 19:15:59 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-09-11 19:15:59 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-09-11 19:15:58 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-09-11 19:15:58 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-09-11 19:15:57 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-09-11 19:15:56 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-09-11 19:15:56 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-09-11 19:15:55 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-09-11 19:15:55 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-09-11 19:15:55 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-09-11 19:15:55 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-09-11 19:15:55 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-09-11 19:15:55 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-09-11 19:15:54 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-09-11 19:15:54 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-09-11 19:15:53 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-09-11 19:15:53 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-09-11 19:15:53 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-09-11 19:15:53 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-09-11 19:15:52 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-09-11 19:15:52 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-09-11 19:15:51 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-09-11 19:15:51 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-09-11 19:15:50 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-09-11 19:15:49 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-09-11 19:15:49 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-09-11 19:15:48 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-09-11 19:15:47 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-09-11 19:15:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-09-11 19:15:47 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-09-11 19:15:47 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-09-11 19:15:46 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-09-11 19:15:46 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-09-11 19:15:45 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-09-11 19:15:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-09-11 19:15:45 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-09-11 19:15:45 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-09-11 19:15:45 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-09-11 19:15:45 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-09-11 19:15:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-09-11 19:15:44 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-09-11 19:15:43 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-09-11 19:15:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-09-11 19:15:43 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-09-11 19:15:43 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-09-11 19:15:42 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-09-11 19:15:42 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-09-11 19:15:42 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-09-11 19:15:42 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-09-11 19:15:42 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-09-11 19:15:42 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-09-11 19:15:41 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-09-11 19:15:41 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-09-11 19:15:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-09-11 19:15:40 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-09-11 19:15:39 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-09-11 19:15:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-09-11 19:15:39 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-09-11 19:15:39 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-09-11 19:15:38 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-09-11 19:15:38 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-09-11 19:15:37 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-09-11 19:15:37 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-09-11 19:15:36 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-09-11 19:15:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-09-11 19:15:36 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-09-11 19:15:36 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-09-11 19:15:35 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-09-11 19:15:35 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-09-11 19:15:34 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-09-11 19:15:34 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-09-11 19:15:33 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-09-11 19:15:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-09-11 19:15:33 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-09-11 19:15:33 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-09-11 19:15:32 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-09-11 19:15:32 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-09-11 19:15:31 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-09-11 19:15:31 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-09-11 19:15:30 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-09-11 19:15:30 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-09-11 19:15:30 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-09-11 19:15:30 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-09-11 19:15:29 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-09-11 19:15:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-09-11 19:15:29 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-09-11 19:15:29 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-09-11 19:15:28 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-09-11 19:15:28 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-09-11 19:15:27 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-09-11 19:15:27 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-09-11 19:15:26 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-09-11 19:15:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-09-11 19:15:26 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-09-11 19:15:26 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-09-11 19:15:25 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-09-11 19:15:25 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-09-11 19:15:24 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-09-11 19:15:24 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-09-11 19:15:23 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-09-11 19:15:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-09-11 19:15:23 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-09-11 19:15:23 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-09-11 19:15:22 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-09-11 19:15:22 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-09-11 19:15:21 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-09-11 19:15:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-09-11 19:15:21 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-09-11 19:15:21 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-09-11 19:15:20 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-09-11 19:15:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-09-11 19:15:20 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-09-11 19:15:20 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-09-11 19:15:18 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-09-11 19:15:18 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-09-11 19:15:18 ----A---- C:\Windows\system32\xinput1_3.dll
2014-09-11 19:15:18 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-09-11 19:15:17 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-09-11 19:15:17 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-09-11 19:15:15 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-09-11 19:15:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-09-11 19:15:15 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-09-11 19:15:15 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-09-11 19:15:13 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-09-11 19:15:13 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-09-11 19:15:13 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-09-11 19:15:13 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-09-11 19:15:12 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-09-11 19:15:12 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-09-11 19:15:11 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-09-11 19:15:11 ----A---- C:\Windows\system32\d3dx10.dll
2014-09-11 19:15:09 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-09-11 19:15:09 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-09-11 19:15:09 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-09-11 19:15:09 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-09-11 19:15:07 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-09-11 19:15:06 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-09-11 19:15:06 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-09-11 19:15:06 ----A---- C:\Windows\system32\xinput1_2.dll
2014-09-11 19:15:06 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-09-11 19:15:05 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-09-11 19:15:05 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-09-11 19:15:05 ----A---- C:\Windows\system32\xinput1_1.dll
2014-09-11 19:15:05 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-09-11 19:15:04 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-09-11 19:15:04 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-09-11 19:14:59 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-09-11 19:14:59 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-09-11 19:14:58 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-09-11 19:14:58 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-09-11 19:14:58 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-09-11 19:14:58 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-09-11 19:14:56 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-09-11 19:14:56 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-09-11 19:14:55 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-09-11 19:14:55 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-09-11 19:14:54 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-09-11 19:14:54 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-09-11 19:14:53 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-09-11 19:14:53 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-09-11 19:14:52 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-09-11 19:14:52 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-09-11 19:14:50 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-09-11 19:14:50 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-09-11 19:02:33 ----D---- C:\Program Files (x86)\FIFA 14
2014-09-11 19:00:14 ----D---- C:\Users\Feri\AppData\Roaming\AVAST Software
2014-09-11 18:55:26 ----D---- C:\Program Files (x86)\Google
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswsp.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-09-11 18:55:10 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-09-11 18:55:08 ----A---- C:\Windows\system32\aswBoot.exe
2014-09-11 18:55:01 ----A---- C:\Windows\avastSS.scr
2014-09-11 18:52:47 ----D---- C:\Feri
2014-09-11 18:47:42 ----D---- C:\Program Files\AVAST Software
2014-09-11 18:46:43 ----D---- C:\ProgramData\AVAST Software
2014-09-11 18:03:08 ----D---- C:\Program Files (x86)\Adobe
2014-09-11 17:58:30 ----D---- C:\Users\Feri\AppData\Roaming\Macromedia
2014-09-11 17:58:30 ----D---- C:\Users\Feri\AppData\Roaming\Adobe
2014-09-11 17:58:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-09-11 17:58:16 ----D---- C:\Windows\system32\Macromed
2014-09-11 17:51:05 ----D---- C:\Users\Feri\AppData\Roaming\vlc
2014-09-11 17:50:45 ----D---- C:\Program Files (x86)\VideoLAN
2014-09-11 17:43:20 ----N---- C:\Windows\system32\MpSigStub.exe
2014-09-11 17:40:06 ----D---- C:\Users\Feri\AppData\Roaming\WinRAR
2014-09-11 17:40:00 ----D---- C:\Program Files\WinRAR
2014-09-11 17:39:20 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-09-11 17:39:20 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-09-11 17:38:48 ----D---- C:\Users\Feri\AppData\Roaming\Winamp
2014-09-11 17:38:48 ----D---- C:\Program Files (x86)\Winamp
2014-09-11 17:37:56 ----D---- C:\Users\Feri\AppData\Roaming\uTorrent
2014-09-11 17:37:03 ----D---- C:\Program Files (x86)\PANDORA.TV
2014-09-11 17:36:54 ----D---- C:\Program Files (x86)\The KMPlayer
2014-09-11 17:35:11 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2014-09-11 17:35:06 ----D---- C:\Users\Feri\AppData\Roaming\DAEMON Tools Lite
2014-09-11 17:35:05 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-09-11 17:34:29 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-09-11 17:34:20 ----D---- C:\Program Files\CCleaner
2014-09-11 17:32:57 ----D---- C:\Users\Feri\AppData\Roaming\Mozilla
2014-09-11 17:32:52 ----D---- C:\ProgramData\Mozilla
2014-09-11 17:32:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-11 17:20:53 ----D---- C:\Users\Feri\AppData\Roaming\HpUpdate
2014-09-11 17:16:52 ----D---- C:\Users\Feri\AppData\Roaming\ATI
2014-09-11 17:16:46 ----D---- C:\Downloads
2014-09-11 17:15:30 ----D---- C:\Users\Feri\AppData\Roaming\Identities
2014-09-11 17:15:18 ----D---- C:\Users\Feri\AppData\Roaming\hpqlog
2014-09-11 17:12:53 ----D---- C:\Users\Feri\AppData\Roaming\Hewlett-Packard
2014-09-11 17:10:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-09-11 17:10:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-09-11 17:09:50 ----D---- C:\Program Files (x86)\Microsoft
2014-09-11 17:09:27 ----D---- C:\Program Files (x86)\Windows Live SkyDrive
2014-09-11 17:09:22 ----D---- C:\Program Files (x86)\Windows Live
2014-09-11 17:06:25 ----D---- C:\ProgramData\Adobe
2014-09-11 17:05:36 ----D---- C:\Users\Feri\AppData\Roaming\DigitalPersona
2014-09-11 17:05:19 ----SD---- C:\Users\Feri\AppData\Roaming\Microsoft
2014-09-11 17:05:19 ----D---- C:\Users\Feri\AppData\Roaming\Media Center Programs
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Šablony
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Plocha
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Oblíbené položky
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Nabídka Start
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Dokumenty
2014-09-11 17:04:59 ----SHD---- C:\ProgramData\Data aplikací
2014-09-11 17:02:22 ----SHD---- C:\System Volume Information
2014-09-11 17:02:22 ----ASH---- C:\pagefile.sys
2014-09-11 17:02:14 ----ASH---- C:\hiberfil.sys
======List of files/folders modified in the last 1 month======
2014-09-19 01:38:55 ----D---- C:\Windows\Temp
2014-09-19 01:38:50 ----RD---- C:\Program Files
2014-09-19 01:27:59 ----D---- C:\Windows\Microsoft.NET
2014-09-19 01:21:59 ----D---- C:\Windows\system32\config
2014-09-19 01:16:36 ----D---- C:\Windows\System32
2014-09-19 01:16:36 ----D---- C:\Windows\inf
2014-09-19 01:16:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-09-19 01:16:06 ----D---- C:\Windows\Tasks
2014-09-19 01:16:06 ----D---- C:\Windows\system32\Tasks
2014-09-19 01:15:53 ----HD---- C:\ProgramData
2014-09-19 01:15:19 ----SHD---- C:\Windows\Installer
2014-09-19 01:14:59 ----D---- C:\Program Files (x86)
2014-09-19 01:10:20 ----D---- C:\Windows\SoftwareDistribution
2014-09-19 01:09:32 ----D---- C:\Windows
2014-09-19 01:09:28 ----A---- C:\Windows\SYSWOW64\log.txt
2014-09-19 01:08:36 ----D---- C:\Windows\Panther
2014-09-19 01:08:30 ----D---- C:\Windows\Logs
2014-09-19 01:08:30 ----D---- C:\Windows\debug
2014-09-19 01:04:38 ----D---- C:\Windows\system32\drivers
2014-09-19 01:04:29 ----AD---- C:\ProgramData\Temp
2014-09-19 01:03:59 ----D---- C:\Windows\SysWOW64
2014-09-19 01:01:18 ----D---- C:\Windows\system32\wdi
2014-09-19 00:32:22 ----A---- C:\Windows\win.ini
2014-09-18 20:36:50 ----D---- C:\Windows\system32\DriverStore
2014-09-18 17:34:57 ----HD---- C:\Windows\system32\GroupPolicy
2014-09-18 17:34:57 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2014-09-18 14:36:57 ----D---- C:\Windows\winsxs
2014-09-18 14:35:26 ----D---- C:\Windows\SYSWOW64\en-US
2014-09-18 14:35:25 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-09-18 14:35:25 ----D---- C:\Windows\system32\sk-SK
2014-09-18 14:35:25 ----D---- C:\Windows\system32\en-US
2014-09-18 14:29:21 ----SD---- C:\ProgramData\Microsoft
2014-09-18 14:27:50 ----D---- C:\Windows\system32\catroot2
2014-09-18 14:27:50 ----D---- C:\Windows\system32\catroot
2014-09-18 14:17:16 ----D---- C:\Windows\Prefetch
2014-09-18 13:57:28 ----D---- C:\Windows\system32\drivers\UMDF
2014-09-18 12:23:53 ----RSD---- C:\Windows\assembly
2014-09-18 12:06:10 ----D---- C:\Program Files (x86)\Windows Media Player
2014-09-18 12:06:09 ----D---- C:\Windows\ehome
2014-09-18 12:06:09 ----D---- C:\Program Files\Windows Media Player
2014-09-18 12:06:08 ----D---- C:\Program Files\Common Files\System
2014-09-18 12:06:06 ----D---- C:\Windows\PolicyDefinitions
2014-09-18 12:06:06 ----D---- C:\Program Files\Internet Explorer
2014-09-18 12:06:06 ----D---- C:\Program Files (x86)\Internet Explorer
2014-09-18 12:06:04 ----D---- C:\Windows\SYSWOW64\migration
2014-09-18 12:06:00 ----D---- C:\Windows\system32\migration
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\it-IT
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-09-18 12:05:57 ----D---- C:\Windows\SYSWOW64\el-GR
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\es-ES
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\de-DE
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\da-DK
2014-09-18 12:05:56 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-09-18 12:05:55 ----D---- C:\Windows\system32\pt-PT
2014-09-18 12:05:55 ----D---- C:\Windows\system32\pt-BR
2014-09-18 12:05:55 ----D---- C:\Windows\system32\pl-PL
2014-09-18 12:05:55 ----D---- C:\Windows\system32\ko-KR
2014-09-18 12:05:55 ----D---- C:\Windows\system32\it-IT
2014-09-18 12:05:55 ----D---- C:\Windows\system32\hu-HU
2014-09-18 12:05:54 ----D---- C:\Windows\system32\zh-TW
2014-09-18 12:05:54 ----D---- C:\Windows\system32\zh-HK
2014-09-18 12:05:54 ----D---- C:\Windows\system32\zh-CN
2014-09-18 12:05:54 ----D---- C:\Windows\system32\tr-TR
2014-09-18 12:05:54 ----D---- C:\Windows\system32\sv-SE
2014-09-18 12:05:54 ----D---- C:\Windows\system32\ru-RU
2014-09-18 12:05:54 ----D---- C:\Windows\system32\nl-NL
2014-09-18 12:05:54 ----D---- C:\Windows\system32\ja-JP
2014-09-18 12:05:54 ----D---- C:\Windows\system32\fr-FR
2014-09-18 12:05:54 ----D---- C:\Windows\system32\fi-FI
2014-09-18 12:05:54 ----D---- C:\Windows\system32\es-ES
2014-09-18 12:05:54 ----D---- C:\Windows\system32\el-GR
2014-09-18 12:05:54 ----D---- C:\Windows\system32\de-DE
2014-09-18 12:05:54 ----D---- C:\Windows\system32\cs-CZ
2014-09-18 12:05:53 ----D---- C:\Windows\system32\nb-NO
2014-09-18 12:05:53 ----D---- C:\Windows\system32\da-DK
2014-09-18 12:05:52 ----D---- C:\Windows\AppPatch
2014-09-18 12:05:37 ----D---- C:\Windows\SYSWOW64\Dism
2014-09-18 12:05:36 ----D---- C:\Windows\system32\drivers\en-US
2014-09-18 12:05:36 ----D---- C:\Windows\system32\Dism
2014-09-18 12:05:35 ----RSD---- C:\Windows\Fonts
2014-09-18 12:05:34 ----D---- C:\Program Files\Windows Defender
2014-09-18 12:05:34 ----D---- C:\Program Files (x86)\Windows Defender
2014-09-18 12:05:30 ----D---- C:\Windows\system32\wbem
2014-09-18 12:05:01 ----D---- C:\Windows\system32\Boot
2014-09-18 02:23:26 ----D---- C:\Windows\rescache
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Sidebar
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-09-17 16:37:23 ----D---- C:\Program Files (x86)\Windows Mail
2014-09-17 16:37:21 ----D---- C:\Program Files\Windows Sidebar
2014-09-17 16:37:21 ----D---- C:\Program Files\Windows Mail
2014-09-17 16:37:21 ----D---- C:\Program Files\DVD Maker
2014-09-17 16:37:20 ----D---- C:\Program Files\Windows Portable Devices
2014-09-17 16:37:20 ----D---- C:\Program Files\Windows Photo Viewer
2014-09-17 16:37:19 ----D---- C:\Windows\servicing
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\Setup
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\oobe
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\en
2014-09-17 16:37:08 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2014-09-17 16:37:07 ----D---- C:\Windows\SYSWOW64\wbem
2014-09-17 16:37:07 ----D---- C:\Windows\SYSWOW64\sppui
2014-09-17 16:37:07 ----D---- C:\Windows\SYSWOW64\manifeststore
2014-09-17 16:37:06 ----D---- C:\Windows\SYSWOW64\migwiz
2014-09-17 16:36:32 ----D---- C:\Windows\system32\oobe
2014-09-17 16:36:32 ----D---- C:\Windows\system32\AdvancedInstallers
2014-09-17 16:36:31 ----D---- C:\Windows\system32\sppui
2014-09-17 16:36:31 ----D---- C:\Windows\system32\Setup
2014-09-17 16:36:31 ----D---- C:\Windows\system32\manifeststore
2014-09-17 16:36:27 ----D---- C:\Windows\system32\migwiz
2014-09-16 17:52:18 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2014-09-16 17:52:18 ----A---- C:\Windows\system32\msclmd.dll
2014-09-13 00:38:50 ----D---- C:\Windows\SYSWOW64\winrm
2014-09-13 00:38:50 ----D---- C:\Windows\SYSWOW64\slmgr
2014-09-13 00:38:50 ----D---- C:\Windows\SYSWOW64\cs
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\WCN
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\MUI
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\DriverStore
2014-09-13 00:38:43 ----D---- C:\Windows\SYSWOW64\drivers
2014-09-13 00:38:42 ----D---- C:\Windows\SYSWOW64\com
2014-09-13 00:38:42 ----D---- C:\Windows\system32\winrm
2014-09-13 00:38:42 ----D---- C:\Windows\system32\sysprep
2014-09-13 00:38:42 ----D---- C:\Windows\system32\slmgr
2014-09-13 00:38:42 ----D---- C:\Windows\system32\cs
2014-09-13 00:38:42 ----D---- C:\Windows\IME
2014-09-13 00:38:34 ----D---- C:\Windows\system32\WCN
2014-09-13 00:38:34 ----D---- C:\Windows\system32\MUI
2014-09-13 00:38:29 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2014-09-13 00:38:28 ----D---- C:\Windows\system32\com
2014-09-13 00:38:14 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2014-09-13 00:38:10 ----D---- C:\Windows\en-US
2014-09-13 00:38:06 ----D---- C:\Windows\Speech
2014-09-12 13:14:18 ----D---- C:\Program Files (x86)\Common Files
2014-09-12 13:14:15 ----D---- C:\Program Files (x86)\ATI Technologies
2014-09-12 13:11:27 ----D---- C:\Program Files\Common Files
2014-09-11 17:28:59 ----D---- C:\Program Files (x86)\Downloaded Installations
2014-09-11 17:27:53 ----D---- C:\Program Files\Hewlett-Packard
2014-09-11 17:27:09 ----RD---- C:\Program Files (x86)\Online Services
2014-09-11 17:23:48 ----D---- C:\ProgramData\Norton
2014-09-11 17:20:45 ----D---- C:\ProgramData\Microsoft Help
2014-09-11 17:20:43 ----D---- C:\Program Files (x86)\Microsoft Office
2014-09-11 17:20:42 ----D---- C:\Program Files (x86)\Microsoft Works
2014-09-11 17:19:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-09-11 17:18:27 ----D---- C:\Program Files (x86)\HP Games
2014-09-11 17:18:24 ----D---- C:\ProgramData\WildTangent
2014-09-11 17:15:28 ----SHD---- C:\$Recycle.Bin
2014-09-11 17:15:22 ----D---- C:\SwSetup
2014-09-11 17:11:43 ----HD---- C:\SYSTEM.SAV
2014-09-11 17:11:43 ----D---- C:\Windows\system32\restore
2014-09-11 17:11:39 ----SHD---- C:\Recovery
2014-09-11 17:11:39 ----D---- C:\Windows\system32\Recovery
2014-09-11 17:05:16 ----RD---- C:\Users
2014-09-11 17:04:59 ----D---- C:\Program Files\Windows NT
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-09-11 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-09-11 224896]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 30008]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-09-11 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-09-11 1041168]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-09-11 427360]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-09-11 283200]
R1 DVMIO;DeviceVM IO Service; C:\Windows\system32\DRIVERS\dvmio.sys [2010-01-29 20056]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-09-11 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-09-11 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-09-11 92008]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 41272]
R3 ALSysIO;ALSysIO; \??\C:\Users\Feri\AppData\Local\Temp\ALSysIO64.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 15376384]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 638976]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-12-19 94720]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-05-01 56344]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-01-22 8034368]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-28 295424]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-01-14 505856]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-04-10 315440]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-09-30 121872]
S3 AVerAF35;HP USB DVB-T TV Tuner; C:\Windows\System32\Drivers\HPAF35.sys [2009-10-19 511104]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-07 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2010-01-07 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-01-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-07 21160]
S3 HPIR;HP TV Tuner Infrared Receiver; C:\Windows\system32\DRIVERS\HPIR.sys [2009-09-24 94208]
S3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2010-01-22 8034368]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-12 232992]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 239616]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-09-11 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-12-29 873248]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2009-12-30 444680]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-01-25 514232]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2009-10-15 120832]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2009-12-16 102968]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 30520]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-01-22 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-05-01 325656]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_1c0e2d1db9f5b08e\STacSV64.exe [2010-01-14 244736]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-05-01 2533400]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-01-06 2184496]
R3 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2009-12-17 230968]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-19 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-11 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-11 267440]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-19 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-11 116648]
S3 hpdoccardsvc;HP Documention Flash Card Detection Service; C:\Program Files (x86)\Hewlett-Packard\HP ENVY Document Card Utilities\doccardsvc.exe [2010-03-24 83240]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-18 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-13 114288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-09-18 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Re: Nejake hrozby v avaste
Zdravim 
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
- Ulozte nejlepe na plochu
- Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
- Probehne vytvoreni zalohy a nasledne prohledavani
- Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Nejake hrozby v avaste
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.7 (09.18.2014:2)
OS: Windows 7 Home Premium x64
Ran by Feri on pi 19. 09. 2014 at 12:41:11,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191113}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622192213}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622192215}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611191113}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622192213}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622192215}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\KMPAskPIPCount_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\KMPAskPIPCount_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\KMPAskPIPCount_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\KMPAskPIPCount_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191113}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted the following from C:\Users\Feri\AppData\Roaming\mozilla\firefox\profiles\v63wnowc.default\prefs.js
user_pref("extensions.crossrider.bic", "1488b189e472686dbe049ddae5a3f332");
Emptied folder: C:\Users\Feri\AppData\Roaming\mozilla\firefox\profiles\v63wnowc.default\minidumps [10 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on pi 19. 09. 2014 at 12:50:51,60
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.7 (09.18.2014:2)
OS: Windows 7 Home Premium x64
Ran by Feri on pi 19. 09. 2014 at 12:41:11,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191113}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622192213}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622192215}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611191113}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611191115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622192213}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622192215}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\KMPAskPIPCount_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\KMPAskPIPCount_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195513}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655195515}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196613}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666196615}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194413}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644194415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\KMPAskPIPCount_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\KMPAskPIPCount_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191113}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115}
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted the following from C:\Users\Feri\AppData\Roaming\mozilla\firefox\profiles\v63wnowc.default\prefs.js
user_pref("extensions.crossrider.bic", "1488b189e472686dbe049ddae5a3f332");
Emptied folder: C:\Users\Feri\AppData\Roaming\mozilla\firefox\profiles\v63wnowc.default\minidumps [10 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on pi 19. 09. 2014 at 12:50:51,60
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Re: Nejake hrozby v avaste
Pokracujte AdwCleanerem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nejake hrozby v avaste
# AdwCleaner v3.310 - Report created 19/09/2014 at 12:53:18
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Feri - FERI-PC
# Running from : C:\Users\Feri\Downloads\adwcleaner_3.310.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\iWebar
Folder Deleted : C:\Program Files (x86)\Senses
Folder Deleted : C:\Users\Feri\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\Extensions\927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.com
Folder Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\Extensions\warnerroberts@hotmail.com
Folder Deleted : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
***** [ Scheduled Tasks ] *****
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-1
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-11
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-2
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-4
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-5
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-5_user
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-6
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-7
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7
Task Deleted : 6563fb0e-3562-4199-a0a7-ee44667f7754-11
Task Deleted : 6563fb0e-3562-4199-a0a7-ee44667f7754-3
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-1
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-11
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-2
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-4
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-6
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-7
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\AppDataLow\Software\iWebar
Key Deleted : HKCU\Software\AppDataLow\Software\Senses
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\iWebar
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\Senses
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iWebar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Senses
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17280
-\\ Mozilla Firefox v32.0.1 (x86 sk)
[ File : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js ]
Line Deleted : user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_meta.value", "%7B%22handlebars.js%22%3A%7B%22id%22%3A757210%2C%22ver%22%3A1%2C%22status[...]
Line Deleted : user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757219.value", "%22function%20startAskCom%28e%2Ct%2Cr%29%7Bfunction%20a%28e%29[...]
Line Deleted : user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%2[...]
Line Deleted : user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7B%22[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1488d896d7d10b81def21ad817c31794");
-\\ Google Chrome v37.0.2062.120
[ File : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [13827 octets] - [19/09/2014 01:02:48]
AdwCleaner[R1].txt - [9923 octets] - [19/09/2014 12:52:31]
AdwCleaner[S0].txt - [11392 octets] - [19/09/2014 01:04:29]
AdwCleaner[S1].txt - [9639 octets] - [19/09/2014 12:53:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [9699 octets] ##########
Adw som pouzil aj pred tym ako som tu dal rsit tak tu mate log
# AdwCleaner v3.310 - Report created 19/09/2014 at 01:04:29
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Feri - FERI-PC
# Running from : C:\Users\Feri\Downloads\adwcleaner_3.310.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622
Service Deleted : IePluginServices
[#] Service Deleted : SmdmFService
Service Deleted : YouTubeAcceleratorService
Service Deleted : {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\IePluginServices
[!] Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\ProgramData\YTAHelper
Folder Deleted : C:\Program Files (x86)\PodoWeb
[!] Folder Deleted : C:\Program Files (x86)\Settings Manager
Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Program Files (x86)\WinToFlash Suggestor
Folder Deleted : C:\Program Files (x86)\YouTube Accelerator
Folder Deleted : C:\Program Files (x86)\YTAHelper
Folder Deleted : C:\Users\Feri\AppData\Local\Temp\PodoWeb
Folder Deleted : C:\Users\Feri\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\Feri\AppData\Roaming\istartsurf
Folder Deleted : C:\Users\Feri\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Public\Documents\Goobzo
Folder Deleted : C:\Users\Public\Documents\YTAHelper
Folder Deleted : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
File Deleted : C:\Program Files (x86)\Uninstall.exe
File Deleted : C:\Windows\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys
File Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\invalidprefs.js
File Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml
File Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\user.js
File Deleted : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
***** [ Scheduled Tasks ] *****
Task Deleted : YTAHelper
Task Deleted : YTAUpdate_logon
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\acaoakiamfeidcmgooclgeleejkbaecf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Key Deleted : HKLM\SOFTWARE\Classes\AppID\SMBarBroker.EXE
Key Deleted : HKLM\SOFTWARE\Classes\SMBarBroker.SMBarDealer
Key Deleted : HKLM\SOFTWARE\Classes\SMBarBroker.SMBarDealer.1
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3A188115-B81B-48F2-A958-F974C8F3F309}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{43769158-3B03-4932-8D8A-8F0F344BF024}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FC36B0BD-27F0-4CDD-8AB1-50651EFC3EFD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78CE34FD-F6D4-4866-B79C-A37268D06A04}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80904944-C726-4C7D-A452-3FFF2A882095}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D9B1B31-D034-4738-8F6E-40F0AFCC742C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC36B0BD-27F0-4CDD-8AB1-50651EFC3EFD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC36B0BD-27F0-4CDD-8AB1-50651EFC3EFD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{78CE34FD-F6D4-4866-B79C-A37268D06A04}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{80904944-C726-4C7D-A452-3FFF2A882095}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKCU\Software\Goobzo
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKLM\SOFTWARE\Goobzo
Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\supWPM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17280
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v32.0.1 (x86 sk)
[ File : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultenginename", "istartsurf");
-\\ Google Chrome v37.0.2062.120
[ File : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Search Provider] : hxxp://www.istartsurf.com/web/?type=ds&ts=1411 ... earchTerms}
Deleted [Startup_urls] : hxxp://www.istartsurf.com/?type=hp&ts=14110791 ... S_5VJ7S9VE
Deleted [Homepage] : hxxp://www.istartsurf.com/?type=hp&ts=14110791 ... S_5VJ7S9VE
Deleted [Extension] : fpmeembnagmagppkgghhfjfdfajdfcah
*************************
AdwCleaner[R0].txt - [13827 octets] - [19/09/2014 01:02:48]
AdwCleaner[S0].txt - [11190 octets] - [19/09/2014 01:04:29]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11251 octets] ##########
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Feri - FERI-PC
# Running from : C:\Users\Feri\Downloads\adwcleaner_3.310.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\iWebar
Folder Deleted : C:\Program Files (x86)\Senses
Folder Deleted : C:\Users\Feri\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\Extensions\927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.com
Folder Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\Extensions\warnerroberts@hotmail.com
Folder Deleted : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
***** [ Scheduled Tasks ] *****
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-1
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-11
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-2
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-4
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-5
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-5_user
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-6
Task Deleted : 170225a0-8048-4608-9719-56e8042fbbba-7
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6
Task Deleted : 44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7
Task Deleted : 6563fb0e-3562-4199-a0a7-ee44667f7754-11
Task Deleted : 6563fb0e-3562-4199-a0a7-ee44667f7754-3
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-1
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-11
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-2
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-4
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-6
Task Deleted : c94697dc-6b6d-478f-bddd-348b413d6a2a-7
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\AppDataLow\Software\iWebar
Key Deleted : HKCU\Software\AppDataLow\Software\Senses
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\iWebar
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\Senses
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iWebar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Senses
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17280
-\\ Mozilla Firefox v32.0.1 (x86 sk)
[ File : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js ]
Line Deleted : user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_meta.value", "%7B%22handlebars.js%22%3A%7B%22id%22%3A757210%2C%22ver%22%3A1%2C%22status[...]
Line Deleted : user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757219.value", "%22function%20startAskCom%28e%2Ct%2Cr%29%7Bfunction%20a%28e%29[...]
Line Deleted : user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%2[...]
Line Deleted : user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7B%22[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1488d896d7d10b81def21ad817c31794");
-\\ Google Chrome v37.0.2062.120
[ File : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [13827 octets] - [19/09/2014 01:02:48]
AdwCleaner[R1].txt - [9923 octets] - [19/09/2014 12:52:31]
AdwCleaner[S0].txt - [11392 octets] - [19/09/2014 01:04:29]
AdwCleaner[S1].txt - [9639 octets] - [19/09/2014 12:53:18]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [9699 octets] ##########
Adw som pouzil aj pred tym ako som tu dal rsit tak tu mate log
# AdwCleaner v3.310 - Report created 19/09/2014 at 01:04:29
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Feri - FERI-PC
# Running from : C:\Users\Feri\Downloads\adwcleaner_3.310.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622
Service Deleted : IePluginServices
[#] Service Deleted : SmdmFService
Service Deleted : YouTubeAcceleratorService
Service Deleted : {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\IePluginServices
[!] Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\ProgramData\YTAHelper
Folder Deleted : C:\Program Files (x86)\PodoWeb
[!] Folder Deleted : C:\Program Files (x86)\Settings Manager
Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Program Files (x86)\WinToFlash Suggestor
Folder Deleted : C:\Program Files (x86)\YouTube Accelerator
Folder Deleted : C:\Program Files (x86)\YTAHelper
Folder Deleted : C:\Users\Feri\AppData\Local\Temp\PodoWeb
Folder Deleted : C:\Users\Feri\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\Feri\AppData\Roaming\istartsurf
Folder Deleted : C:\Users\Feri\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Public\Documents\Goobzo
Folder Deleted : C:\Users\Public\Documents\YTAHelper
Folder Deleted : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
File Deleted : C:\Program Files (x86)\Uninstall.exe
File Deleted : C:\Windows\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys
File Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\invalidprefs.js
File Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml
File Deleted : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\user.js
File Deleted : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
***** [ Scheduled Tasks ] *****
Task Deleted : YTAHelper
Task Deleted : YTAUpdate_logon
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Feri\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\acaoakiamfeidcmgooclgeleejkbaecf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Key Deleted : HKLM\SOFTWARE\Classes\AppID\SMBarBroker.EXE
Key Deleted : HKLM\SOFTWARE\Classes\SMBarBroker.SMBarDealer
Key Deleted : HKLM\SOFTWARE\Classes\SMBarBroker.SMBarDealer.1
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3A188115-B81B-48F2-A958-F974C8F3F309}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{43769158-3B03-4932-8D8A-8F0F344BF024}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FC36B0BD-27F0-4CDD-8AB1-50651EFC3EFD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78CE34FD-F6D4-4866-B79C-A37268D06A04}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80904944-C726-4C7D-A452-3FFF2A882095}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D9B1B31-D034-4738-8F6E-40F0AFCC742C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC36B0BD-27F0-4CDD-8AB1-50651EFC3EFD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC36B0BD-27F0-4CDD-8AB1-50651EFC3EFD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{78CE34FD-F6D4-4866-B79C-A37268D06A04}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{80904944-C726-4C7D-A452-3FFF2A882095}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKCU\Software\Goobzo
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKLM\SOFTWARE\Goobzo
Key Deleted : HKLM\SOFTWARE\istartsurfSoftware
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\supWPM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\istartsurf uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17280
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v32.0.1 (x86 sk)
[ File : C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultenginename", "istartsurf");
-\\ Google Chrome v37.0.2062.120
[ File : C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Search Provider] : hxxp://www.istartsurf.com/web/?type=ds&ts=1411 ... earchTerms}
Deleted [Startup_urls] : hxxp://www.istartsurf.com/?type=hp&ts=14110791 ... S_5VJ7S9VE
Deleted [Homepage] : hxxp://www.istartsurf.com/?type=hp&ts=14110791 ... S_5VJ7S9VE
Deleted [Extension] : fpmeembnagmagppkgghhfjfdfajdfcah
*************************
AdwCleaner[R0].txt - [13827 octets] - [19/09/2014 01:02:48]
AdwCleaner[S0].txt - [11190 octets] - [19/09/2014 01:04:29]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11251 octets] ##########
Re: Nejake hrozby v avaste
Supr, jdeme dale 
Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; emptyclsid; iedefaults; FFdefaults; CHRdefaults; emptyalltemp; resethosts;- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nejake hrozby v avaste
Zoek.exe v5.0.0.0 Updated 14-September-2014
Tool run by Feri on pi 19. 09. 2014 at 13:03:35,57.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Feri\Desktop\zoek\zoek.com [Scan all users] [Script inserted]
==== System Restore Info ======================
19. 9. 2014 13:04:33 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2237007535-114823964-1511861652-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{980B8A8F-EA0B-4C24-A2E9-70635E2502E9} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191113} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191113} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191115} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js:
user_pref("browser.startup.homepage", "chrome://speeddial/content/speeddial.xul");
user_pref("browser.search.useDBForOrder", true);
Added to C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
ProfilePath: C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default
user.js not found
---- Lines suggestor removed from prefs.js ----
user_pref("extensions.WinToFlashSuggestor.aid", "10045");
user_pref("extensions.WinToFlashSuggestor.uid", "ae2043236f74a77a2a213b7bfe8d0375");
---- Lines a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913 removed from prefs.js ----
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.active", true);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.addressbar", "NA");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.addressbarenhanced", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.asyncdb.was_copied", "true");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.asyncinternaldb.was_copied", "true");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.backgroundver", 1);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.certdomaininstaller", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallationTime.value", "%221411123307%22");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallerParams.value", "%7B%22source_id%22%3A%2200
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.uc.expiration", "Fri Oct 03 2014 12:51:11 GMT+0200"
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.uc.value", "%22%5C%22SK%5C%22%22");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.description", "iWebar");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.domain", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.enablesearch", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.homepage", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.changeprevious", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.iframe", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.InstallationThankYouPage", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.InstallationTime", 1411123307);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.__defualt_browser__.expiration", "Fri Feb 01 20
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.__defualt_browser__.value", "%22ff%22");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb._installer_additional_info.expiration", "Fri Fe
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb._installer_additional_info.value", "%7B%22asw%2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.installer.value", "%7B%22InstallerIdentifiers%2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerIdentifiers.value", "%7B%22installer_b
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParamsCache.value", "%7B%22source_id%2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerUserIdentifiersCache.expiration", "Fri
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerUserIdentifiersCache.value", "%7B%22in
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledUrls.expiration", "F
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledWithHash.expiration"
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledWithHash.value", "nu
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_notBundledArr_.expiration",
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_notBundledArr_.value", "%5B
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_regBundledWithSoftware.expi
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_regBundledWithSoftware.valu
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_appVer.value", "23");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_lastVersion.expiration", "Fri Feb 01
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_nextCheck.expiration", "Fri Sep 19 20
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757210.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757211.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757212.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757213.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757214.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757215.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757215.value", "%22//Javascr
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757216.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757217.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757218.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757219.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.lastDailyReport", "1411123868007");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.lastUpdate", "1411123867398");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.manifesturl", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.name", "iWebar");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.newtab", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.opensearch", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.pluginsurl", "http://js.newclientonlinestorage.com/plugin/
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.pluginsversion", 18);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.publisher", "iWebar");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.searchstatus", 0);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.setnewtab", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.thankyou", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.updateinterval", 360);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.ver", 23);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.apps", "61913");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.bic", "1488d896d7d10b81def21ad817c31794");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.cid", 61913);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.firstrun", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.hadappinstalled", true);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.installationdate", 1411123867);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.installerAdditionalInfo", "{\"asw\":[2, -2139095035, 0],\"browse
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.modetype", "production");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.reportInstall", true);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.statsDailyCounter", 1);
---- Lines awarnerrobertshotmailcom61915 removed from prefs.js ----
user_pref("extensions.awarnerrobertshotmailcom61915.61915.active", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.addressbar", "NA");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.addressbarenhanced", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.asyncdb.was_copied", "true");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.asyncinternaldb.was_copied", "true");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.backgroundver", 1);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.certdomaininstaller", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallationTime.value", "%221411123317%22");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22000805%22%2C%22sub_id%22%3A%220%22%2
user_pref("extensions.awarnerrobertshotmailcom61915.61915.description", ".");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.domain", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.enablesearch", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.homepage", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.changeprevious", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.iframe", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.InstallationThankYouPage", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.InstallationTime", 1411123317);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.__defualt_browser__.value", "%22ff%22");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb._installer_additional_info.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb._installer_additional_info.value", "%7B%22asw%22%3A%5B2%2C-2139095035%2C0%5D%2C%2
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%22FB
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22FBDC0FDA9E954E92B136021
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22000805%22%2C%22sub_id%22%3A%220%
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000805%22%2C%22sub_id%22%3A
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22FBDC0FDA9E954E
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100")
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+01
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledWithHash.value", "null");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+010
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_appVer.value", "31");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_nextCheck.expiration", "Fri Sep 19 2014 18:51:09 GMT+0200");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.lastDailyReport", "1411123868313");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.lastUpdate", "1411123868249");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.manifesturl", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.name", "Senses");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.newtab", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.opensearch", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.pluginsurl", "http://js.newclientonlinestorage.com/pl ... /plugins.j
user_pref("extensions.awarnerrobertshotmailcom61915.61915.pluginsversion", 27);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.publisher", "Object Browser");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.searchstatus", 0);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.setnewtab", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.thankyou", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.updateinterval", 360);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.ver", 31);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncdb_dbWasSet", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncinternaldb_dbWasSet", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comawarnerrobertshotmailcom61915_dbWasSet", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comawarnerrobertshotmailcom61915_dbWasSet_FF25_FIX", true);
user_pref("extensions.awarnerrobertshotmailcom61915.apps", "61915");
user_pref("extensions.awarnerrobertshotmailcom61915.bic", "1488d896d7d10b81def21ad817c31794");
user_pref("extensions.awarnerrobertshotmailcom61915.cid", 61915);
user_pref("extensions.awarnerrobertshotmailcom61915.firstrun", false);
user_pref("extensions.awarnerrobertshotmailcom61915.hadappinstalled", true);
user_pref("extensions.awarnerrobertshotmailcom61915.installationdate", 1411123867);
user_pref("extensions.awarnerrobertshotmailcom61915.installerAdditionalInfo", "{\"asw\":[2, -2139095035, 0],\"browser_name\":\"ff\"}");
user_pref("extensions.awarnerrobertshotmailcom61915.modetype", "production");
user_pref("extensions.awarnerrobertshotmailcom61915.reportInstall", true);
user_pref("extensions.awarnerrobertshotmailcom61915.statsDailyCounter", 1);
---- FireFox user.js and prefs.js backups ----
prefs_201419.09._1318_.backup
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\channel-prefs.js deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Feri\AppData\Local\Installer deleted
C:\Users\Feri\AppData\Local\CrashRpt deleted
C:\Windows\tasks\AVNUOK.job deleted
C:\windows\SysNative\tasks\AVNUOK deleted
C:\Windows\tasks\SXMQIHM.job deleted
C:\windows\SysNative\tasks\SXMQIHM deleted
C:\windows\SysNative\Tasks\YTAUpdate deleted
C:\windows\SysNative\tasks\Installer_shopperpro deleted
C:\windows\SysNative\tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2 deleted
C:\Users\Feri\AppData\Roaming\AVNUOK.exe deleted
C:\Users\Feri\AppData\Roaming\SXMQIHM.exe deleted
"C:\Users\Feri\AppData\Roaming\AVNUOK" deleted
"C:\Users\Feri\AppData\Roaming\SXMQIHM" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [11. 09. 2014 18:55]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default
- DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
- X-notifier - %ProfilePath%\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi
- Speed Dial - %ProfilePath%\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
- ReloadEvery - %ProfilePath%\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Firefox - %AppDir%\extensions\firefox@firefox.sk
- UrlBox - %AppDir%\extensions\urlbox@firefox.sk
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default
DFC9460CC37E5C414DC4680B10C19E7A - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll - Shockwave Flash
F7E675EBDE6DA3A1665F2DCFA683322F - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director
==== Chromium Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[11. 09. 2014 18:54]
Docs - Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
avast Online Security - Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"First Home Page"="http://www.bing.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"First Home Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{2004DB7E-93F1-45D2-89E3-B645A34E3BD3} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"
==== Reset Google Chrome ======================
C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easybits Recovery deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Feri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Feri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=28 folders=20 20811305 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Feri\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Feri\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on pi 19. 09. 2014 at 13:26:13,20 ======================
Tool run by Feri on pi 19. 09. 2014 at 13:03:35,57.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Feri\Desktop\zoek\zoek.com [Scan all users] [Script inserted]
==== System Restore Info ======================
19. 9. 2014 13:04:33 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2237007535-114823964-1511861652-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{980B8A8F-EA0B-4C24-A2E9-70635E2502E9} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191113} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191113} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611191115} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611191115} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js:
user_pref("browser.startup.homepage", "chrome://speeddial/content/speeddial.xul");
user_pref("browser.search.useDBForOrder", true);
Added to C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
ProfilePath: C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default
user.js not found
---- Lines suggestor removed from prefs.js ----
user_pref("extensions.WinToFlashSuggestor.aid", "10045");
user_pref("extensions.WinToFlashSuggestor.uid", "ae2043236f74a77a2a213b7bfe8d0375");
---- Lines a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913 removed from prefs.js ----
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.co
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.active", true);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.addressbar", "NA");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.addressbarenhanced", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.asyncdb.was_copied", "true");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.asyncinternaldb.was_copied", "true");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.backgroundver", 1);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.certdomaininstaller", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallationTime.value", "%221411123307%22");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.InstallerParams.value", "%7B%22source_id%22%3A%2200
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.uc.expiration", "Fri Oct 03 2014 12:51:11 GMT+0200"
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.cookie.uc.value", "%22%5C%22SK%5C%22%22");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.description", "iWebar");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.domain", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.enablesearch", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.homepage", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.changeprevious", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.iframe", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.InstallationThankYouPage", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.InstallationTime", 1411123307);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.__defualt_browser__.expiration", "Fri Feb 01 20
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.__defualt_browser__.value", "%22ff%22");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb._installer_additional_info.expiration", "Fri Fe
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb._installer_additional_info.value", "%7B%22asw%2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.installer.value", "%7B%22InstallerIdentifiers%2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerIdentifiers.value", "%7B%22installer_b
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerParamsCache.value", "%7B%22source_id%2
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerUserIdentifiersCache.expiration", "Fri
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.InstallerUserIdentifiersCache.value", "%7B%22in
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledUrls.expiration", "F
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledWithHash.expiration"
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_bundledWithHash.value", "nu
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_notBundledArr_.expiration",
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_notBundledArr_.value", "%5B
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_regBundledWithSoftware.expi
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.monetization_plugin_regBundledWithSoftware.valu
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_appVer.value", "23");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_lastVersion.expiration", "Fri Feb 01
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_nextCheck.expiration", "Fri Sep 19 20
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 0
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757210.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757211.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757212.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757213.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757214.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757215.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757215.value", "%22//Javascr
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757216.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757217.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757218.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.internaldb.Resources_resource_757219.expiration", "Thu Dec
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.lastDailyReport", "1411123868007");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.lastUpdate", "1411123867398");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.manifesturl", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.name", "iWebar");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.newtab", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.opensearch", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.pluginsurl", "http://js.newclientonlinestorage.com/plugin/
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.pluginsversion", 18);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.publisher", "iWebar");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.searchstatus", 0);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.setnewtab", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.thankyou", "");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.updateinterval", 360);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.61913.ver", 23);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.apps", "61913");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.bic", "1488d896d7d10b81def21ad817c31794");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.cid", 61913);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.firstrun", false);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.hadappinstalled", true);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.installationdate", 1411123867);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.installerAdditionalInfo", "{\"asw\":[2, -2139095035, 0],\"browse
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.modetype", "production");
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.reportInstall", true);
user_pref("extensions.a927571a5c34c476fbf9f2ed9e8e7e940e6a314c63a357ced35576dcom61913.statsDailyCounter", 1);
---- Lines awarnerrobertshotmailcom61915 removed from prefs.js ----
user_pref("extensions.awarnerrobertshotmailcom61915.61915.active", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.addressbar", "NA");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.addressbarenhanced", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.asyncdb.was_copied", "true");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.asyncinternaldb.was_copied", "true");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.backgroundver", 1);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.certdomaininstaller", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallationTime.value", "%221411123317%22");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22000805%22%2C%22sub_id%22%3A%220%22%2
user_pref("extensions.awarnerrobertshotmailcom61915.61915.description", ".");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.domain", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.enablesearch", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.homepage", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.changeprevious", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.iframe", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.InstallationThankYouPage", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.InstallationTime", 1411123317);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.__defualt_browser__.value", "%22ff%22");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb._installer_additional_info.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb._installer_additional_info.value", "%7B%22asw%22%3A%5B2%2C-2139095035%2C0%5D%2C%2
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%22FB
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22FBDC0FDA9E954E92B136021
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22000805%22%2C%22sub_id%22%3A%220%
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000805%22%2C%22sub_id%22%3A
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22FBDC0FDA9E954E
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100")
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+01
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_bundledWithHash.value", "null");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+010
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_appVer.value", "31");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_nextCheck.expiration", "Fri Sep 19 2014 18:51:09 GMT+0200");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.lastDailyReport", "1411123868313");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.lastUpdate", "1411123868249");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.manifesturl", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.name", "Senses");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.newtab", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.opensearch", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.pluginsurl", "http://js.newclientonlinestorage.com/pl ... /plugins.j
user_pref("extensions.awarnerrobertshotmailcom61915.61915.pluginsversion", 27);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.publisher", "Object Browser");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.searchstatus", 0);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.setnewtab", false);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.thankyou", "");
user_pref("extensions.awarnerrobertshotmailcom61915.61915.updateinterval", 360);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.ver", 31);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncdb_dbWasSet", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncinternaldb_dbWasSet", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comasyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comawarnerrobertshotmailcom61915_dbWasSet", true);
user_pref("extensions.awarnerrobertshotmailcom61915.61915.warnerroberts@hotmail.comawarnerrobertshotmailcom61915_dbWasSet_FF25_FIX", true);
user_pref("extensions.awarnerrobertshotmailcom61915.apps", "61915");
user_pref("extensions.awarnerrobertshotmailcom61915.bic", "1488d896d7d10b81def21ad817c31794");
user_pref("extensions.awarnerrobertshotmailcom61915.cid", 61915);
user_pref("extensions.awarnerrobertshotmailcom61915.firstrun", false);
user_pref("extensions.awarnerrobertshotmailcom61915.hadappinstalled", true);
user_pref("extensions.awarnerrobertshotmailcom61915.installationdate", 1411123867);
user_pref("extensions.awarnerrobertshotmailcom61915.installerAdditionalInfo", "{\"asw\":[2, -2139095035, 0],\"browser_name\":\"ff\"}");
user_pref("extensions.awarnerrobertshotmailcom61915.modetype", "production");
user_pref("extensions.awarnerrobertshotmailcom61915.reportInstall", true);
user_pref("extensions.awarnerrobertshotmailcom61915.statsDailyCounter", 1);
---- FireFox user.js and prefs.js backups ----
prefs_201419.09._1318_.backup
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\channel-prefs.js deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Feri\AppData\Local\Installer deleted
C:\Users\Feri\AppData\Local\CrashRpt deleted
C:\Windows\tasks\AVNUOK.job deleted
C:\windows\SysNative\tasks\AVNUOK deleted
C:\Windows\tasks\SXMQIHM.job deleted
C:\windows\SysNative\tasks\SXMQIHM deleted
C:\windows\SysNative\Tasks\YTAUpdate deleted
C:\windows\SysNative\tasks\Installer_shopperpro deleted
C:\windows\SysNative\tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2 deleted
C:\Users\Feri\AppData\Roaming\AVNUOK.exe deleted
C:\Users\Feri\AppData\Roaming\SXMQIHM.exe deleted
"C:\Users\Feri\AppData\Roaming\AVNUOK" deleted
"C:\Users\Feri\AppData\Roaming\SXMQIHM" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [11. 09. 2014 18:55]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default
- DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
- X-notifier - %ProfilePath%\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi
- Speed Dial - %ProfilePath%\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
- ReloadEvery - %ProfilePath%\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Firefox - %AppDir%\extensions\firefox@firefox.sk
- UrlBox - %AppDir%\extensions\urlbox@firefox.sk
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\Feri\AppData\Roaming\Mozilla\Firefox\Profiles\v63wnowc.default
DFC9460CC37E5C414DC4680B10C19E7A - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll - Shockwave Flash
F7E675EBDE6DA3A1665F2DCFA683322F - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director
==== Chromium Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[11. 09. 2014 18:54]
Docs - Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
avast Online Security - Feri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"First Home Page"="http://www.bing.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"First Home Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{2004DB7E-93F1-45D2-89E3-B645A34E3BD3} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"
==== Reset Google Chrome ======================
C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easybits Recovery deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Feri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Feri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\Users\Feri\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=28 folders=20 20811305 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Feri\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Feri\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on pi 19. 09. 2014 at 13:26:13,20 ======================
Re: Nejake hrozby v avaste
Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nejake hrozby v avaste
ma to 300k znakov dam do prilohy
- Přílohy
-
- FRST.rar
- (40.54 KiB) Staženo 80 x
Re: Nejake hrozby v avaste
Tvorba fixlistu pro FRST
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start CloseProcesses: HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre6\bin\jusched.exe [172032 2010-05-30] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Java\jre6\bin\jusched.exe [149280 2010-05-30] (Sun Microsystems, Inc.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-16] (Microsoft Corporation) R3 ALSysIO; \??\C:\Users\Feri\AppData\Local\Temp\ALSysIO64.sys [X] R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV) C:\Program Files (x86)\PANDORA.TV 2014-09-19 13:34 - 2014-09-19 13:34 - 00016432 _____ () C:\Users\Feri\Desktop\FRST.txt 2014-09-19 13:33 - 2014-09-19 13:33 - 00112640 _____ (forum.viry.cz) C:\Users\Feri\Desktop\FRSTLauncher.exe 2014-09-19 13:24 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-09-19 13:04 - 2014-09-19 13:26 - 00032796 _____ () C:\zoek-results.log 2014-09-19 13:03 - 2014-09-19 13:18 - 00000000 ____D () C:\zoek_backup 2014-09-19 13:02 - 2014-09-19 13:02 - 00000000 ____D () C:\Users\Feri\Desktop\zoek 2014-09-19 13:01 - 2014-09-19 13:02 - 04256073 _____ () C:\Users\Feri\Downloads\zoek.rar 2014-09-19 12:50 - 2014-09-19 12:50 - 00005673 _____ () C:\Users\Feri\Desktop\JRT.txt 2014-09-19 12:41 - 2014-09-19 12:41 - 00000000 ____D () C:\Windows\ERUNT 2014-09-19 12:40 - 2014-09-19 12:40 - 01019328 _____ (Thisisu) C:\Users\Feri\Desktop\JRT.exe 2014-09-19 12:33 - 2014-09-19 13:25 - 00000168 _____ () C:\Windows\setupact.log 2014-09-19 12:33 - 2014-09-19 12:33 - 00000000 _____ () C:\Windows\setuperr.log 2014-09-19 01:38 - 2014-09-19 01:39 - 00000000 ____D () C:\rsit 2014-09-19 01:38 - 2014-09-19 01:38 - 00000000 ____D () C:\Program Files\trend micro 2014-09-19 01:35 - 2014-09-19 01:35 - 01222144 _____ () C:\Users\Feri\Downloads\RSITx64.exe 2014-09-19 01:03 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-19 01:02 - 2014-09-19 12:53 - 00000000 ____D () C:\AdwCleaner C:\Program Files (x86)\iWebar Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2.job => C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-2.exe <==== ATTENTION Task: {37663F19-3C5D-46D0-8535-CC24B9F07B2B} - \temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2 No Task File <==== ATTENTION Task: {4F29F697-8A8F-46FD-ACDC-30257A7E471B} - \YTAUpdate No Task File <==== ATTENTION Task: {6A2F2B85-D0FC-4A6E-BE41-DEC1D70513F9} - \Installer_shopperpro No Task File <==== ATTENTION AlternateDataStreams: C:\ProgramData\Temp:56E2E879 REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f Hosts: EmptyTemp: Reboot: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nejake hrozby v avaste
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014
Ran by Feri at 2014-09-20 11:36:33 Run:1
Running from C:\Users\Feri\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre6\bin\jusched.exe [172032 2010-05-30] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Java\jre6\bin\jusched.exe [149280 2010-05-30] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-16] (Microsoft Corporation)
R3 ALSysIO; \??\C:\Users\Feri\AppData\Local\Temp\ALSysIO64.sys [X]
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
C:\Program Files (x86)\PANDORA.TV
2014-09-19 13:34 - 2014-09-19 13:34 - 00016432 _____ () C:\Users\Feri\Desktop\FRST.txt
2014-09-19 13:33 - 2014-09-19 13:33 - 00112640 _____ (forum.viry.cz) C:\Users\Feri\Desktop\FRSTLauncher.exe
2014-09-19 13:24 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-09-19 13:04 - 2014-09-19 13:26 - 00032796 _____ () C:\zoek-results.log
2014-09-19 13:03 - 2014-09-19 13:18 - 00000000 ____D () C:\zoek_backup
2014-09-19 13:02 - 2014-09-19 13:02 - 00000000 ____D () C:\Users\Feri\Desktop\zoek
2014-09-19 13:01 - 2014-09-19 13:02 - 04256073 _____ () C:\Users\Feri\Downloads\zoek.rar
2014-09-19 12:50 - 2014-09-19 12:50 - 00005673 _____ () C:\Users\Feri\Desktop\JRT.txt
2014-09-19 12:41 - 2014-09-19 12:41 - 00000000 ____D () C:\Windows\ERUNT
2014-09-19 12:40 - 2014-09-19 12:40 - 01019328 _____ (Thisisu) C:\Users\Feri\Desktop\JRT.exe
2014-09-19 12:33 - 2014-09-19 13:25 - 00000168 _____ () C:\Windows\setupact.log
2014-09-19 12:33 - 2014-09-19 12:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-19 01:38 - 2014-09-19 01:39 - 00000000 ____D () C:\rsit
2014-09-19 01:38 - 2014-09-19 01:38 - 00000000 ____D () C:\Program Files\trend micro
2014-09-19 01:35 - 2014-09-19 01:35 - 01222144 _____ () C:\Users\Feri\Downloads\RSITx64.exe
2014-09-19 01:03 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-19 01:02 - 2014-09-19 12:53 - 00000000 ____D () C:\AdwCleaner
C:\Program Files (x86)\iWebar
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2.job => C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-2.exe <==== ATTENTION
Task: {37663F19-3C5D-46D0-8535-CC24B9F07B2B} - \temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2 No Task File <==== ATTENTION
Task: {4F29F697-8A8F-46FD-ACDC-30257A7E471B} - \YTAUpdate No Task File <==== ATTENTION
Task: {6A2F2B85-D0FC-4A6E-BE41-DEC1D70513F9} - \Installer_shopperpro No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\EnableShellExecuteHooks => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-16] (Microsoft Corporation) => Value not found.
ALSysIO => Service stopped successfully.
ALSysIO => Service deleted successfully.
PanService => Service deleted successfully.
C:\Program Files (x86)\PANDORA.TV => Moved successfully.
C:\Users\Feri\Desktop\FRST.txt => Moved successfully.
C:\Users\Feri\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Feri\Desktop\zoek => Moved successfully.
C:\Users\Feri\Downloads\zoek.rar => Moved successfully.
C:\Users\Feri\Desktop\JRT.txt => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Feri\Desktop\JRT.exe => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Feri\Downloads\RSITx64.exe => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\AdwCleaner => Moved successfully.
"C:\Program Files (x86)\iWebar" => File/Directory not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2.job => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37663F19-3C5D-46D0-8535-CC24B9F07B2B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37663F19-3C5D-46D0-8535-CC24B9F07B2B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4F29F697-8A8F-46FD-ACDC-30257A7E471B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F29F697-8A8F-46FD-ACDC-30257A7E471B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTAUpdate" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6A2F2B85-D0FC-4A6E-BE41-DEC1D70513F9}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A2F2B85-D0FC-4A6E-BE41-DEC1D70513F9}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Installer_shopperpro" => Key deleted successfully.
C:\ProgramData\Temp => ":56E2E879" ADS removed successfully.
========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f =========
Oper cia sa Łspeçne dokonźila.
========= End of Reg: =========
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 4.1 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Ran by Feri at 2014-09-20 11:36:33 Run:1
Running from C:\Users\Feri\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre6\bin\jusched.exe [172032 2010-05-30] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Java\jre6\bin\jusched.exe [149280 2010-05-30] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-16] (Microsoft Corporation)
R3 ALSysIO; \??\C:\Users\Feri\AppData\Local\Temp\ALSysIO64.sys [X]
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
C:\Program Files (x86)\PANDORA.TV
2014-09-19 13:34 - 2014-09-19 13:34 - 00016432 _____ () C:\Users\Feri\Desktop\FRST.txt
2014-09-19 13:33 - 2014-09-19 13:33 - 00112640 _____ (forum.viry.cz) C:\Users\Feri\Desktop\FRSTLauncher.exe
2014-09-19 13:24 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-09-19 13:04 - 2014-09-19 13:26 - 00032796 _____ () C:\zoek-results.log
2014-09-19 13:03 - 2014-09-19 13:18 - 00000000 ____D () C:\zoek_backup
2014-09-19 13:02 - 2014-09-19 13:02 - 00000000 ____D () C:\Users\Feri\Desktop\zoek
2014-09-19 13:01 - 2014-09-19 13:02 - 04256073 _____ () C:\Users\Feri\Downloads\zoek.rar
2014-09-19 12:50 - 2014-09-19 12:50 - 00005673 _____ () C:\Users\Feri\Desktop\JRT.txt
2014-09-19 12:41 - 2014-09-19 12:41 - 00000000 ____D () C:\Windows\ERUNT
2014-09-19 12:40 - 2014-09-19 12:40 - 01019328 _____ (Thisisu) C:\Users\Feri\Desktop\JRT.exe
2014-09-19 12:33 - 2014-09-19 13:25 - 00000168 _____ () C:\Windows\setupact.log
2014-09-19 12:33 - 2014-09-19 12:33 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-19 01:38 - 2014-09-19 01:39 - 00000000 ____D () C:\rsit
2014-09-19 01:38 - 2014-09-19 01:38 - 00000000 ____D () C:\Program Files\trend micro
2014-09-19 01:35 - 2014-09-19 01:35 - 01222144 _____ () C:\Users\Feri\Downloads\RSITx64.exe
2014-09-19 01:03 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-19 01:02 - 2014-09-19 12:53 - 00000000 ____D () C:\AdwCleaner
C:\Program Files (x86)\iWebar
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2.job => C:\Program Files (x86)\iWebar\c94697dc-6b6d-478f-bddd-348b413d6a2a-2.exe <==== ATTENTION
Task: {37663F19-3C5D-46D0-8535-CC24B9F07B2B} - \temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2 No Task File <==== ATTENTION
Task: {4F29F697-8A8F-46FD-ACDC-30257A7E471B} - \YTAUpdate No Task File <==== ATTENTION
Task: {6A2F2B85-D0FC-4A6E-BE41-DEC1D70513F9} - \Installer_shopperpro No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:56E2E879
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\EnableShellExecuteHooks => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-16] (Microsoft Corporation) => Value not found.
ALSysIO => Service stopped successfully.
ALSysIO => Service deleted successfully.
PanService => Service deleted successfully.
C:\Program Files (x86)\PANDORA.TV => Moved successfully.
C:\Users\Feri\Desktop\FRST.txt => Moved successfully.
C:\Users\Feri\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Feri\Desktop\zoek => Moved successfully.
C:\Users\Feri\Downloads\zoek.rar => Moved successfully.
C:\Users\Feri\Desktop\JRT.txt => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Feri\Desktop\JRT.exe => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Feri\Downloads\RSITx64.exe => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\AdwCleaner => Moved successfully.
"C:\Program Files (x86)\iWebar" => File/Directory not found.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2.job => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37663F19-3C5D-46D0-8535-CC24B9F07B2B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37663F19-3C5D-46D0-8535-CC24B9F07B2B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\temp_c94697dc-6b6d-478f-bddd-348b413d6a2a-2" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4F29F697-8A8F-46FD-ACDC-30257A7E471B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F29F697-8A8F-46FD-ACDC-30257A7E471B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTAUpdate" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6A2F2B85-D0FC-4A6E-BE41-DEC1D70513F9}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A2F2B85-D0FC-4A6E-BE41-DEC1D70513F9}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Installer_shopperpro" => Key deleted successfully.
C:\ProgramData\Temp => ":56E2E879" ADS removed successfully.
========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite" /f =========
Oper cia sa Łspeçne dokonźila.
========= End of Reg: =========
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 4.1 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Re: Nejake hrozby v avaste
Tak jeste uklidime
T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
OTC http://oldtimer.geekstogo.com/OTC.exe
TFC http://oldtimer.geekstogo.com/TFC.exe
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse 
T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
A pokud nejsou problemy ci dotazy, je to z me strany vse "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Nejake hrozby v avaste
ntb sa chova v poriadku takze Dakujem 
Re: Nejake hrozby v avaste
Zase nekdy 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?