Pomalý PC - nejspise savepass - nadmerne zobrazovani reklam

Zpráva

pnk911 · #1 Příspěvek od **pnk911** » 14 Lis 2014 15:35

Dobry den,

Prosím o pomoc s PC. Včera jsem instaloval freeware programu na vytvoreni vizitek, od te doby to zacalo. Presneji : neustale zobrazovani několika reklam na webech, kde nemaji byt, HDD v notebooku se neustale nacita a pracuje na plny obratky.

Prosim o pomoc. Dekuji

Zasilam log z FRST.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2014 02
Ran by Samsung (administrator) on NOTEBOOK on 14-11-2014 15:33:23
Running from C:\Users\Samsung\Desktop
Loaded Profile: Samsung (Available profiles: Samsung)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12459112 2014-10-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-11-14] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-06-17] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-241242482-2981187293-2557107031-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-241242482-2981187293-2557107031-1001\...\MountPoints2: {8f907407-62bd-11e4-be8a-50b7c32b5f7a} - "E:\iStudio.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {4B2BAC2D-C9AF-4751-951B-3E02A9AF3D54} URL = http://www.bing.com/search?q={searchTer ... &pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {4B2BAC2D-C9AF-4751-951B-3E02A9AF3D54} URL = http://www.bing.com/search?q={searchTer ... &pc=MASMJS
SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {24099603-8349-404F-8F10-0168E562CAED} URL = http://search.seznam.cz/?q={searchTerms ... chmodule_1
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Samsung\AppData\Roaming\Mozilla\Firefox\Profiles\jbnpj2yi.default
FF NewTab: hxxp://www.google.com
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-14]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSearchKeyword: Default -> Google
CHR DefaultSearchURL: Default -> http://www.google.com/search?q={searchTerms}
CHR Profile: C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-03]
CHR Extension: (Dokumenty Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-03]
CHR Extension: (Disk Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-03]
CHR Extension: (YouTube) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-03]
CHR Extension: (Vyhledávání Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-03]
CHR Extension: (Tabulky Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-03]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-10-09]
CHR Extension: (AdBlock) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-13]
CHR Extension: (Avast Online Security) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-14]
CHR Extension: (Peněženka Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-03]
CHR Extension: (Gmail) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-03]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-06-17] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-14] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-11-14] (AVAST Software)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe [51016 2014-08-21] (Google Inc.)
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2014-11-13] (Elex do Brasil Participações Ltda)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-02] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-02] (Microsoft Corporation)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [516608 2013-08-21] () [File not signed]
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3000664 2014-08-28] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2014-07-21] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-14] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-11-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-14] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-11-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-14] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-14] ()
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [223432 2014-06-17] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-06-17] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
U1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [248488 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [65704 2014-11-13] (Elex do Brasil Participações Ltda)
U1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [49320 2014-11-03] (Elex do Brasil Participações Ltda)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-14 15:33 - 2014-11-14 15:33 - 00014117 _____ () C:\Users\Samsung\Desktop\FRST.txt
2014-11-14 15:32 - 2014-11-14 15:33 - 00000000 ____D () C:\FRST
2014-11-14 15:32 - 2014-11-14 15:32 - 02116608 _____ (Farbar) C:\Users\Samsung\Desktop\FRST64.exe
2014-11-14 15:25 - 2014-11-14 15:25 - 00000021 _____ () C:\folders.log
2014-11-14 15:25 - 2014-11-14 15:25 - 00000000 ____D () C:\zoek
2014-11-14 15:06 - 2014-11-14 15:26 - 00002723 _____ () C:\zoek-results.log
2014-11-14 15:05 - 2014-11-14 15:26 - 00002968 _____ () C:\runcheck.txt
2014-11-14 15:04 - 2014-11-14 15:04 - 01294848 _____ () C:\Users\Samsung\Downloads\zoek.exe
2014-11-14 15:04 - 2014-11-14 15:04 - 00000000 ____D () C:\zoek_backup
2014-11-14 15:01 - 2014-11-14 15:01 - 00000000 ___RD () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-11-14 15:00 - 2014-11-14 15:00 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Elex-tech
2014-11-14 14:59 - 2014-11-14 14:59 - 00322998 _____ () C:\WINDOWS\PFRO.log
2014-11-14 14:56 - 2014-11-14 14:59 - 00000000 ____D () C:\AdwCleaner
2014-11-14 14:56 - 2014-11-14 14:56 - 02140160 _____ () C:\Users\Samsung\Downloads\adwcleaner_4.101.exe
2014-11-14 14:08 - 2014-11-14 14:58 - 00000000 ____D () C:\WINDOWS\system32\log
2014-11-14 14:08 - 2014-11-14 14:08 - 00001924 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk
2014-11-14 14:08 - 2014-11-03 10:04 - 00049320 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
2014-11-14 14:07 - 2014-11-14 14:07 - 00000000 ____D () C:\Program Files (x86)\Elex-tech
2014-11-14 14:06 - 2014-11-14 14:07 - 15250560 _____ (Elex do Brasil Participações Ltda) C:\Users\Samsung\Downloads\yet_another_cleaner_sk_150823.exe
2014-11-14 12:54 - 2014-11-14 12:54 - 00065024 _____ () C:\Users\Samsung\Downloads\_NABÍDKA_a_CENÍK_2014_10(1).xls
2014-11-14 12:38 - 2014-11-14 12:38 - 00065024 _____ () C:\Users\Samsung\Downloads\_NABÍDKA_a_CENÍK_2014_10.xls
2014-11-14 11:18 - 2014-11-14 11:18 - 00001986 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-11-14 11:18 - 2014-11-14 11:17 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-11-14 11:18 - 2014-11-14 11:12 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-11-14 11:17 - 2014-11-14 11:18 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Dropbox
2014-11-14 11:17 - 2014-11-14 11:17 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2014-11-14 11:13 - 2014-11-14 11:13 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\AVAST Software
2014-11-14 11:12 - 2014-11-14 11:18 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-11-14 11:12 - 2014-11-14 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-14 11:12 - 2014-11-14 11:12 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-11-14 11:12 - 2014-11-14 11:12 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-11-14 11:12 - 2014-11-14 11:11 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-11-14 11:08 - 2014-11-14 11:08 - 00000000 ____D () C:\Program Files\AVAST Software
2014-11-14 11:07 - 2014-11-14 11:08 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-13 18:14 - 2014-11-13 18:14 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Media Freeware
2014-11-13 18:09 - 2014-11-13 18:09 - 00000000 ____D () C:\Program Files (x86)\63e4ae40-4d88-4b0e-af68-5d2104863f3d
2014-11-13 18:07 - 2014-11-14 15:00 - 00001366 _____ () C:\WINDOWS\Tasks\IGLMGRH.job
2014-11-13 18:07 - 2014-11-13 18:07 - 01515440 _____ (HQ-VideoV13.11) C:\Users\Samsung\AppData\Roaming\IGLMGRH.exe
2014-11-13 18:07 - 2014-11-13 18:07 - 00004376 _____ () C:\WINDOWS\System32\Tasks\IGLMGRH
2014-11-13 18:06 - 2014-11-14 15:00 - 00001364 _____ () C:\WINDOWS\Tasks\AAZQRF.job
2014-11-13 18:06 - 2014-11-13 18:07 - 00000000 ____D () C:\Program Files (x86)\8222b8b9-401f-4e41-b68f-5b401090fb24
2014-11-13 18:06 - 2014-11-13 18:06 - 02003888 _____ (HQ-VideoV13.11) C:\Users\Samsung\AppData\Roaming\AAZQRF.exe
2014-11-13 18:06 - 2014-11-13 18:06 - 00004372 _____ () C:\WINDOWS\System32\Tasks\AAZQRF
2014-11-13 18:02 - 2014-11-13 18:02 - 00000000 __SHD () C:\Users\Samsung\AppData\Local\EmieBrowserModeList
2014-11-13 17:09 - 2014-11-13 17:09 - 00126633 _____ () C:\Users\Samsung\AppData\Local\recently-used.xbel
2014-11-13 16:29 - 2014-10-30 01:55 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-13 16:29 - 2014-10-30 01:55 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-13 11:34 - 2014-11-13 16:57 - 00018432 ___SH () C:\Users\Samsung\Documents\Thumbs.db
2014-11-13 09:55 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-13 09:55 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-13 09:55 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-13 09:55 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-13 09:55 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-13 09:55 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-13 09:55 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-13 09:55 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-13 09:55 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-13 09:55 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-13 09:55 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-13 09:55 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-13 09:55 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-13 09:55 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-13 09:55 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-13 09:54 - 2014-11-05 00:38 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-11-13 09:54 - 2014-11-04 01:10 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-11-13 09:54 - 2014-10-31 05:53 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-11-13 09:54 - 2014-10-31 05:49 - 00537088 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-11-13 09:54 - 2014-10-31 05:24 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-11-13 09:21 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-13 09:21 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-13 09:21 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-13 09:21 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-13 09:21 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-13 09:19 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-13 09:19 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-13 09:19 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-13 09:19 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-13 09:19 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-13 09:19 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-13 09:19 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-13 09:19 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-13 09:19 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-13 09:19 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-13 09:19 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-13 09:19 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-13 09:19 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-13 09:19 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-13 09:19 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-13 09:19 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-13 09:19 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-13 09:19 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-13 09:19 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-13 09:19 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-13 09:19 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-13 09:19 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-13 09:19 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-13 09:19 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-13 09:19 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-13 09:19 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-13 09:19 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-13 09:19 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-13 09:19 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-13 09:19 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-13 09:19 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-13 09:18 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-13 09:18 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-13 09:18 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-13 09:18 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-13 09:17 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-13 09:17 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-13 09:17 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-13 09:17 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-13 09:17 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-13 09:17 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-13 09:17 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-13 09:17 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-13 09:17 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-13 09:17 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-13 09:17 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-13 09:17 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-13 09:17 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-13 09:17 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-13 09:17 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-13 09:17 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-13 09:17 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-13 09:17 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-13 09:17 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-13 09:17 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-13 09:17 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-13 09:17 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-13 09:17 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-13 09:17 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-13 09:17 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-13 09:17 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-13 09:17 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-13 09:17 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-13 09:17 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-13 09:17 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-13 09:17 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-13 09:17 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-13 09:17 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-13 09:17 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-13 09:17 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-13 09:17 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-13 09:17 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-13 09:17 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-13 09:17 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-13 09:17 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-13 09:17 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-13 09:17 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-13 09:17 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-13 09:17 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-13 09:17 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-13 09:17 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-13 09:17 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-13 09:17 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-13 09:17 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-13 09:17 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-13 09:17 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-13 09:17 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-13 09:17 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-13 09:17 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-13 09:17 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-13 09:17 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-13 09:17 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-13 09:17 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-13 09:17 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-13 09:17 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-13 09:17 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-13 09:17 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-13 09:17 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-13 09:17 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-13 09:17 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-13 09:17 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-13 09:17 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-13 09:17 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-13 09:17 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-13 09:17 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-13 09:17 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-13 09:17 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-13 09:17 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-13 09:17 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-13 09:17 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-13 09:17 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-13 09:17 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-13 09:17 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-13 09:17 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-13 09:17 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-13 09:17 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-13 09:17 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-13 09:17 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-13 09:17 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-13 09:17 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-13 09:17 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-13 09:17 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-13 09:17 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-13 09:16 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-13 09:16 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-13 09:15 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-13 09:15 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-13 09:14 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-13 09:14 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-13 09:14 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-13 09:14 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-13 09:14 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-13 09:14 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-13 09:14 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-13 09:14 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-13 09:14 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-13 09:14 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-13 09:14 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-13 09:13 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-13 09:13 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-13 09:13 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-13 09:13 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-13 09:13 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-13 09:13 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-13 09:13 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-13 09:13 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-13 09:13 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-13 09:13 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-13 09:13 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-13 09:13 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-13 09:13 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-13 09:13 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-13 09:13 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-13 09:13 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-13 09:13 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-13 09:13 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-13 09:13 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-13 09:13 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-13 09:13 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-13 09:13 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-13 09:13 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-13 09:13 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-13 09:13 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-13 09:13 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-12 09:52 - 2014-11-12 09:52 - 00005367 _____ () C:\Users\Samsung\Downloads\Hotovo - provize - domluva - evinice.cz.xlsx
2014-11-11 17:32 - 2014-11-11 19:13 - 1348129763 _____ () C:\Users\Samsung\Downloads\CloudyG3_2.1.zip
2014-11-10 20:55 - 2014-11-10 20:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-08 09:51 - 2014-11-14 15:00 - 00000799 _____ () C:\WINDOWS\system32\Service_KMS.log
2014-11-07 11:59 - 2014-11-14 11:59 - 00000753 _____ () C:\WINDOWS\system32\AutoPico.log
2014-11-07 08:59 - 2014-11-07 08:59 - 00001129 _____ () C:\Users\Public\Desktop\FastStone Photo Resizer.lnk
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\FastStone
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\Users\Samsung\AppData\Local\FastStone
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Photo Resizer
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\Program Files (x86)\FastStone Photo Resizer
2014-11-07 08:43 - 2014-11-07 08:57 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\XnView
2014-11-07 08:40 - 2014-11-07 08:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2014-11-07 08:40 - 2014-11-07 08:40 - 00000000 ____D () C:\Program Files (x86)\XnView
2014-11-07 08:34 - 2014-11-07 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-11-07 08:33 - 2014-11-07 08:33 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\IrfanView
2014-11-07 08:33 - 2014-11-07 08:33 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-11-07 08:32 - 2014-11-07 08:32 - 01898640 _____ (Irfan Skiljan) C:\Users\Samsung\Downloads\iview438_setup.exe
2014-11-06 21:25 - 2014-11-06 21:25 - 00003364 _____ () C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
2014-11-06 21:25 - 2014-11-06 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2014-11-06 21:25 - 2014-11-06 21:25 - 00000000 ____D () C:\Program Files\KMSpico
2014-11-06 21:19 - 2014-11-14 11:02 - 00000000 ____D () C:\WINDOWS\AutoKMS
2014-11-06 21:17 - 2014-11-06 21:17 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Microsoft Toolkit
2014-11-06 21:13 - 2014-11-06 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-06 21:11 - 2014-11-06 21:11 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-11-06 21:11 - 2014-11-06 21:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-11-06 21:09 - 2014-11-06 21:13 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-06 21:09 - 2014-11-06 21:09 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Microsoft Help
2014-11-06 21:09 - 2014-11-06 21:09 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-11-06 21:09 - 2014-11-06 21:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-11-06 21:08 - 2014-11-06 21:08 - 00000000 __RHD () C:\MSOCache
2014-11-05 18:01 - 2014-11-05 18:01 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\WinRAR
2014-11-05 18:01 - 2014-11-05 13:27 - 00000000 ____D () C:\Users\Samsung\Desktop\bulharska vina fotky
2014-11-05 18:00 - 2014-11-05 18:00 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-05 18:00 - 2014-11-05 18:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-05 17:59 - 2014-11-05 18:00 - 00000000 ____D () C:\Program Files\WinRAR
2014-11-05 17:59 - 2014-11-05 17:59 - 00000000 ____D () C:\Users\Samsung\Desktop\winrar 4.20 32 - 64 bit cz sk
2014-11-05 17:55 - 2014-11-06 20:58 - 00000000 ____D () C:\Users\Samsung\Desktop\microsoft office 2013
2014-11-05 17:49 - 2014-11-05 21:25 - 00000000 ____D () C:\Users\Samsung\Desktop\FILMY
2014-11-04 17:30 - 2014-11-04 17:30 - 00250664 _____ () C:\Users\Samsung\Documents\Formulář-nový dodavatel.docm
2014-11-04 08:43 - 2014-11-05 17:49 - 00000000 ____D () C:\Users\Samsung\Desktop\Nellynka
2014-11-03 21:15 - 2014-11-14 15:04 - 01606548 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-03 17:48 - 2014-11-03 17:48 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\dvdcss
2014-10-28 20:48 - 2014-10-31 15:55 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Litecoin
2014-10-28 20:48 - 2014-10-28 20:48 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Litecoin
2014-10-28 20:48 - 2014-10-28 20:48 - 00000000 ____D () C:\Program Files (x86)\Litecoin
2014-10-23 20:31 - 2014-10-31 13:59 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Bitcoin
2014-10-23 20:30 - 2014-10-23 20:30 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitcoin Core
2014-10-23 20:30 - 2014-10-23 20:30 - 00000000 ____D () C:\Program Files\Bitcoin
2014-10-17 11:58 - 2014-10-17 11:58 - 00000000 ____D () C:\Users\Samsung\Desktop\Tor Browser
2014-10-17 09:07 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-10-17 09:07 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-10-17 09:07 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-10-17 07:22 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-10-17 07:22 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-10-17 07:21 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-10-17 07:21 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-10-17 07:21 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-10-17 07:21 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-10-17 07:21 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-10-17 07:21 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-10-17 07:21 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-10-17 07:21 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-17 07:21 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-10-17 07:21 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-10-17 07:21 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-10-17 07:21 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-10-17 07:21 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-10-17 07:21 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-10-17 07:21 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-10-17 07:21 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-17 07:21 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-10-17 07:21 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-17 07:21 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-17 07:21 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-17 07:21 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-10-17 07:21 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-17 07:21 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-10-17 07:21 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-10-17 07:21 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-10-17 07:21 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-10-17 07:21 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-10-17 07:21 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-10-17 07:21 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-10-17 07:21 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-10-15 08:48 - 2014-10-16 07:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-14 15:28 - 2014-09-05 08:40 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Skype
2014-11-14 15:08 - 2014-09-03 10:49 - 00000978 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-14 15:05 - 2014-09-01 10:24 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-241242482-2981187293-2557107031-1001
2014-11-14 15:01 - 2014-09-03 10:49 - 00000974 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-14 15:01 - 2014-09-02 16:01 - 00000000 __RDO () C:\Users\Samsung\OneDrive
2014-11-14 15:00 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-14 14:59 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-14 14:49 - 2014-09-10 18:07 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\uTorrent
2014-11-14 14:48 - 2014-09-04 10:40 - 00000000 ____D () C:\Users\Samsung\AppData\Local\CrashDumps
2014-11-14 14:47 - 2014-09-02 15:45 - 00000000 ___RD () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-14 14:47 - 2013-08-22 16:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-14 14:44 - 2014-09-03 10:51 - 00002261 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-14 14:31 - 2014-09-04 07:06 - 02868224 ___SH () C:\Users\Samsung\Desktop\Thumbs.db
2014-11-14 14:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-14 13:54 - 2014-09-01 10:17 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Packages
2014-11-14 11:28 - 2014-03-18 16:33 - 00005430 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-14 11:28 - 2014-03-18 15:54 - 00901830 _____ () C:\WINDOWS\system32\perfh005.dat
2014-11-14 11:28 - 2014-03-18 15:54 - 00202492 _____ () C:\WINDOWS\system32\perfc005.dat
2014-11-14 09:55 - 2014-09-02 20:43 - 00003978 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DA0BC837-ECB6-4D58-8008-A122E785BE3E}
2014-11-14 09:26 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-14 08:35 - 2014-09-02 15:45 - 00000000 ____D () C:\Users\Samsung
2014-11-13 18:09 - 2014-09-02 00:42 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-13 18:07 - 2014-09-02 15:37 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-11-13 17:10 - 2014-09-16 16:09 - 00000000 ____D () C:\Users\Samsung\.gimp-2.8
2014-11-13 17:08 - 2014-09-22 14:50 - 00000000 ____D () C:\Users\Samsung\AppData\Local\gtk-2.0
2014-11-13 16:34 - 2013-08-22 15:44 - 00411792 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-13 16:25 - 2014-09-02 00:15 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 14:03 - 2014-09-03 10:49 - 00003950 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-13 14:03 - 2014-09-03 10:49 - 00003714 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-13 13:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-11-13 12:04 - 2014-09-01 11:29 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-13 12:02 - 2014-09-01 11:29 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-12 16:19 - 2014-09-01 10:46 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\vlc
2014-11-12 12:55 - 2014-09-03 07:19 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Battle.net
2014-11-12 10:45 - 2014-09-05 08:39 - 00000000 ____D () C:\ProgramData\Skype
2014-11-12 07:51 - 2014-09-02 09:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-06 21:11 - 2014-09-22 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-11-06 21:09 - 2014-03-18 16:10 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-11-06 21:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-05 18:36 - 2014-09-04 13:37 - 00294912 ___SH () C:\Users\Samsung\Downloads\Thumbs.db
2014-10-30 12:25 - 2014-09-01 11:31 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-10-30 12:23 - 2014-09-03 07:26 - 00000000 ____D () C:\Hearthstone
2014-10-26 09:22 - 2014-09-03 07:18 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-10-20 09:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-10-19 10:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-10-19 10:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-10-19 10:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-10-19 10:08 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore

Some content of TEMP:
====================
C:\Users\Samsung\AppData\Local\Temp\7za.exe
C:\Users\Samsung\AppData\Local\Temp\hijackthis.exe
C:\Users\Samsung\AppData\Local\Temp\NirCmd.exe
C:\Users\Samsung\AppData\Local\Temp\PEVZ.EXE
C:\Users\Samsung\AppData\Local\Temp\Quarantine.exe
C:\Users\Samsung\AppData\Local\Temp\remove.exe
C:\Users\Samsung\AppData\Local\Temp\sed.exe
C:\Users\Samsung\AppData\Local\Temp\shortcut.exe
C:\Users\Samsung\AppData\Local\Temp\sqlite3.dll
C:\Users\Samsung\AppData\Local\Temp\swreg.exe
C:\Users\Samsung\AppData\Local\Temp\swxcacls.exe
C:\Users\Samsung\AppData\Local\Temp\wget.exe
C:\Users\Samsung\AppData\Local\Temp\zoek-delete.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-08 13:33

==================== End Of Log ============================

pnk911 · #2 Příspěvek od **pnk911** » 14 Lis 2014 15:37

Prikladam logy z Adwcleaner

# AdwCleaner v4.101 - Report created 14/11/2014 at 14:56:46
# Updated 09/11/2014 by Xplode
# Database : 2014-11-13.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Samsung - NOTEBOOK
# Running from : C:\Users\Samsung\Downloads\adwcleaner_4.101.exe
# Option : Scan

***** [ Services ] *****

Service Found : iSafeKrnl
Service Found : iSafeKrnlBoot
Service Found : iSafeKrnlKit
Service Found : iSafeKrnlR3
Service Found : iSafeNetFilter
Service Found : iSafeService

***** [ Files / Folders ] *****

File Found : C:\Users\Public\Desktop\YAC.lnk
File Found : C:\WINDOWS\System32\drivers\iSafeKrnlBoot.sys
File Found : C:\WINDOWS\System32\log\iSafeKrnlCall.log
Folder Found : C:\Program Files (x86)\Elex-tech
Folder Found : C:\Program Files (x86)\HQ-Video-Pro-2.1cV13.11
Folder Found : C:\Program Files (x86)\SavePass 1.1
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
Folder Found : C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\edjkooiccbgjhlpfhkknkjhfpmjkmelk
Folder Found : C:\Users\Samsung\AppData\Local\Temp\iSafeRightKeyScan
Folder Found : C:\Users\Samsung\AppData\Roaming\Elex-tech
Folder Found : C:\Users\Samsung\AppData\Roaming\Mozilla\Firefox\Profiles\jbnpj2yi.default\Extensions\EKJVVD29402736@EUOWKG84927606.com

***** [ Scheduled Tasks ] *****

Task Found : 543c9e9c-52af-418d-8b29-2da1dc48babb
Task Found : 71d3b670-ff03-4e71-9bde-2c761bac730d
Task Found : 77c3c5ff-43c2-4ad3-bd40-9bf12e079556
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-1
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-11
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-2
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-3
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-4
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-5
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-5_user
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-6
Task Found : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-7
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-1
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-11
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-2
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-4
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-5
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-5_user
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-6
Task Found : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-7
Task Found : f7afb163-8ef3-4bac-a0f7-3ce044ce5a4f

***** [ Shortcuts ] *****

***** [ Registry ] *****

Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\AppDataLow\Software\HQ-Video-Pro-2.1cV13.11
Key Found : HKCU\Software\InstalledBrowserExtensions
Key Found : [x64] HKCU\Software\InstalledBrowserExtensions
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622312263}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655315563}
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655345529}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666316663}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666346629}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644314463}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644344429}
Key Found : HKLM\SOFTWARE\HQ-Video-Pro-2.1cV13.11
Key Found : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622312263}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655315563}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655345529}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666316663}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666346629}
Key Found : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Mozilla Firefox v33.1 (x86 en-US)

[jbnpj2yi.default] - Line Found : user_pref("extensions.aEKJVVD29402736EUOWKG84927606com63163.63163.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%[...]
[jbnpj2yi.default] - Line Found : user_pref("extensions.crossrider.bic", "149aa225170a9d7e89e5536e5f20603f");

-\\ Google Chrome v38.0.2125.111

*************************

AdwCleaner[R0].txt - [5176 octets] - [14/11/2014 14:56:46]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [5236 octets] ##########

-------------------------------

# AdwCleaner v4.101 - Report created 14/11/2014 at 14:58:32
# Updated 09/11/2014 by Xplode
# Database : 2014-11-13.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Samsung - NOTEBOOK
# Running from : C:\Users\Samsung\Downloads\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : iSafeKrnl
Service Deleted : iSafeKrnlBoot
Service Deleted : iSafeKrnlKit
Service Deleted : iSafeKrnlR3
Service Deleted : iSafeNetFilter
[#] Service Deleted : iSafeService

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
[!] Folder Deleted : C:\Program Files (x86)\Elex-tech
Folder Deleted : C:\Program Files (x86)\HQ-Video-Pro-2.1cV13.11
Folder Deleted : C:\Program Files (x86)\SavePass 1.1
Folder Deleted : C:\Users\Samsung\AppData\Local\Temp\iSafeRightKeyScan
Folder Deleted : C:\Users\Samsung\AppData\Roaming\Elex-tech
Folder Deleted : C:\Users\Samsung\AppData\Roaming\Mozilla\Firefox\Profiles\jbnpj2yi.default\Extensions\EKJVVD29402736@EUOWKG84927606.com
Folder Deleted : C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\edjkooiccbgjhlpfhkknkjhfpmjkmelk
File Deleted : C:\Users\Public\Desktop\YAC.lnk
File Deleted : C:\WINDOWS\System32\drivers\iSafeKrnlBoot.sys
File Deleted : C:\WINDOWS\System32\log\iSafeKrnlCall.log

***** [ Scheduled Tasks ] *****

Task Deleted : 543c9e9c-52af-418d-8b29-2da1dc48babb
Task Deleted : 71d3b670-ff03-4e71-9bde-2c761bac730d
Task Deleted : 77c3c5ff-43c2-4ad3-bd40-9bf12e079556
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-1
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-11
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-2
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-3
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-4
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-5
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-5_user
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-6
Task Deleted : 81e8b209-9c5f-404b-b05a-cd8fcd02cff5-7
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-1
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-11
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-2
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-4
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-5
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-5_user
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-6
Task Deleted : 9841ad93-c15f-4d96-b9de-1d73d2a6e583-7
Task Deleted : f7afb163-8ef3-4bac-a0f7-3ce044ce5a4f

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622312263}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655315563}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655345529}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666316663}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666346629}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644314463}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644344429}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622342229}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622312263}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655315563}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655345529}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666316663}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666346629}
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\HQ-Video-Pro-2.1cV13.11
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\HQ-Video-Pro-2.1cV13.11
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Mozilla Firefox v33.1 (x86 en-US)

[jbnpj2yi.default\prefs.js] - Line Deleted : user_pref("extensions.aEKJVVD29402736EUOWKG84927606com63163.63163.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%[...]
[jbnpj2yi.default\prefs.js] - Line Deleted : user_pref("extensions.crossrider.bic", "149aa225170a9d7e89e5536e5f20603f");

-\\ Google Chrome v38.0.2125.111

*************************

AdwCleaner[R0].txt - [5356 octets] - [14/11/2014 14:56:46]
AdwCleaner[S0].txt - [5171 octets] - [14/11/2014 14:58:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5231 octets] ##########

pnk911 · #3 Příspěvek od **pnk911** » 14 Lis 2014 15:41

Prikladam rovněž další log pro urychleni

Logfile of random's system information tool 1.10 (written by random/random)
Run by Samsung at 2014-11-14 15:40:15
Microsoft Windows 8.1
System drive C: has 602 GB (87%) free of 689 GB
Total RAM: 3985 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:40:20, on 14. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\SysWOW64\cmd.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\SysWOW64\mshta.exe
C:\Program Files\trend micro\Samsung.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_core.dll,-101 (chromoting) - Google Inc. - C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: YAC Service (iSafeService) - Elex do Brasil Participaçoes Ltda - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Service KMSELDI - Unknown owner - C:\Program Files\KMSpico\Service_KMS.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 7157 bytes

======Listing Processes======

wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
c:\windows\system32\svchost.exe -k dcomlaunch
c:\windows\system32\svchost.exe -k rpcss
"dwm.exe"
C:\WINDOWS\system32\atiesrxx.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted

c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservice
atieclxx
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted
c:\windows\system32\svchost.exe -k networkservice
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe" --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
"C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe" --type=host --daemon-pipe=480
c:\windows\system32\svchost.exe -k imgsvc
"C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe" /SERVICE
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation
c:\windows\system32\svchost.exe -k localservicepeernet
dashost.exe {a66e2f9b-f22b-4c74-84c78940caf14949}
C:\WINDOWS\Explorer.EXE
taskhostex.exe
"C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files\Samsung\S Agent\CommonAgent.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\WINDOWS\system32\wuauclt.exe"
cmd /c zoekrun.bat
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Internet Explorer\iexplore.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3192 CREDAT:2299155 /prefetch:2
c:\windows\system32\svchost.exe -k swprv
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-241242482-2981187293-2557107031-10017_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-241242482-2981187293-2557107031-10017 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Samsung\AppData\Local\Temp\zoekrun.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 592 596 604 65536 600
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"

"C:\Users\Samsung\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\AAZQRF.job - C:\Users\Samsung\AppData\Roaming\AAZQRF.exe /infocmdline=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
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\IGLMGRH.job - C:\Users\Samsung\AppData\Roaming\IGLMGRH.exe /infocmdline=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

=========Mozilla firefox=========

ProfilePath - C:\Users\Samsung\AppData\Roaming\Mozilla\Firefox\Profiles\jbnpj2yi.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.179 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.179 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll

C:\Users\Samsung\AppData\Roaming\Mozilla\Firefox\Profiles\jbnpj2yi.default\searchplugins\
Google.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-14 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-09-03 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 877720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2012-10-01 2322576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-14 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-09-03 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL [2012-10-01 704664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-09-03 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-09-03 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2014-01-29 399832]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-10-11 12459112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2014-06-17 134784]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-14 5225064]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2014-06-17 134784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2014-01-29 442880]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-14 15:40:15 ----D---- C:\rsit
2014-11-14 15:40:15 ----D---- C:\Program Files\trend micro
2014-11-14 15:32:58 ----D---- C:\FRST
2014-11-14 15:25:19 ----D---- C:\zoek
2014-11-14 15:05:00 ----A---- C:\runcheck.txt
2014-11-14 15:04:53 ----D---- C:\zoek_backup
2014-11-14 15:00:40 ----D---- C:\Users\Samsung\AppData\Roaming\Elex-tech
2014-11-14 14:56:40 ----D---- C:\AdwCleaner
2014-11-14 14:08:09 ----D---- C:\WINDOWS\system32\log
2014-11-14 14:08:09 ----A---- C:\WINDOWS\system32\drivers\iSafeNetFilter.sys
2014-11-14 14:07:58 ----D---- C:\Program Files (x86)\Elex-tech
2014-11-14 11:18:24 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2014-11-14 11:18:20 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-11-14 11:17:56 ----D---- C:\Users\Samsung\AppData\Roaming\Dropbox
2014-11-14 11:17:36 ----A---- C:\WINDOWS\system32\drivers\aswNdisFlt.sys
2014-11-14 11:13:23 ----D---- C:\Users\Samsung\AppData\Roaming\AVAST Software
2014-11-14 11:12:13 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-11-14 11:12:13 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2014-11-14 11:12:13 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2014-11-14 11:12:13 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-11-14 11:12:13 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2014-11-14 11:12:13 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-11-14 11:12:13 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2014-11-14 11:12:11 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2014-11-14 11:12:02 ----A---- C:\WINDOWS\avastSS.scr
2014-11-14 11:08:33 ----D---- C:\Program Files\AVAST Software
2014-11-14 11:07:03 ----D---- C:\ProgramData\AVAST Software
2014-11-13 18:14:14 ----D---- C:\Users\Samsung\AppData\Roaming\Media Freeware
2014-11-13 18:09:44 ----D---- C:\Program Files (x86)\63e4ae40-4d88-4b0e-af68-5d2104863f3d
2014-11-13 18:07:31 ----A---- C:\Users\Samsung\AppData\Roaming\IGLMGRH.exe
2014-11-13 18:06:59 ----D---- C:\Program Files (x86)\8222b8b9-401f-4e41-b68f-5b401090fb24
2014-11-13 18:06:50 ----A---- C:\Users\Samsung\AppData\Roaming\AAZQRF.exe
2014-11-13 16:29:43 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-11-13 09:55:50 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-11-13 09:55:50 ----A---- C:\WINDOWS\system32\msi.dll
2014-11-13 09:55:49 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-11-13 09:55:49 ----A---- C:\WINDOWS\system32\authui.dll
2014-11-13 09:55:48 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-11-13 09:55:48 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-11-13 09:55:48 ----A---- C:\WINDOWS\system32\consent.exe
2014-11-13 09:55:48 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-11-13 09:55:14 ----A---- C:\WINDOWS\system32\user32.dll
2014-11-13 09:55:13 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-11-13 09:55:13 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-11-13 09:55:13 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-11-13 09:55:12 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-11-13 09:55:11 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2014-11-13 09:55:11 ----A---- C:\WINDOWS\system32\winshfhc.dll
2014-11-13 09:54:39 ----A---- C:\WINDOWS\system32\devinv.dll
2014-11-13 09:54:39 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-11-13 09:54:39 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-11-13 09:54:38 ----A---- C:\WINDOWS\system32\generaltel.dll
2014-11-13 09:54:36 ----A---- C:\WINDOWS\system32\aepic.dll
2014-11-13 09:21:55 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-13 09:21:55 ----A---- C:\WINDOWS\system32\schannel.dll
2014-11-13 09:21:55 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-11-13 09:21:55 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-11-13 09:21:54 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-13 09:19:12 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-13 09:19:11 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-13 09:19:11 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-11-13 09:19:11 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-13 09:19:10 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-13 09:19:10 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-13 09:19:10 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-13 09:19:10 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-13 09:19:10 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-13 09:19:10 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-13 09:19:10 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-13 09:19:10 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-13 09:19:10 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-13 09:19:05 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-11-13 09:19:05 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-11-13 09:19:04 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-11-13 09:19:03 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-11-13 09:19:03 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-13 09:19:03 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-11-13 09:19:03 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-11-13 09:19:02 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\system32\wups2.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\system32\wups.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-11-13 09:19:02 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-11-13 09:19:02 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-11-13 09:19:02 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-11-13 09:18:55 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-13 09:18:54 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-13 09:18:10 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-13 09:18:03 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-13 09:17:58 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-13 09:17:55 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-13 09:17:54 ----A---- C:\WINDOWS\system32\wininet.dll
2014-11-13 09:17:53 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-11-13 09:17:52 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-13 09:17:52 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-11-13 09:17:52 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-11-13 09:17:51 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-13 09:17:51 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-11-13 09:17:51 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-13 09:17:51 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-11-13 09:17:50 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-13 09:17:50 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-13 09:17:50 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-13 09:17:50 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-13 09:17:49 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-13 09:17:49 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-13 09:17:49 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-13 09:17:49 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-13 09:17:49 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-13 09:17:49 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-13 09:17:48 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-13 09:17:48 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-13 09:17:48 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-13 09:17:48 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-13 09:17:48 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-13 09:17:47 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-13 09:17:46 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-13 09:17:45 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-13 09:17:45 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-13 09:17:44 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\url.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-13 09:17:43 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-13 09:16:01 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-13 09:16:01 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-13 09:15:33 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-13 09:15:33 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-13 09:14:36 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-13 09:14:04 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-13 09:14:04 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-13 09:14:04 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-13 09:14:04 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-13 09:14:04 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-13 09:14:04 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-13 09:14:03 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-13 09:14:03 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-13 09:14:03 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-13 09:14:03 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-13 09:13:30 ----A---- C:\WINDOWS\system32\shell32.dll
2014-11-13 09:13:29 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-11-13 09:13:28 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-11-13 09:13:27 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-13 09:13:26 ----A---- C:\WINDOWS\system32\twinui.dll
2014-11-13 09:13:25 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-13 09:13:25 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-13 09:13:25 ----A---- C:\WINDOWS\system32\localspl.dll
2014-11-13 09:13:25 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-11-13 09:13:24 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-11-13 09:13:23 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-11-13 09:13:23 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-11-13 09:13:23 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-11-13 09:13:23 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-11-13 09:13:22 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-11-13 09:13:22 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-11-13 09:13:22 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-11-13 09:13:21 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-11-13 09:13:21 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-11-13 09:13:19 ----A---- C:\WINDOWS\system32\untfs.dll
2014-11-13 09:13:19 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-11-13 09:13:18 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-11-13 09:13:18 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-13 09:13:17 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-11-13 09:13:17 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-11-10 20:55:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-11-07 08:59:24 ----D---- C:\Users\Samsung\AppData\Roaming\FastStone
2014-11-07 08:59:17 ----D---- C:\Program Files (x86)\FastStone Photo Resizer
2014-11-07 08:43:24 ----D---- C:\Users\Samsung\AppData\Roaming\XnView
2014-11-07 08:40:18 ----D---- C:\Program Files (x86)\XnView
2014-11-07 08:33:11 ----D---- C:\Users\Samsung\AppData\Roaming\IrfanView
2014-11-07 08:33:10 ----D---- C:\Program Files (x86)\IrfanView
2014-11-06 21:25:22 ----D---- C:\Program Files\KMSpico
2014-11-06 21:19:31 ----D---- C:\WINDOWS\AutoKMS
2014-11-06 21:11:27 ----D---- C:\WINDOWS\PCHEALTH
2014-11-06 21:11:27 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2014-11-06 21:09:58 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-11-06 21:09:43 ----D---- C:\ProgramData\Microsoft Help
2014-11-06 21:09:21 ----D---- C:\Program Files\Microsoft Office
2014-11-06 21:08:38 ----RHD---- C:\MSOCache
2014-11-05 18:01:15 ----D---- C:\Users\Samsung\AppData\Roaming\WinRAR
2014-11-05 17:59:58 ----D---- C:\Program Files\WinRAR
2014-11-03 17:48:17 ----D---- C:\Users\Samsung\AppData\Roaming\dvdcss
2014-10-28 20:48:42 ----D---- C:\Users\Samsung\AppData\Roaming\Litecoin
2014-10-28 20:48:26 ----D---- C:\Program Files (x86)\Litecoin
2014-10-23 20:31:12 ----D---- C:\Users\Samsung\AppData\Roaming\Bitcoin
2014-10-23 20:30:05 ----D---- C:\Program Files\Bitcoin
2014-10-17 09:07:39 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-10-17 09:07:38 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-10-17 09:07:29 ----A---- C:\WINDOWS\system32\winbici.dll
2014-10-17 07:22:53 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-10-17 07:22:53 ----A---- C:\WINDOWS\system32\rastls.dll
2014-10-17 07:21:31 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-17 07:21:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-10-17 07:21:29 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-10-17 07:21:29 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-10-17 07:21:28 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-10-17 07:21:26 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-10-17 07:21:26 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-10-17 07:21:25 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-10-17 07:21:25 ----A---- C:\WINDOWS\system32\propsys.dll
2014-10-17 07:21:25 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-17 07:21:24 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-10-17 07:21:23 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-17 07:21:23 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-10-17 07:21:23 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-10-17 07:21:23 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-10-17 07:21:23 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-10-17 07:21:22 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-17 07:21:22 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-10-17 07:21:22 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-17 07:21:22 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-17 07:21:22 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-10-17 07:21:22 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-10-15 08:48:47 ----D---- C:\Program Files (x86)\Mozilla Thunderbird

======List of files/folders modified in the last 1 month======

2014-11-14 15:40:15 ----RD---- C:\Program Files
2014-11-14 15:35:05 ----D---- C:\WINDOWS\Prefetch
2014-11-14 15:34:32 ----D---- C:\Windows
2014-11-14 15:30:30 ----D---- C:\WINDOWS\Temp
2014-11-14 15:28:59 ----D---- C:\Users\Samsung\AppData\Roaming\Skype
2014-11-14 15:06:33 ----D---- C:\WINDOWS\system32\drivers\etc
2014-11-14 15:04:58 ----D---- C:\WINDOWS\SysWOW64
2014-11-14 15:00:21 ----RD---- C:\WINDOWS\System32
2014-11-14 14:59:01 ----D---- C:\WINDOWS\Tasks
2014-11-14 14:59:01 ----D---- C:\WINDOWS\system32\Tasks
2014-11-14 14:58:52 ----D---- C:\WINDOWS\system32\drivers
2014-11-14 14:58:51 ----RD---- C:\Program Files (x86)
2014-11-14 14:49:01 ----D---- C:\Users\Samsung\AppData\Roaming\uTorrent
2014-11-14 14:48:44 ----D---- C:\WINDOWS\Inf
2014-11-14 14:48:42 ----D---- C:\WINDOWS\debug
2014-11-14 14:10:45 ----SHD---- C:\Config.Msi
2014-11-14 14:00:00 ----D---- C:\WINDOWS\system32\sru
2014-11-14 12:44:43 ----D---- C:\WINDOWS\system32\catroot2
2014-11-14 11:46:40 ----D---- C:\WINDOWS\apppatch
2014-11-14 11:28:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-14 11:18:46 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-14 11:12:11 ----D---- C:\WINDOWS\WinSxS
2014-11-14 11:08:24 ----SHD---- C:\System Volume Information
2014-11-14 11:07:03 ----HD---- C:\ProgramData
2014-11-14 10:00:56 ----D---- C:\WINDOWS\system32\config
2014-11-14 09:26:37 ----D---- C:\WINDOWS\CbsTemp
2014-11-14 08:49:52 ----SHD---- C:\WINDOWS\Installer
2014-11-14 08:20:58 ----D---- C:\WINDOWS\system32\catroot
2014-11-13 19:00:45 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-13 18:09:55 ----D---- C:\Program Files (x86)\Adobe
2014-11-13 18:07:11 ----D---- C:\Program Files (x86)\ATI Technologies
2014-11-13 16:25:51 ----D---- C:\Program Files\Windows Defender
2014-11-13 16:25:51 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-13 16:25:47 ----D---- C:\WINDOWS\system32\wbem
2014-11-13 16:25:44 ----D---- C:\WINDOWS\system32\cs-CZ
2014-11-13 16:25:43 ----SD---- C:\WINDOWS\system32\CompatTel
2014-11-13 16:25:42 ----RD---- C:\WINDOWS\ToastData
2014-11-13 16:25:38 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-11-13 16:25:32 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-11-13 16:25:27 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-13 16:25:26 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-13 16:25:20 ----D---- C:\WINDOWS\system32\migration
2014-11-13 16:25:16 ----D---- C:\Program Files\Internet Explorer
2014-11-13 13:42:56 ----D---- C:\WINDOWS\AppReadiness
2014-11-13 13:42:55 ----HD---- C:\Program Files\WindowsApps
2014-11-13 12:11:13 ----RD---- C:\WINDOWS\assembly
2014-11-13 12:04:18 ----D---- C:\WINDOWS\system32\MRT
2014-11-13 12:02:00 ----A---- C:\WINDOWS\system32\MRT.exe
2014-11-12 16:19:12 ----D---- C:\Users\Samsung\AppData\Roaming\vlc
2014-11-12 10:45:26 ----D---- C:\ProgramData\Skype
2014-11-12 07:51:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-06 21:27:57 ----SD---- C:\Users\Samsung\AppData\Roaming\Microsoft
2014-11-06 21:13:03 ----RSD---- C:\WINDOWS\Fonts
2014-11-06 21:12:45 ----D---- C:\Program Files (x86)\Common Files
2014-11-06 21:12:20 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-11-06 21:12:04 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-11-06 21:11:28 ----D---- C:\Program Files (x86)\Microsoft Office
2014-11-06 21:09:58 ----D---- C:\WINDOWS\ShellNew
2014-11-06 21:09:47 ----SD---- C:\ProgramData\Microsoft
2014-11-06 21:09:35 ----D---- C:\Program Files\Common Files\microsoft shared
2014-11-03 21:15:38 ----D---- C:\WINDOWS\SoftwareDistribution
2014-10-30 12:25:26 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2014-10-30 12:23:11 ----D---- C:\Hearthstone
2014-10-26 09:22:08 ----D---- C:\Program Files (x86)\Battle.net
2014-10-20 09:19:08 ----D---- C:\WINDOWS\rescache
2014-10-19 10:09:05 ----D---- C:\WINDOWS\MediaViewer
2014-10-19 10:09:05 ----D---- C:\WINDOWS\FileManager
2014-10-19 10:09:05 ----D---- C:\WINDOWS\Camera
2014-10-19 10:08:49 ----D---- C:\WINDOWS\WinStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem7.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys [2014-07-21 36096]
R0 aswNdisFlt;@oem22.inf,%AfwDescriptionFree%;Avast! Firewall Driver; C:\WINDOWS\system32\DRIVERS\aswNdisFlt.sys [2014-11-14 449936]
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-11-14 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-11-14 267632]
R0 BTATH_BUS;@oem9.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2014-06-17 35016]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2014-11-14 28184]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-11-14 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-11-14 1050432]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-11-14 436624]
R1 iSafeKrnlKit;YAC Kit Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [2014-11-13 99496]
R1 iSafeKrnlR3;YAC Ring3 Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [2014-11-13 65704]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-11-14 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-11-14 83280]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 AthBTPort;@oem12.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2014-06-17 89800]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 BTATH_A2DP;@oem11.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2014-06-17 338120]
R3 btath_avdt;@oem11.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2014-06-17 116424]
R3 BTATH_HCRP;@oem14.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2014-06-17 179432]
R3 BTATH_HID;@oem15.inf,%BTATH_HID%;Bluetooth HID Device; C:\WINDOWS\system32\DRIVERS\btath_hid.sys [2014-06-17 223432]
R3 BTATH_LWFLT;@oem16.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2014-06-17 77464]
R3 BTATH_RCP;@oem18.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2014-06-17 137928]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-06-17 599752]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-01-29 5363200]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2014-10-11 4015592]
R3 MEIx64;@oem3.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-17 62784]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-03-18 167424]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S1 iSafeKrnl;YAC Mini-Filter Driver; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [2014-11-13 248488]
S1 iSafeNetFilter;YAC NDIS Driver; C:\WINDOWS\system32\DRIVERS\iSafeNetFilter.sys [2014-11-03 49320]
S2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-11-14 116728]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2014-06-17 322176]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-14 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-11-14 104416]
R2 chromoting;@C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_core.dll,-101; C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe [2014-08-21 51016]
R2 iSafeService;YAC Service; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [2014-11-13 118048]
R2 SWUpdateService;SW Update Service; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [2014-08-28 3000664]
S2 Service KMSELDI;Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [2013-08-21 516608]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-01-29 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-03 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-03 116648]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-09-03 194032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-11-10 114288]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 150600]

-----------------EOF-----------------

#4 Příspěvek od **vyosek** » 14 Lis 2014 16:48

Zdravim

Dejte FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100 a docistime

pnk911 · #5 Příspěvek od **pnk911** » 14 Lis 2014 17:24

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2014 02
Ran by Samsung (administrator) on NOTEBOOK on 14-11-2014 17:22:43
Running from C:\Users\Samsung\Desktop
Loaded Profile: Samsung (Available profiles: Samsung)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12459112 2014-10-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-11-14] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-06-17] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-241242482-2981187293-2557107031-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-241242482-2981187293-2557107031-1001\...\MountPoints2: {8f907407-62bd-11e4-be8a-50b7c32b5f7a} - "E:\iStudio.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {4B2BAC2D-C9AF-4751-951B-3E02A9AF3D54} URL = http://www.bing.com/search?q={searchTer ... &pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {4B2BAC2D-C9AF-4751-951B-3E02A9AF3D54} URL = http://www.bing.com/search?q={searchTer ... &pc=MASMJS
SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {24099603-8349-404F-8F10-0168E562CAED} URL = http://search.seznam.cz/?q={searchTerms ... chmodule_1
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Samsung\AppData\Roaming\Mozilla\Firefox\Profiles\jbnpj2yi.default
FF Homepage: hxxp://www.google.com
FF NewTab: hxxp://www.google.com
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-14]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSuggestURL: Default ->
CHR Profile: C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-03]
CHR Extension: (Dokumenty Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-03]
CHR Extension: (Disk Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-03]
CHR Extension: (YouTube) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-03]
CHR Extension: (Vyhledávání Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-03]
CHR Extension: (Tabulky Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-03]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-10-09]
CHR Extension: (AdBlock) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-13]
CHR Extension: (Avast Online Security) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-14]
CHR Extension: (Peněženka Google) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-03]
CHR Extension: (Gmail) - C:\Users\Samsung\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-03]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-06-17] (Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-14] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-11-14] (AVAST Software)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\38.0.2125.9\remoting_host.exe [51016 2014-08-21] (Google Inc.)
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2014-11-13] (Elex do Brasil Participações Ltda)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-09-02] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-09-02] (Microsoft Corporation)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [516608 2013-08-21] () [File not signed]
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3000664 2014-08-28] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2014-07-21] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-14] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-11-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-14] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-11-14] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-14] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-14] ()
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [223432 2014-06-17] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-06-17] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [248488 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [65704 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [49320 2014-11-03] (Elex do Brasil Participações Ltda)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-14 17:12 - 2014-11-14 17:12 - 00000000 ___RD () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-11-14 15:40 - 2014-11-14 15:40 - 01222144 _____ () C:\Users\Samsung\Downloads\RSITx64.exe
2014-11-14 15:40 - 2014-11-14 15:40 - 00000000 ____D () C:\rsit
2014-11-14 15:40 - 2014-11-14 15:40 - 00000000 ____D () C:\Program Files\trend micro
2014-11-14 15:34 - 2014-11-14 15:34 - 00024167 _____ () C:\Users\Samsung\Desktop\Addition.txt
2014-11-14 15:33 - 2014-11-14 17:22 - 00014571 _____ () C:\Users\Samsung\Desktop\FRST.txt
2014-11-14 15:32 - 2014-11-14 17:22 - 00000000 ____D () C:\FRST
2014-11-14 15:32 - 2014-11-14 15:32 - 02116608 _____ (Farbar) C:\Users\Samsung\Desktop\FRST64.exe
2014-11-14 15:25 - 2014-11-14 15:25 - 00000021 _____ () C:\folders.log
2014-11-14 15:25 - 2014-11-14 15:25 - 00000000 ____D () C:\zoek
2014-11-14 15:06 - 2014-11-14 15:26 - 00002723 _____ () C:\zoek-results.log
2014-11-14 15:05 - 2014-11-14 15:26 - 00002968 _____ () C:\runcheck.txt
2014-11-14 15:04 - 2014-11-14 15:04 - 01294848 _____ () C:\Users\Samsung\Downloads\zoek.exe
2014-11-14 15:04 - 2014-11-14 15:04 - 00000000 ____D () C:\zoek_backup
2014-11-14 15:00 - 2014-11-14 15:00 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Elex-tech
2014-11-14 14:59 - 2014-11-14 17:10 - 00323338 _____ () C:\WINDOWS\PFRO.log
2014-11-14 14:56 - 2014-11-14 14:59 - 00000000 ____D () C:\AdwCleaner
2014-11-14 14:56 - 2014-11-14 14:56 - 02140160 _____ () C:\Users\Samsung\Downloads\adwcleaner_4.101.exe
2014-11-14 14:08 - 2014-11-14 14:58 - 00000000 ____D () C:\WINDOWS\system32\log
2014-11-14 14:08 - 2014-11-14 14:08 - 00001924 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk
2014-11-14 14:08 - 2014-11-03 10:04 - 00049320 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
2014-11-14 14:07 - 2014-11-14 14:07 - 00000000 ____D () C:\Program Files (x86)\Elex-tech
2014-11-14 14:06 - 2014-11-14 14:07 - 15250560 _____ (Elex do Brasil Participações Ltda) C:\Users\Samsung\Downloads\yet_another_cleaner_sk_150823.exe
2014-11-14 12:54 - 2014-11-14 12:54 - 00065024 _____ () C:\Users\Samsung\Downloads\_NABÍDKA_a_CENÍK_2014_10(1).xls
2014-11-14 12:38 - 2014-11-14 12:38 - 00065024 _____ () C:\Users\Samsung\Downloads\_NABÍDKA_a_CENÍK_2014_10.xls
2014-11-14 11:18 - 2014-11-14 11:18 - 00001986 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-11-14 11:18 - 2014-11-14 11:17 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-11-14 11:18 - 2014-11-14 11:12 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-11-14 11:17 - 2014-11-14 11:18 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Dropbox
2014-11-14 11:17 - 2014-11-14 11:17 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2014-11-14 11:13 - 2014-11-14 11:13 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\AVAST Software
2014-11-14 11:12 - 2014-11-14 11:18 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-11-14 11:12 - 2014-11-14 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-11-14 11:12 - 2014-11-14 11:12 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-11-14 11:12 - 2014-11-14 11:12 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-11-14 11:12 - 2014-11-14 11:12 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-11-14 11:12 - 2014-11-14 11:11 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-11-14 11:08 - 2014-11-14 11:08 - 00000000 ____D () C:\Program Files\AVAST Software
2014-11-14 11:07 - 2014-11-14 11:08 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-11-13 18:14 - 2014-11-13 18:14 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Media Freeware
2014-11-13 18:09 - 2014-11-13 18:09 - 00000000 ____D () C:\Program Files (x86)\63e4ae40-4d88-4b0e-af68-5d2104863f3d
2014-11-13 18:07 - 2014-11-14 17:11 - 00001366 _____ () C:\WINDOWS\Tasks\IGLMGRH.job
2014-11-13 18:07 - 2014-11-13 18:07 - 01515440 _____ (HQ-VideoV13.11) C:\Users\Samsung\AppData\Roaming\IGLMGRH.exe
2014-11-13 18:07 - 2014-11-13 18:07 - 00004376 _____ () C:\WINDOWS\System32\Tasks\IGLMGRH
2014-11-13 18:06 - 2014-11-14 17:11 - 00001364 _____ () C:\WINDOWS\Tasks\AAZQRF.job
2014-11-13 18:06 - 2014-11-13 18:07 - 00000000 ____D () C:\Program Files (x86)\8222b8b9-401f-4e41-b68f-5b401090fb24
2014-11-13 18:06 - 2014-11-13 18:06 - 02003888 _____ (HQ-VideoV13.11) C:\Users\Samsung\AppData\Roaming\AAZQRF.exe
2014-11-13 18:06 - 2014-11-13 18:06 - 00004372 _____ () C:\WINDOWS\System32\Tasks\AAZQRF
2014-11-13 18:02 - 2014-11-13 18:02 - 00000000 __SHD () C:\Users\Samsung\AppData\Local\EmieBrowserModeList
2014-11-13 17:09 - 2014-11-13 17:09 - 00126633 _____ () C:\Users\Samsung\AppData\Local\recently-used.xbel
2014-11-13 16:29 - 2014-10-30 01:55 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-13 16:29 - 2014-10-30 01:55 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-13 11:34 - 2014-11-13 16:57 - 00018432 ___SH () C:\Users\Samsung\Documents\Thumbs.db
2014-11-13 09:55 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-13 09:55 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-13 09:55 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-13 09:55 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-13 09:55 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-13 09:55 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-13 09:55 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-13 09:55 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-13 09:55 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-13 09:55 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-13 09:55 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-13 09:55 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-13 09:55 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-13 09:55 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-13 09:55 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-13 09:54 - 2014-11-05 00:38 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-11-13 09:54 - 2014-11-04 01:10 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-11-13 09:54 - 2014-10-31 05:53 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-11-13 09:54 - 2014-10-31 05:49 - 00537088 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-11-13 09:54 - 2014-10-31 05:24 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-11-13 09:21 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-13 09:21 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-13 09:21 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-13 09:21 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-13 09:21 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-13 09:19 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-13 09:19 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-13 09:19 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-13 09:19 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-13 09:19 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-13 09:19 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-13 09:19 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-13 09:19 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-13 09:19 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-13 09:19 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-13 09:19 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-13 09:19 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-13 09:19 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-13 09:19 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-13 09:19 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-13 09:19 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-13 09:19 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-13 09:19 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-13 09:19 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-13 09:19 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-13 09:19 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-13 09:19 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-13 09:19 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-13 09:19 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-13 09:19 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-13 09:19 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-13 09:19 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-13 09:19 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-13 09:19 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-13 09:19 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-13 09:19 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-13 09:18 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-13 09:18 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-13 09:18 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-13 09:18 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-13 09:17 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-13 09:17 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-13 09:17 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-13 09:17 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-13 09:17 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-13 09:17 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-13 09:17 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-13 09:17 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-13 09:17 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-13 09:17 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-13 09:17 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-13 09:17 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-13 09:17 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-13 09:17 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-13 09:17 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-13 09:17 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-13 09:17 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-13 09:17 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-13 09:17 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-13 09:17 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-13 09:17 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-13 09:17 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-13 09:17 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-13 09:17 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-13 09:17 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-13 09:17 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-13 09:17 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-13 09:17 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-13 09:17 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-13 09:17 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-13 09:17 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-13 09:17 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-13 09:17 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-13 09:17 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-13 09:17 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-13 09:17 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-13 09:17 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-13 09:17 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-13 09:17 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-13 09:17 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-13 09:17 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-13 09:17 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-13 09:17 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-13 09:17 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-13 09:17 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-13 09:17 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-13 09:17 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-13 09:17 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-13 09:17 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-13 09:17 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-13 09:17 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-13 09:17 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-13 09:17 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-13 09:17 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-13 09:17 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-13 09:17 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-13 09:17 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-13 09:17 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-13 09:17 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-13 09:17 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-13 09:17 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-13 09:17 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-13 09:17 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-13 09:17 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-13 09:17 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-13 09:17 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-13 09:17 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-13 09:17 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-13 09:17 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-13 09:17 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-13 09:17 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-13 09:17 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-13 09:17 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-13 09:17 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-13 09:17 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-13 09:17 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-13 09:17 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-13 09:17 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-13 09:17 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-13 09:17 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-13 09:17 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-13 09:17 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-13 09:17 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-13 09:17 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-13 09:17 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-13 09:17 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-13 09:17 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-13 09:17 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-13 09:16 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-13 09:16 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-13 09:15 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-13 09:15 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-13 09:14 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-13 09:14 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-13 09:14 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-13 09:14 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-13 09:14 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-13 09:14 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-13 09:14 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-13 09:14 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-13 09:14 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-13 09:14 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-13 09:14 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-13 09:13 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-13 09:13 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-13 09:13 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-13 09:13 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-13 09:13 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-13 09:13 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-13 09:13 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-13 09:13 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-13 09:13 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-13 09:13 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-13 09:13 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-13 09:13 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-13 09:13 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-13 09:13 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-13 09:13 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-13 09:13 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-13 09:13 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-13 09:13 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-13 09:13 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-13 09:13 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-13 09:13 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-13 09:13 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-13 09:13 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-13 09:13 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-13 09:13 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-13 09:13 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-12 09:52 - 2014-11-12 09:52 - 00005367 _____ () C:\Users\Samsung\Downloads\Hotovo - provize - domluva - evinice.cz.xlsx
2014-11-11 17:32 - 2014-11-11 19:13 - 1348129763 _____ () C:\Users\Samsung\Downloads\CloudyG3_2.1.zip
2014-11-10 20:55 - 2014-11-10 20:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-08 09:51 - 2014-11-14 17:11 - 00000800 _____ () C:\WINDOWS\system32\Service_KMS.log
2014-11-07 11:59 - 2014-11-14 11:59 - 00000753 _____ () C:\WINDOWS\system32\AutoPico.log
2014-11-07 08:59 - 2014-11-07 08:59 - 00001129 _____ () C:\Users\Public\Desktop\FastStone Photo Resizer.lnk
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\FastStone
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\Users\Samsung\AppData\Local\FastStone
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Photo Resizer
2014-11-07 08:59 - 2014-11-07 08:59 - 00000000 ____D () C:\Program Files (x86)\FastStone Photo Resizer
2014-11-07 08:43 - 2014-11-07 08:57 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\XnView
2014-11-07 08:40 - 2014-11-07 08:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
2014-11-07 08:40 - 2014-11-07 08:40 - 00000000 ____D () C:\Program Files (x86)\XnView
2014-11-07 08:34 - 2014-11-07 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-11-07 08:33 - 2014-11-07 08:33 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\IrfanView
2014-11-07 08:33 - 2014-11-07 08:33 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-11-07 08:32 - 2014-11-07 08:32 - 01898640 _____ (Irfan Skiljan) C:\Users\Samsung\Downloads\iview438_setup.exe
2014-11-06 21:25 - 2014-11-06 21:25 - 00003364 _____ () C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
2014-11-06 21:25 - 2014-11-06 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2014-11-06 21:25 - 2014-11-06 21:25 - 00000000 ____D () C:\Program Files\KMSpico
2014-11-06 21:19 - 2014-11-14 11:02 - 00000000 ____D () C:\WINDOWS\AutoKMS
2014-11-06 21:17 - 2014-11-06 21:17 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Microsoft Toolkit
2014-11-06 21:13 - 2014-11-06 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-06 21:11 - 2014-11-06 21:11 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-11-06 21:11 - 2014-11-06 21:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-11-06 21:09 - 2014-11-06 21:13 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-06 21:09 - 2014-11-06 21:09 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Microsoft Help
2014-11-06 21:09 - 2014-11-06 21:09 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-11-06 21:09 - 2014-11-06 21:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-11-06 21:08 - 2014-11-06 21:08 - 00000000 __RHD () C:\MSOCache
2014-11-05 18:01 - 2014-11-05 18:01 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\WinRAR
2014-11-05 18:01 - 2014-11-05 13:27 - 00000000 ____D () C:\Users\Samsung\Desktop\bulharska vina fotky
2014-11-05 18:00 - 2014-11-05 18:00 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-05 18:00 - 2014-11-05 18:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-05 17:59 - 2014-11-05 18:00 - 00000000 ____D () C:\Program Files\WinRAR
2014-11-05 17:59 - 2014-11-05 17:59 - 00000000 ____D () C:\Users\Samsung\Desktop\winrar 4.20 32 - 64 bit cz sk
2014-11-05 17:55 - 2014-11-06 20:58 - 00000000 ____D () C:\Users\Samsung\Desktop\microsoft office 2013
2014-11-05 17:49 - 2014-11-05 21:25 - 00000000 ____D () C:\Users\Samsung\Desktop\FILMY
2014-11-04 17:30 - 2014-11-04 17:30 - 00250664 _____ () C:\Users\Samsung\Documents\Formulář-nový dodavatel.docm
2014-11-04 08:43 - 2014-11-05 17:49 - 00000000 ____D () C:\Users\Samsung\Desktop\Nellynka
2014-11-03 21:15 - 2014-11-14 17:09 - 01634743 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-03 17:48 - 2014-11-03 17:48 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\dvdcss
2014-10-28 20:48 - 2014-10-31 15:55 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Litecoin
2014-10-28 20:48 - 2014-10-28 20:48 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Litecoin
2014-10-28 20:48 - 2014-10-28 20:48 - 00000000 ____D () C:\Program Files (x86)\Litecoin
2014-10-23 20:31 - 2014-10-31 13:59 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Bitcoin
2014-10-23 20:30 - 2014-10-23 20:30 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitcoin Core
2014-10-23 20:30 - 2014-10-23 20:30 - 00000000 ____D () C:\Program Files\Bitcoin
2014-10-17 11:58 - 2014-10-17 11:58 - 00000000 ____D () C:\Users\Samsung\Desktop\Tor Browser
2014-10-17 09:07 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-10-17 09:07 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-10-17 09:07 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-10-17 07:22 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-10-17 07:22 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-10-17 07:21 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-10-17 07:21 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-10-17 07:21 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-10-17 07:21 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-10-17 07:21 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-10-17 07:21 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-10-17 07:21 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-10-17 07:21 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-17 07:21 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-10-17 07:21 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-10-17 07:21 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-10-17 07:21 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-10-17 07:21 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-10-17 07:21 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-10-17 07:21 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-10-17 07:21 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-17 07:21 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-10-17 07:21 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-17 07:21 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-17 07:21 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-17 07:21 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-10-17 07:21 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-17 07:21 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-10-17 07:21 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-10-17 07:21 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-10-17 07:21 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-10-17 07:21 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-10-17 07:21 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-10-17 07:21 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-10-17 07:21 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-10-15 08:48 - 2014-10-16 07:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-14 17:16 - 2014-09-01 10:24 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-241242482-2981187293-2557107031-1001
2014-11-14 17:12 - 2014-09-03 10:49 - 00000974 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-14 17:12 - 2014-09-02 16:01 - 00000000 __RDO () C:\Users\Samsung\OneDrive
2014-11-14 17:10 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-14 17:10 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-14 17:08 - 2014-09-03 10:49 - 00000978 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-14 17:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-14 16:13 - 2014-09-02 20:43 - 00003978 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DA0BC837-ECB6-4D58-8008-A122E785BE3E}
2014-11-14 15:28 - 2014-09-05 08:40 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Skype
2014-11-14 14:49 - 2014-09-10 18:07 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\uTorrent
2014-11-14 14:48 - 2014-09-04 10:40 - 00000000 ____D () C:\Users\Samsung\AppData\Local\CrashDumps
2014-11-14 14:47 - 2014-09-02 15:45 - 00000000 ___RD () C:\Users\Samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-14 14:47 - 2013-08-22 16:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-14 14:44 - 2014-09-03 10:51 - 00002261 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-14 14:31 - 2014-09-04 07:06 - 02868224 ___SH () C:\Users\Samsung\Desktop\Thumbs.db
2014-11-14 13:54 - 2014-09-01 10:17 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Packages
2014-11-14 11:28 - 2014-03-18 16:33 - 00005430 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-14 11:28 - 2014-03-18 15:54 - 00901830 _____ () C:\WINDOWS\system32\perfh005.dat
2014-11-14 11:28 - 2014-03-18 15:54 - 00202492 _____ () C:\WINDOWS\system32\perfc005.dat
2014-11-14 09:26 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-14 08:35 - 2014-09-02 15:45 - 00000000 ____D () C:\Users\Samsung
2014-11-13 18:09 - 2014-09-02 00:42 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-11-13 18:07 - 2014-09-02 15:37 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-11-13 17:10 - 2014-09-16 16:09 - 00000000 ____D () C:\Users\Samsung\.gimp-2.8
2014-11-13 17:08 - 2014-09-22 14:50 - 00000000 ____D () C:\Users\Samsung\AppData\Local\gtk-2.0
2014-11-13 16:34 - 2013-08-22 15:44 - 00411792 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-13 16:25 - 2014-09-02 00:15 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 16:25 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 14:03 - 2014-09-03 10:49 - 00003950 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-13 14:03 - 2014-09-03 10:49 - 00003714 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-13 13:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-11-13 12:04 - 2014-09-01 11:29 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-13 12:02 - 2014-09-01 11:29 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-12 16:19 - 2014-09-01 10:46 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\vlc
2014-11-12 12:55 - 2014-09-03 07:19 - 00000000 ____D () C:\Users\Samsung\AppData\Local\Battle.net
2014-11-12 10:45 - 2014-09-05 08:39 - 00000000 ____D () C:\ProgramData\Skype
2014-11-12 07:51 - 2014-09-02 09:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-06 21:11 - 2014-09-22 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-11-06 21:09 - 2014-03-18 16:10 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-11-06 21:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-05 18:36 - 2014-09-04 13:37 - 00294912 ___SH () C:\Users\Samsung\Downloads\Thumbs.db
2014-10-30 12:25 - 2014-09-01 11:31 - 00275080 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-10-30 12:23 - 2014-09-03 07:26 - 00000000 ____D () C:\Hearthstone
2014-10-26 09:22 - 2014-09-03 07:18 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-10-20 09:19 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-10-19 10:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-10-19 10:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-10-19 10:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-10-19 10:08 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore

Some content of TEMP:
====================
C:\Users\Samsung\AppData\Local\Temp\7za.exe
C:\Users\Samsung\AppData\Local\Temp\hijackthis.exe
C:\Users\Samsung\AppData\Local\Temp\NirCmd.exe
C:\Users\Samsung\AppData\Local\Temp\PEVZ.EXE
C:\Users\Samsung\AppData\Local\Temp\Quarantine.exe
C:\Users\Samsung\AppData\Local\Temp\remove.exe
C:\Users\Samsung\AppData\Local\Temp\sed.exe
C:\Users\Samsung\AppData\Local\Temp\shortcut.exe
C:\Users\Samsung\AppData\Local\Temp\sqlite3.dll
C:\Users\Samsung\AppData\Local\Temp\swreg.exe
C:\Users\Samsung\AppData\Local\Temp\swxcacls.exe
C:\Users\Samsung\AppData\Local\Temp\wget.exe
C:\Users\Samsung\AppData\Local\Temp\zoek-delete.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-08 13:33

==================== End Of Log ============================

#6 Příspěvek od **vyosek** » 14 Lis 2014 22:10

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-241242482-2981187293-2557107031-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-241242482-2981187293-2557107031-1001\...\MountPoints2: {8f907407-62bd-11e4-be8a-50b7c32b5f7a} - "E:\iStudio.exe" 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\ddg.xml

R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2014-11-13] (Elex do Brasil Participações Ltda)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [516608 2013-08-21] () [File not signed]
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [248488 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [65704 2014-11-13] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [49320 2014-11-03] (Elex do Brasil Participações Ltda)

C:\Program Files\KMSpico
C:\Program Files (x86)\Elex-tech
C:\Users\Samsung\AppData\Roaming\AAZQRF.exe 
C:\Users\Samsung\AppData\Roaming\IGLMGRH.exe
C:\Program Files (x86)\63e4ae40-4d88-4b0e-af68-5d2104863f3d
C:\Program Files (x86)\8222b8b9-401f-4e41-b68f-5b401090fb24
2014-11-14 15:40 - 2014-11-14 15:40 - 01222144 _____ () C:\Users\Samsung\Downloads\RSITx64.exe
2014-11-14 15:40 - 2014-11-14 15:40 - 00000000 ____D () C:\rsit
2014-11-14 15:40 - 2014-11-14 15:40 - 00000000 ____D () C:\Program Files\trend micro
2014-11-14 15:34 - 2014-11-14 15:34 - 00024167 _____ () C:\Users\Samsung\Desktop\Addition.txt
2014-11-14 15:33 - 2014-11-14 17:22 - 00014571 _____ () C:\Users\Samsung\Desktop\FRST.txt
2014-11-14 15:25 - 2014-11-14 15:25 - 00000021 _____ () C:\folders.log
2014-11-14 15:25 - 2014-11-14 15:25 - 00000000 ____D () C:\zoek
2014-11-14 15:06 - 2014-11-14 15:26 - 00002723 _____ () C:\zoek-results.log
2014-11-14 15:05 - 2014-11-14 15:26 - 00002968 _____ () C:\runcheck.txt
2014-11-14 15:04 - 2014-11-14 15:04 - 01294848 _____ () C:\Users\Samsung\Downloads\zoek.exe
2014-11-14 15:04 - 2014-11-14 15:04 - 00000000 ____D () C:\zoek_backup
2014-11-14 15:00 - 2014-11-14 15:00 - 00000000 ____D () C:\Users\Samsung\AppData\Roaming\Elex-tech
2014-11-14 14:59 - 2014-11-14 17:10 - 00323338 _____ () C:\WINDOWS\PFRO.log
2014-11-14 14:56 - 2014-11-14 14:59 - 00000000 ____D () C:\AdwCleaner
2014-11-14 14:56 - 2014-11-14 14:56 - 02140160 _____ () C:\Users\Samsung\Downloads\adwcleaner_4.101.exe
2014-11-14 14:08 - 2014-11-14 14:58 - 00000000 ____D () C:\WINDOWS\system32\log
2014-11-14 14:08 - 2014-11-14 14:08 - 00001924 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk
2014-11-14 14:08 - 2014-11-03 10:04 - 00049320 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
2014-11-14 14:07 - 2014-11-14 14:07 - 00000000 ____D () C:\Program Files (x86)\Elex-tech
2014-11-14 14:06 - 2014-11-14 14:07 - 15250560 _____ (Elex do Brasil Participações Ltda) C:\Users\Samsung\Downloads\yet_another_cleaner_sk_150823.exe

C:\WINDOWS\tasks\AAZQRF.job
C:\WINDOWS\tasks\IGLMGRH.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

pnk911 · #7 Příspěvek od **pnk911** » 14 Lis 2014 23:19

Bohužel mi to sem nejde vlozit, pise mi to ze je zprava moc dlouha.

Zasilam log v příloze

#8 Příspěvek od **vyosek** » 15 Lis 2014 00:41

Supr, jak se chova PC nyni

pnk911 · #9 Příspěvek od **pnk911** » 15 Lis 2014 09:19

Po reklamách už ani stopy, je vše nyní ok ? je případně v PC ještě něco spatne ?

Dekuji

#10 Příspěvek od **vyosek** » 15 Lis 2014 09:36

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

Stahnete a spustte
Ponechte zatrzitkou pouze u volby Remote disinfection tools
Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

pnk911 · #11 Příspěvek od **pnk911** » 15 Lis 2014 09:39

ok, díky moc za rychlost a a skvělý přístup

#12 Příspěvek od **vyosek** » 15 Lis 2014 09:55

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Pomalý PC - nejspise savepass - nadmerne zobrazovani reklam

Pomalý PC - nejspise savepass - nadmerne zobrazovani reklam

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek

Re: Pomalý PC - nejspise savepass - nadmerne zobrazovani rek