Dobrý den, kamrád klikl na odkaz s profilovým obrázkem a ted se vše posílá od něj. provedl scan v FRST ale já to jaksi nedokážu v tom najít tak prosím o radu.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-12-2014 02
Ran by Orsag (administrator) on DOMINIK on 06-12-2014 18:17:28
Running from C:\Users\Orsag\Downloads
Loaded Profile: Orsag (Available profiles: Orsag)
Platform: Windows 8.1 (X64) OS Language: Angličtina (Spojené státy)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
(Superfish, Inc.) C:\Program Files (x86)\Lenovo\VisualDiscovery\VisualDiscovery.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Pokki) C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Lenovo PhoneCompanion\adb.exe
(Pokki) C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe
(Pokki) C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe
(Pokki) C:\Users\Orsag\AppData\Local\Pokki\Engine\StartMenuIndexer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2808560 2014-06-24] (Synaptics Incorporated)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [216064 2014-01-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2014-01-21] (Realtek semiconductor)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2014-08-14] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2014-08-14] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10842096 2014-08-14] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30520936 2014-11-18] (Skype Technologies S.A.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\RunOnce: [Application Restart #3] => C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe [7794504 2014-11-14] (Pokki)
ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2531041996-1163777749-3044732384-1002 -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKU\S-1-5-21-2531041996-1163777749-3044732384-1002 -> {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-08-14]
Chrome:
=======
CHR Profile: C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-08]
CHR Extension: (Africa) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\afoojfkkgppaceckklbflieagpfijcoi [2014-11-12]
CHR Extension: (Dokumenty Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-08]
CHR Extension: (Disk Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-08]
CHR Extension: (YouTube) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-08]
CHR Extension: (Tabulky Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-08]
CHR Extension: (Stopify) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfnbpnclgofipdlfpihgfceggbcabjeo [2014-12-06]
CHR Extension: (Skype Click to Call) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-11-27]
CHR Extension: (Color For Facebook™) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmnfmgelbcgoildddbgofpeofhjgipoi [2014-11-11]
CHR Extension: (Peněženka Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-08]
CHR Extension: (Gmail) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-08]
CHR HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-06-25] (Advanced Micro Devices, Inc.) [File not signed]
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [84992 2014-01-22] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-11-21] (LENOVO INCORPORATED.)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-08-14] (Lenovo(beijing) Limited)
R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-18] (Lenovo(beijing) Limited)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2014-08-14] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [308720 2014-08-14] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-25] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [190704 2014-06-24] (Synaptics Incorporated)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [68880 2014-08-14] ()
R2 VisualDiscovery; C:\Program Files (x86)\Lenovo\VisualDiscovery\VisualDiscovery.exe [1354296 2014-06-21] (Superfish, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-14] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-12] (Advanced Micro Devices)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [225504 2014-03-28] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-12] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [558296 2014-04-12] (Realtek Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9105624 2014-01-21] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
R2 VDWFP; C:\windows\system32\Drivers\VDWFP64.sys [39800 2014-05-12] (Superfish, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 18:17 - 2014-12-06 18:18 - 00021143 _____ () C:\Users\Orsag\Downloads\FRST.txt
2014-12-06 18:17 - 2014-12-06 18:17 - 00000000 ____D () C:\FRST
2014-12-06 18:12 - 2014-12-06 18:12 - 02119168 _____ (Farbar) C:\Users\Orsag\Downloads\FRST64.exe
2014-12-06 10:12 - 2014-12-06 10:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-11-30 22:23 - 2014-11-30 22:26 - 367385066 _____ () C:\Users\Orsag\Downloads\Ulice 2710 dil (21-11- 2014).avi
2014-11-28 10:47 - 2014-11-28 10:54 - 417103628 _____ () C:\Users\Orsag\Downloads\Ulice 2709.dil 20.11.2014.avi
2014-11-28 10:39 - 2014-11-28 10:43 - 414198802 _____ () C:\Users\Orsag\Downloads\Ulice 2708.dil 19.11.2014.avi
2014-11-28 09:58 - 2014-11-28 10:05 - 420088314 _____ () C:\Users\Orsag\Downloads\Ulice 2707.dil 18.11.2014.avi
2014-11-28 09:54 - 2014-11-28 09:58 - 374987600 _____ () C:\Users\Orsag\Downloads\Ulice 2706.dil 17.11.2014.avi
2014-11-28 07:27 - 2014-11-28 07:31 - 417827518 _____ () C:\Users\Orsag\Downloads\Ulice 2705.dil 14.11.2014.avi
2014-11-27 19:20 - 2014-11-27 19:24 - 417224138 _____ () C:\Users\Orsag\Downloads\Ulice 2704.dil 13.11.2014.avi
2014-11-27 18:13 - 2014-11-27 18:19 - 410513120 _____ () C:\Users\Orsag\Downloads\Ulice 2703.dil 12.11.2014.avi
2014-11-27 09:49 - 2014-12-06 18:01 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00002549 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\ProgramData\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-27 09:46 - 2014-11-27 09:47 - 50726291 _____ () C:\Users\Orsag\Downloads\skype-setup.exe
2014-11-25 19:38 - 2014-11-25 19:51 - 1238040508 _____ () C:\Users\Orsag\Downloads\Pod-zemi----As-Above,-So-Below-2014-titulky-CZ-v-obraze.avi
2014-11-23 18:30 - 2014-11-23 18:31 - 00281376 _____ () C:\windows\Minidump\112314-35453-01.dmp
2014-11-23 18:30 - 2014-11-23 18:30 - 866847321 _____ () C:\windows\MEMORY.DMP
2014-11-23 18:30 - 2014-11-23 18:30 - 00000000 ____D () C:\windows\Minidump
2014-11-21 18:35 - 2014-11-21 18:39 - 00000000 ____D () C:\Users\Orsag\Desktop\Písničky
2014-11-21 18:35 - 2014-11-21 18:35 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-11-20 22:22 - 2014-11-30 22:29 - 00000000 ____D () C:\KMPlayer
2014-11-20 22:22 - 2014-11-20 22:22 - 00000625 _____ () C:\Users\Orsag\Desktop\KMPlayer.lnk
2014-11-20 22:22 - 2014-11-20 22:22 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-11-20 08:52 - 2014-11-20 08:53 - 00000000 ____D () C:\Users\Orsag\Documents\RCT3Demo 1.1
2014-11-20 08:52 - 2014-11-20 08:52 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Atari
2014-11-19 12:21 - 2014-11-19 12:21 - 00000000 ____D () C:\Users\Public\Documents\EA Games
2014-11-19 12:21 - 2014-11-19 12:21 - 00000000 ____D () C:\Users\Orsag\Documents\EA Games
2014-11-19 09:36 - 2014-11-19 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2014-11-19 09:24 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-11-19 09:24 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-11-19 09:24 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2014-11-19 09:24 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2014-11-17 16:34 - 2014-11-17 16:34 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieBrowserModeList
2014-11-16 10:22 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2014-11-16 10:22 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2014-11-16 10:21 - 2014-07-24 16:28 - 00419648 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00412992 ____C (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00280384 ____C (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00143680 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2014-11-16 10:21 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2014-11-16 10:21 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-11-16 10:21 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
2014-11-16 10:21 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2014-11-16 10:21 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
2014-11-16 10:21 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2014-11-16 10:21 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2014-11-16 10:21 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2014-11-16 10:21 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2014-11-16 10:21 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2014-11-16 10:21 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
2014-11-16 10:21 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2014-11-16 10:21 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2014-11-16 10:21 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
2014-11-16 10:21 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
2014-11-16 10:21 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2014-11-16 10:21 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-11-16 10:21 - 2014-07-24 12:45 - 00076800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2014-11-16 10:21 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-11-16 10:21 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2014-11-16 10:21 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
2014-11-16 10:21 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
2014-11-16 10:21 - 2014-07-24 12:41 - 00118272 ____C (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys
2014-11-16 10:21 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
2014-11-16 10:21 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
2014-11-16 10:21 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2014-11-16 10:21 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2014-11-16 10:21 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2014-11-16 10:21 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
2014-11-16 10:21 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
2014-11-16 10:21 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
2014-11-16 10:21 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-11-16 10:21 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-11-16 10:21 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
2014-11-16 10:21 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
2014-11-16 10:21 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
2014-11-16 10:21 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
2014-11-16 10:21 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
2014-11-16 10:21 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
2014-11-16 10:21 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
2014-11-16 10:21 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-11-16 10:21 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-11-16 10:21 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
2014-11-16 10:21 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
2014-11-16 10:21 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
2014-11-16 10:21 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
2014-11-16 10:21 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
2014-11-16 10:21 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2014-11-16 10:21 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
2014-11-16 10:21 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
2014-11-16 10:21 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
2014-11-16 10:21 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2014-11-16 10:21 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2014-11-16 10:21 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2014-11-16 10:21 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
2014-11-16 10:21 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2014-11-16 10:21 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2014-11-16 10:21 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
2014-11-16 10:21 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
2014-11-16 10:21 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2014-11-16 10:21 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2014-11-16 10:21 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
2014-11-16 10:21 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2014-11-16 10:21 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
2014-11-16 10:21 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
2014-11-16 10:21 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
2014-11-16 10:21 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-11-16 10:21 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
2014-11-16 10:21 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2014-11-16 10:21 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
2014-11-16 10:21 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2014-11-16 10:21 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
2014-11-16 10:21 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2014-11-16 10:21 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
2014-11-16 10:21 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
2014-11-16 10:21 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
2014-11-16 10:21 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2014-11-16 10:21 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
2014-11-16 10:21 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
2014-11-16 10:21 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2014-11-16 10:21 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
2014-11-16 10:21 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
2014-11-16 10:21 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
2014-11-16 10:21 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2014-11-16 10:21 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2014-11-16 10:21 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
2014-11-16 10:21 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
2014-11-16 10:21 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
2014-11-16 10:21 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2014-11-16 10:21 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
2014-11-16 10:21 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2014-11-16 10:21 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
2014-11-16 10:21 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\SysWOW64\locale.nls
2014-11-16 10:21 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\system32\locale.nls
2014-11-16 10:21 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
2014-11-16 10:21 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
2014-11-16 10:21 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
2014-11-16 10:21 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
2014-11-16 10:21 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2014-11-16 10:21 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
2014-11-16 10:21 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2014-11-16 10:21 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
2014-11-16 10:21 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
2014-11-16 10:21 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-11-16 10:21 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
2014-11-16 10:21 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
2014-11-16 10:21 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-11-16 10:21 - 2014-06-19 03:13 - 00310080 ____C (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2014-11-16 10:21 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-11-16 10:21 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-11-16 10:21 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
2014-11-16 10:21 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
2014-11-16 10:21 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2014-11-16 10:21 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
2014-11-16 10:21 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
2014-11-16 10:21 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
2014-11-16 10:21 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
2014-11-16 10:21 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2014-11-16 10:21 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2014-11-16 10:21 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
2014-11-16 10:21 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2014-11-16 10:21 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2014-11-16 10:21 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
2014-11-16 10:21 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
2014-11-16 10:21 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2014-11-16 10:21 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2014-11-16 10:21 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2014-11-16 10:21 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2014-11-16 10:20 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
2014-11-16 10:20 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
2014-11-16 10:20 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
2014-11-16 10:20 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
2014-11-16 10:20 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
2014-11-13 20:04 - 2014-12-06 18:09 - 00000976 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA1cfff749608b749.job
2014-11-13 20:04 - 2014-11-13 20:04 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1cfff749608b749
2014-11-13 16:34 - 2014-12-03 00:52 - 00000000 ____D () C:\Program Files (x86)\QuadCoreM2
2014-11-13 16:34 - 2014-11-13 16:34 - 00000974 _____ () C:\Users\Public\Desktop\QuadcoreM2.lnk
2014-11-13 16:32 - 2014-11-13 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuadcoreM2
2014-11-13 16:04 - 2014-11-20 21:51 - 00714208 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-11-13 16:04 - 2014-11-20 21:51 - 00106976 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-13 15:57 - 2014-11-13 16:13 - 00000000 ___RD () C:\windows\BrowserChoice
2014-11-13 01:18 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
2014-11-13 01:18 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
2014-11-13 01:18 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-11-13 01:18 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-11-13 01:18 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-11-13 01:17 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2014-11-13 01:17 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-11-13 01:17 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-11-13 01:17 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2014-11-13 01:17 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2014-11-13 01:17 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2014-11-13 01:17 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2014-11-13 01:17 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2014-11-13 01:17 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2014-11-13 01:17 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-11-13 01:17 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
2014-11-13 01:17 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-11-13 01:17 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2014-11-13 01:17 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
2014-11-13 01:17 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
2014-11-13 01:17 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-11-13 01:17 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-11-13 01:16 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-11-13 01:16 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-11-13 01:16 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2014-11-13 01:16 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2014-11-13 01:16 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2014-11-13 01:16 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2014-11-13 01:16 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2014-11-13 01:16 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2014-11-13 01:16 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2014-11-13 01:14 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-11-13 01:14 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-11-13 01:14 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-11-13 01:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2014-11-13 01:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2014-11-13 01:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2014-11-13 01:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2014-11-13 01:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2014-11-13 01:13 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-11-13 01:13 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-11-13 01:13 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2014-11-13 01:13 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-11-13 01:13 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-11-13 01:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-11-13 01:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2014-11-13 01:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-11-13 01:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2014-11-13 01:13 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-11-13 01:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-11-13 01:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-11-13 01:13 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-11-13 01:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2014-11-13 01:13 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-11-13 01:13 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-13 01:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-11-13 01:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2014-11-13 01:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2014-11-13 01:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-11-13 01:13 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-11-13 01:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2014-11-13 01:13 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2014-11-13 01:13 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-11-13 01:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2014-11-13 01:13 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2014-11-13 01:13 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2014-11-13 01:13 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-11-13 01:13 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-11-13 01:13 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-11-13 01:13 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-11-13 01:13 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-11-13 01:13 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2014-11-13 01:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2014-11-13 01:13 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-11-13 01:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2014-11-13 01:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2014-11-13 01:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2014-11-13 01:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2014-11-13 01:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2014-11-13 01:13 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-11-13 01:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2014-11-13 01:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-11-13 01:13 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2014-11-13 01:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-11-13 01:13 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-11-13 01:13 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-11-13 01:13 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-11-13 01:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-11-13 01:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-11-13 01:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2014-11-13 01:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-11-13 01:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2014-11-13 01:13 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-11-13 01:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-11-13 01:13 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-11-13 01:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2014-11-13 01:13 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-11-13 01:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2014-11-13 01:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-11-13 01:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2014-11-13 01:13 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-11-13 01:13 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2014-11-13 01:13 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-11-13 01:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2014-11-13 01:13 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-11-13 01:13 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2014-11-13 01:13 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2014-11-13 01:13 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-11-13 01:13 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-11-13 01:13 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-11-13 01:13 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2014-11-13 01:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2014-11-13 01:13 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-11-13 01:13 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-11-13 01:13 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-11-13 01:12 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-11-13 01:12 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2014-11-13 01:12 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-11-13 01:12 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2014-11-13 01:12 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2014-11-13 01:12 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2014-11-13 01:12 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll
2014-11-13 01:12 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-11-13 01:12 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-11-13 01:12 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-11-13 01:12 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-11-13 01:12 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-11-13 01:12 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-11-13 01:12 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-11-13 01:12 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-11-13 01:12 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2014-11-13 01:12 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-11-13 01:12 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-11-13 01:12 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2014-11-13 01:12 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2014-11-13 01:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-11-13 01:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2014-11-13 01:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-11-13 01:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2014-11-13 01:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2014-11-13 01:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-11-13 01:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
2014-11-13 01:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2014-11-13 01:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2014-11-13 01:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2014-11-13 01:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2014-11-13 01:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-11-13 01:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-11-13 01:12 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-11-13 01:12 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2014-11-13 01:12 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-11-13 01:12 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-11-13 01:12 - 2014-09-07 23:08 - 00389176 _____ () C:\windows\system32\ApnDatabase.xml
2014-11-13 01:12 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2014-11-13 01:12 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-11-13 01:12 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
2014-11-13 01:12 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
2014-11-13 01:12 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2014-11-13 01:12 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2014-11-13 01:12 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2014-11-13 01:12 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-11-13 01:12 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-11-13 01:12 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
2014-11-13 01:12 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
2014-11-13 01:12 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
2014-11-13 01:12 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
2014-11-13 01:12 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
2014-11-13 01:12 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-11-13 01:12 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2014-11-13 01:12 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2014-11-13 01:12 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2014-11-13 01:12 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2014-11-13 01:12 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2014-11-13 01:12 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
2014-11-13 01:12 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
2014-11-13 01:12 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2014-11-13 01:12 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
2014-11-13 01:12 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
2014-11-13 01:12 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2014-11-13 01:12 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2014-11-13 01:12 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2014-11-13 01:12 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2014-11-12 20:05 - 2014-11-12 20:05 - 00000000 ____D () C:\Users\Orsag\Documents\Vlastní šablony Office
2014-11-12 17:46 - 2014-11-12 17:46 - 00000000 ____D () C:\ProgramData\Caphyon
2014-11-12 17:39 - 2014-11-12 17:39 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Quadcore Games
2014-11-12 16:34 - 2014-12-06 17:55 - 00004968 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for DOMINIK-Orsag Dominik
2014-11-12 16:34 - 2014-11-12 16:34 - 00003094 _____ () C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2531041996-1163777749-3044732384-1002
2014-11-12 16:34 - 2014-11-12 16:34 - 00000000 __RHD () C:\MSOCache
2014-11-12 16:33 - 2014-11-12 16:33 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-11-12 16:29 - 2014-11-12 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-12 16:28 - 2014-11-21 08:44 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-11-10 12:18 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-11-10 12:14 - 2014-11-13 02:32 - 00000000 ____D () C:\windows\system32\MRT
2014-11-10 12:14 - 2014-11-13 02:28 - 103374192 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-11-10 01:02 - 2014-11-10 01:02 - 00000000 ___RD () C:\Users\Orsag\Desktop\Lenovo
2014-11-09 22:43 - 2014-11-11 20:39 - 00000000 ____D () C:\Users\Orsag\Desktop\HOCZ
2014-11-09 12:35 - 2014-11-21 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum
2014-11-09 12:35 - 2014-11-21 08:31 - 00000000 ____D () C:\Program Files (x86)\DAUM
2014-11-09 12:04 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
2014-11-09 12:04 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2014-11-09 12:04 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2014-11-09 08:53 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2014-11-09 08:53 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
2014-11-09 08:53 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
2014-11-09 08:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2014-11-09 08:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2014-11-09 08:46 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
2014-11-09 08:46 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2014-11-09 08:46 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
2014-11-09 08:46 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2014-11-09 08:46 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-11-09 08:45 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-11-09 08:45 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-11-09 08:44 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
2014-11-09 08:44 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2014-11-09 08:44 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
2014-11-09 08:44 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2014-11-09 08:44 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys
2014-11-09 08:42 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2014-11-09 08:42 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2014-11-09 08:40 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\windows\explorer.exe
2014-11-09 08:40 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2014-11-09 08:40 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-11-09 08:40 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-11-09 08:40 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2014-11-09 08:40 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-09 08:40 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
2014-11-09 08:40 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-09 08:40 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
2014-11-09 08:40 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-11-09 08:40 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-11-09 08:40 - 2014-07-24 16:28 - 00468288 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2014-11-09 08:39 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
2014-11-09 08:39 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-11-09 08:39 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-11-09 08:39 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
2014-11-09 08:39 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-11-09 08:39 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-11-09 08:39 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
2014-11-09 08:39 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2014-11-09 08:39 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
2014-11-09 08:39 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
2014-11-09 08:39 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2014-11-09 08:39 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
2014-11-09 08:39 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
2014-11-09 08:39 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
2014-11-09 08:39 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
2014-11-09 08:39 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
2014-11-09 08:39 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
2014-11-09 08:39 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
2014-11-09 08:39 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
2014-11-09 08:39 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
2014-11-09 08:39 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-11-09 08:39 - 2014-07-24 12:42 - 01200640 ____C (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys
2014-11-09 08:39 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
2014-11-09 08:39 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2014-11-09 08:39 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2014-11-09 08:38 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-11-09 08:38 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2014-11-09 08:38 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-11-09 08:38 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
2014-11-09 08:38 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
2014-11-09 08:38 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
2014-11-09 08:38 - 2014-05-13 08:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
2014-11-09 08:38 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2014-11-09 08:38 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
2014-11-09 08:38 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
2014-11-09 08:38 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
2014-11-09 08:38 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
2014-11-09 08:38 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
2014-11-09 08:38 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
2014-11-09 08:38 - 2014-05-03 00:26 - 00050745 _____ () C:\windows\system32\srms.dat
2014-11-09 08:38 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys
2014-11-09 08:38 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2014-11-09 08:38 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2014-11-09 08:38 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2014-11-09 08:38 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2014-11-09 08:38 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll
2014-11-09 08:38 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2014-11-09 08:38 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2014-11-09 08:38 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll
2014-11-09 08:38 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll
2014-11-09 08:38 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll
2014-11-09 08:38 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll
2014-11-09 08:38 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll
2014-11-09 08:38 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll
2014-11-09 08:38 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll
2014-11-09 08:38 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll
2014-11-09 08:38 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-11-09 08:37 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
2014-11-09 08:37 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-11-09 08:37 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-11-09 08:37 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2014-11-09 08:37 - 2014-05-31 11:07 - 00440664 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2014-11-09 08:37 - 2014-05-31 11:07 - 00089944 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2014-11-09 08:37 - 2014-05-31 11:07 - 00027480 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2014-11-09 08:37 - 2014-05-31 07:30 - 00037376 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2014-11-09 08:37 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2014-11-09 08:37 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2014-11-09 08:37 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2014-11-09 08:37 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2014-11-09 08:37 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2014-11-09 08:37 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll
2014-11-09 08:37 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll
2014-11-09 08:37 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll
2014-11-09 08:36 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2014-11-09 08:36 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2014-11-09 08:36 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
2014-11-09 08:36 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2014-11-09 08:36 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2014-11-09 08:17 - 2014-11-09 08:17 - 00001960 _____ () C:\Users\Public\Desktop\Metin2.lnk
2014-11-09 08:17 - 2014-11-09 08:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2
2014-11-09 08:09 - 2014-11-09 08:09 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Macromedia
2014-11-09 08:06 - 2014-11-09 08:18 - 00000000 ____D () C:\Users\Orsag\Desktop\Metin2
2014-11-09 08:05 - 2014-11-09 08:05 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Gameforge4d
2014-11-09 08:05 - 2014-11-09 08:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-11-09 08:04 - 2014-11-09 08:11 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2014-11-08 22:05 - 2014-11-09 08:54 - 00000000 ____D () C:\Program Files (x86)\GRETECH
2014-11-08 22:05 - 2014-11-08 22:05 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-11-08 22:05 - 2014-11-08 22:05 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\OpenCandy
2014-11-08 22:01 - 2014-11-08 22:01 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\WebApp
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\Documents\Lenovo
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\Documents\CyberLink
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Lenovo
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\CyberLink
2014-11-08 21:20 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
2014-11-08 21:09 - 2014-12-06 09:41 - 00000000 ___DO () C:\Users\Orsag\OneDrive
2014-11-08 21:04 - 2014-12-06 09:41 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore1cffb8f294bb958.job
2014-11-08 21:04 - 2014-11-13 20:04 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore1cffb8f294bb958
2014-11-08 20:31 - 2014-11-08 20:31 - 00000000 ____D () C:\Users\Public\Pokki
2014-11-08 20:30 - 2014-12-06 09:44 - 00002134 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk
2014-11-08 20:30 - 2014-11-21 13:31 - 00002305 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-11-08 20:30 - 2014-11-08 20:30 - 00002365 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo Web Start.lnk
2014-11-08 20:05 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Local\CyberLink
2014-11-08 20:05 - 2014-11-08 20:05 - 00000000 ____D () C:\ProgramData\PhotoMaster
2014-11-08 19:59 - 2014-11-27 07:10 - 00002214 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-08 19:59 - 2014-11-08 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-08 19:58 - 2014-12-06 18:09 - 00000976 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-08 19:58 - 2014-12-06 09:41 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-08 19:58 - 2014-11-13 20:04 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-08 19:58 - 2014-11-08 21:04 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-08 19:58 - 2014-11-08 19:59 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Google
2014-11-08 19:58 - 2014-11-08 19:58 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-08 19:55 - 2014-11-23 18:37 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Lenovo
2014-11-08 17:26 - 2014-11-08 17:26 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-08 08:13 - 2014-12-06 14:21 - 00003922 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{6C89C681-ECDC-4C1D-B741-0C7D4AD50A9C}
2014-11-08 08:13 - 2014-12-06 11:32 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2531041996-1163777749-3044732384-1002
2014-11-08 08:13 - 2014-11-08 08:13 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieUserList
2014-11-08 08:13 - 2014-11-08 08:13 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieSiteList
2014-11-08 08:08 - 2014-12-06 17:14 - 00060009 _____ () C:\Users\Orsag\AppData\Local\BTServer.log
2014-11-08 08:08 - 2014-11-19 09:42 - 00000000 ____D () C:\Users\Orsag\AppData\Local\VirtualStore
2014-11-08 08:08 - 2014-11-08 19:59 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Hightail for Lenovo
2014-11-08 08:08 - 2014-11-08 08:08 - 00001457 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-08 08:08 - 2014-11-08 08:08 - 00001264 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BTServer Toasts App.lnk
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\Documents\My Bluetooth
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Adobe
2014-11-08 08:07 - 2014-12-06 15:43 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Pokki
2014-11-08 08:07 - 2014-12-04 14:23 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Packages
2014-11-08 08:07 - 2014-11-23 18:31 - 00000000 ____D () C:\Users\Orsag
2014-11-08 08:07 - 2014-11-08 08:07 - 00000020 ___SH () C:\Users\Orsag\ntuser.ini
2014-11-08 08:07 - 2014-08-14 06:02 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-08 08:07 - 2014-03-18 11:05 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-08 08:07 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-08 08:07 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-08 08:07 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-08 08:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 18:02 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sru
2014-12-06 17:16 - 2014-08-14 06:15 - 01037994 _____ () C:\windows\system32\perfh005.dat
2014-12-06 17:16 - 2014-08-14 06:15 - 00246596 _____ () C:\windows\system32\perfc005.dat
2014-12-06 17:16 - 2014-03-18 10:53 - 00005430 _____ () C:\windows\system32\PerfStringBackup.INI
2014-12-06 10:00 - 2014-08-14 05:33 - 02040100 _____ () C:\windows\WindowsUpdate.log
2014-12-06 09:50 - 2014-08-14 06:56 - 00000000 ____D () C:\windows\System32\Tasks\Lenovo
2014-12-06 09:41 - 2013-08-22 15:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-12-05 12:41 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\AppReadiness
2014-11-30 19:32 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-11-28 21:13 - 2014-08-14 07:05 - 00009768 _____ () C:\windows\SysWOW64\VisualDiscovery.ini
2014-11-28 21:13 - 2014-08-14 07:05 - 00004776 _____ () C:\windows\SysWOW64\VisualDiscoveryOff.ini
2014-11-28 21:13 - 2014-08-14 07:05 - 00004776 _____ () C:\windows\system32\VisualDiscoveryOff.ini
2014-11-26 15:26 - 2013-08-22 16:20 - 00000000 ____D () C:\windows\CbsTemp
2014-11-23 18:37 - 2014-08-14 06:57 - 00000000 ____D () C:\ProgramData\Lenovo
2014-11-23 18:36 - 2014-08-14 06:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-11-23 18:36 - 2014-08-14 06:56 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-11-23 18:30 - 2013-08-22 15:44 - 00492472 _____ () C:\windows\system32\FNTCACHE.DAT
2014-11-23 10:18 - 2013-08-22 15:46 - 00023375 _____ () C:\windows\setupact.log
2014-11-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\rescache
2014-11-21 12:51 - 2014-03-18 10:44 - 00059968 _____ () C:\windows\PFRO.log
2014-11-21 12:51 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-11-21 12:50 - 2014-08-14 06:57 - 00002560 _____ () C:\windows\system32\VfService.trf
2014-11-21 12:50 - 2014-08-14 06:09 - 00065536 _____ () C:\windows\system32\spu_storage.bin
2014-11-21 12:49 - 2014-03-18 10:38 - 00000000 ____D () C:\Program Files\Windows Journal
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ToastData
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\setup
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\setup
2014-11-21 12:49 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\system32\oobe
2014-11-21 12:48 - 2014-08-14 06:14 - 01567402 _____ () C:\Users\Public\CAFADEBUG.log
2014-11-20 08:56 - 2014-08-14 06:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\SysWOW64\WCN
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\system32\WCN
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\system32\slmgr
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\WinStore
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\sk-SK
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sk-SK
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\migwiz
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 15:58 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\SysWOW64\oobe
2014-11-13 15:58 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\system32\Sysprep
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\SystemResetPlatform
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\MediaViewer
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Help
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\FileManager
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Camera
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-12 16:33 - 2014-08-14 07:08 - 00000000 ____D () C:\ProgramData\Office2013
2014-11-09 23:23 - 2014-08-14 06:58 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-11-08 21:56 - 2014-08-14 07:04 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-08 21:19 - 2014-08-14 06:58 - 00000000 ____D () C:\Program Files\Common Files\McAfee
2014-11-08 21:19 - 2013-08-22 16:36 - 00000000 ___HD () C:\windows\ELAMBKUP
2014-11-08 21:18 - 2014-08-14 06:58 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-08 20:27 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\NDF
2014-11-08 08:08 - 2014-08-14 06:04 - 00123981 ____H () C:\windows\modules.log
2014-11-08 08:08 - 2014-04-03 20:15 - 00000000 ____D () C:\windows\Panther
Some content of TEMP:
====================
C:\Users\Orsag\AppData\Local\Temp\eauninstall.exe
C:\Users\Orsag\AppData\Local\Temp\ExPromo.exe
C:\Users\Orsag\AppData\Local\Temp\KMP_3.9.1.130.exe
C:\Users\Orsag\AppData\Local\Temp\LenovoExperienceImprovement.exe
C:\Users\Orsag\AppData\Local\Temp\NSISPromotionEx.dll
C:\Users\Orsag\AppData\Local\Temp\octD5A0.tmp.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-03 07:22
==================== End Of Log ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Facebook profilový vir
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Facebook profilový vir
Zdravim 
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Po spusteni probehne stazeni databaze
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; resethosts; emptyclsid; IEdefaults; FFdefaults; CHRdefaults; emptyIEcache; emptyFFcache; emptyCHRcache; emptyalltemp; emptyflash; emptyjava; emptyrecycle.bin;- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Facebook profilový vir
Zoek.exe v5.0.0.0 Updated 06-December-2014
Tool run by Orsag on so 06. 12. 2014 at 20:33:32,78.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Orsag\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
6. 12. 2014 20:34:35 Zoek.exe System Restore Point Created Succesfully.
==== Empty Folders Check ======================
C:\PROGRA~2\DAUM deleted successfully
C:\PROGRA~2\GRETECH deleted successfully
C:\PROGRA~2\New Folder deleted successfully
C:\PROGRA~3\Office2013 deleted successfully
ADW:
# AdwCleaner v4.104 - Report created 06/12/2014 at 20:25:19
# Updated 05/12/2014 by Xplode
# Database : 2014-12-03.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Orsag - DOMINIK
# Running from : C:\Users\Orsag\Downloads\adwcleaner_4.104.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Users\Orsag\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Key Deleted : HKCU\Software\Classes\pokki
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [3133 octets] - [06/12/2014 20:22:39]
AdwCleaner[S0].txt - [3039 octets] - [06/12/2014 20:25:19]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3099 octets] ##########
Tool run by Orsag on so 06. 12. 2014 at 20:33:32,78.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Orsag\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
6. 12. 2014 20:34:35 Zoek.exe System Restore Point Created Succesfully.
==== Empty Folders Check ======================
C:\PROGRA~2\DAUM deleted successfully
C:\PROGRA~2\GRETECH deleted successfully
C:\PROGRA~2\New Folder deleted successfully
C:\PROGRA~3\Office2013 deleted successfully
ADW:
# AdwCleaner v4.104 - Report created 06/12/2014 at 20:25:19
# Updated 05/12/2014 by Xplode
# Database : 2014-12-03.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Orsag - DOMINIK
# Running from : C:\Users\Orsag\Downloads\adwcleaner_4.104.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Users\Orsag\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Key Deleted : HKCU\Software\Classes\pokki
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Key Deleted : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Key Deleted : HKCU\Software\Classes\Directory\shell\pokki
Key Deleted : HKCU\Software\Classes\Drive\shell\pokki
Key Deleted : HKCU\Software\Classes\lnkfile\shell\pokki
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [3133 octets] - [06/12/2014 20:22:39]
AdwCleaner[S0].txt - [3039 octets] - [06/12/2014 20:25:19]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3099 octets] ##########
Re: Facebook profilový vir
Zoek je nejaky kratky, nechte jej pracovat a provest restart, log pak bude c:\zoek_resuls.log
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Facebook profilový vir
To jsem já ten kamarád, dávám tady ten log kompletní
Zoek.exe v5.0.0.0 Updated 06-December-2014
Tool run by Orsag on so 06. 12. 2014 at 20:33:32,78.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Orsag\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
6. 12. 2014 20:34:35 Zoek.exe System Restore Point Created Succesfully.
==== Empty Folders Check ======================
C:\PROGRA~2\DAUM deleted successfully
C:\PROGRA~2\GRETECH deleted successfully
C:\PROGRA~2\New Folder deleted successfully
C:\PROGRA~3\Office2013 deleted successfully
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\windows\sysWoW64\config\systemprofile\.android deleted
C:\Users\Public\Pokki deleted
C:\Users\Orsag\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Menu.lnk deleted
C:\PROGRA~3\Pokki deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Default\AppData\Local\Pokki deleted
C:\Users\Orsag\AppData\Local\Pokki deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk deleted
C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk deleted
==== Chromium Look ======================
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
fkkcgfbgohboipdhliafmacjnhjbhmim - No path found[]
Africa - Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\afoojfkkgppaceckklbflieagpfijcoi
Stopify - Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfnbpnclgofipdlfpihgfceggbcabjeo
Color For Facebook™ - Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmnfmgelbcgoildddbgofpeofhjgipoi
==== Chromium Fix ======================
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ak.facebook.com_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ak.facebook.com_0.localstorage-journal deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage-journal deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.best-deals-products.com_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.best-deals-products.com_0.localstorage-journal deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.best-deals-products.com_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.best-deals-products.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{44DFFF9F-6389-4BD9-8179-F640AB4EF7DB}"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} Unknown Url="Not_Found"
==== Reset Google Chrome ======================
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\SearchScopes\{44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Empty IE Cache ======================
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\KGS6ADV5 will be deleted at reboot
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\WOT53CTC will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
No Java Cache Found
==== C:\zoek_backup content ======================
C:\zoek_backup (files=9399 folders=232 453508046 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Orsag\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Reset Hosts File ======================
Hosts File Reset Successfully
==== Empty Temp Folders ======================
C:\windows\Temp successfully emptied
C:\Users\Orsag\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\KGS6ADV5" not found
"C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\WOT53CTC" not found
"C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on so 06. 12. 2014 at 21:10:55,74 ======================
Zoek.exe v5.0.0.0 Updated 06-December-2014
Tool run by Orsag on so 06. 12. 2014 at 20:33:32,78.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Orsag\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
6. 12. 2014 20:34:35 Zoek.exe System Restore Point Created Succesfully.
==== Empty Folders Check ======================
C:\PROGRA~2\DAUM deleted successfully
C:\PROGRA~2\GRETECH deleted successfully
C:\PROGRA~2\New Folder deleted successfully
C:\PROGRA~3\Office2013 deleted successfully
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\windows\sysWoW64\config\systemprofile\.android deleted
C:\Users\Public\Pokki deleted
C:\Users\Orsag\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Menu.lnk deleted
C:\PROGRA~3\Pokki deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Default\AppData\Local\Pokki deleted
C:\Users\Orsag\AppData\Local\Pokki deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk deleted
C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk deleted
==== Chromium Look ======================
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
fkkcgfbgohboipdhliafmacjnhjbhmim - No path found[]
Africa - Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\afoojfkkgppaceckklbflieagpfijcoi
Stopify - Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfnbpnclgofipdlfpihgfceggbcabjeo
Color For Facebook™ - Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmnfmgelbcgoildddbgofpeofhjgipoi
==== Chromium Fix ======================
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ak.facebook.com_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ak.facebook.com_0.localstorage-journal deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage-journal deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.best-deals-products.com_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.best-deals-products.com_0.localstorage-journal deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.best-deals-products.com_0.localstorage deleted successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.best-deals-products.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{44DFFF9F-6389-4BD9-8179-F640AB4EF7DB}"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} Unknown Url="Not_Found"
==== Reset Google Chrome ======================
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\SearchScopes\{44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Empty IE Cache ======================
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\KGS6ADV5 will be deleted at reboot
C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\WOT53CTC will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
No Java Cache Found
==== C:\zoek_backup content ======================
C:\zoek_backup (files=9399 folders=232 453508046 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Orsag\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Reset Hosts File ======================
Hosts File Reset Successfully
==== Empty Temp Folders ======================
C:\windows\Temp successfully emptied
C:\Users\Orsag\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\KGS6ADV5" not found
"C:\Users\Orsag\AppData\Local\Microsoft\Windows\INetCache\IE\WOT53CTC" not found
"C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on so 06. 12. 2014 at 21:10:55,74 ======================
Re: Facebook profilový vir
Fajn, dejte nyni log novy z FRST
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Facebook profilový vir
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-12-2014 02
Ran by Orsag (administrator) on DOMINIK on 06-12-2014 21:28:37
Running from C:\Users\Orsag\Downloads
Loaded Profile: Orsag (Available profiles: Orsag)
Platform: Windows 8.1 (X64) OS Language: Angličtina (Spojené státy)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
(Superfish, Inc.) C:\Program Files (x86)\Lenovo\VisualDiscovery\VisualDiscovery.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
() C:\Program Files\Lenovo PhoneCompanion\adb.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Lenovo\Lenovo Messenger\NotificationsViewHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Orsag\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2808560 2014-06-24] (Synaptics Incorporated)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [216064 2014-01-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2014-01-21] (Realtek semiconductor)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2014-08-14] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2014-08-14] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10842096 2014-08-14] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30520936 2014-11-18] (Skype Technologies S.A.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\RunOnce: [Application Restart #3] => C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cli (the data entry has 549 more characters).
ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2531041996-1163777749-3044732384-1002 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2531041996-1163777749-3044732384-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-08-14]
Chrome:
=======
CHR Profile: C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-08]
CHR Extension: (Dokumenty Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-08]
CHR Extension: (Disk Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-08]
CHR Extension: (YouTube) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-08]
CHR Extension: (Tabulky Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-08]
CHR Extension: (Stopify) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfnbpnclgofipdlfpihgfceggbcabjeo [2014-12-06]
CHR Extension: (Color For Facebook™) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmnfmgelbcgoildddbgofpeofhjgipoi [2014-11-11]
CHR Extension: (Peněženka Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-08]
CHR Extension: (Gmail) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-08]
CHR HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-06-25] (Advanced Micro Devices, Inc.) [File not signed]
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [84992 2014-01-22] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-11-21] (LENOVO INCORPORATED.)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-08-14] (Lenovo(beijing) Limited)
R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-18] (Lenovo(beijing) Limited)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2014-08-14] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [308720 2014-08-14] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-25] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [190704 2014-06-24] (Synaptics Incorporated)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [68880 2014-08-14] ()
R2 VisualDiscovery; C:\Program Files (x86)\Lenovo\VisualDiscovery\VisualDiscovery.exe [1354296 2014-06-21] (Superfish, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-14] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-12] (Advanced Micro Devices)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [225504 2014-03-28] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-12] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [558296 2014-04-12] (Realtek Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9105624 2014-01-21] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
R2 VDWFP; C:\windows\system32\Drivers\VDWFP64.sys [39800 2014-05-12] (Superfish, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 21:28 - 2014-12-06 21:28 - 02119168 _____ (Farbar) C:\Users\Orsag\Downloads\FRST64 (1).exe
2014-12-06 21:21 - 2014-12-06 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-12-06 21:11 - 2014-12-06 21:11 - 00007619 _____ () C:\Users\Orsag\Desktop\zápis.txt
2014-12-06 21:09 - 2014-12-06 20:33 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-12-06 20:34 - 2014-12-06 21:10 - 00007616 _____ () C:\zoek-results.log
2014-12-06 20:33 - 2014-12-06 21:10 - 00000000 ____D () C:\zoek_backup
2014-12-06 20:32 - 2014-12-06 20:33 - 01295360 _____ () C:\Users\Orsag\Downloads\zoek.exe
2014-12-06 20:31 - 2014-12-06 20:31 - 00003215 _____ () C:\Users\Orsag\Desktop\AdwCleaner[S0].txt
2014-12-06 20:28 - 2014-12-06 20:28 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\My Bluetooth
2014-12-06 20:22 - 2014-12-06 21:25 - 00000110 _____ () C:\AdwCleanerDebug.txt
2014-12-06 20:21 - 2014-12-06 20:21 - 02153472 _____ () C:\Users\Orsag\Downloads\adwcleaner_4.104.exe
2014-12-06 20:18 - 2014-12-06 20:18 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2014-12-06 20:18 - 2014-12-06 20:18 - 00002507 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Apple Computer
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Apple Computer
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-12-06 20:17 - 2014-12-06 20:17 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Apple
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\ProgramData\Apple
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Program Files\Bonjour
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-12-06 20:16 - 2014-12-06 20:17 - 35624744 _____ (Apple Inc.) C:\Users\Orsag\Downloads\SafariSetup.exe
2014-12-06 18:21 - 2014-12-06 18:21 - 00029380 _____ () C:\Users\Orsag\Desktop\Trojan2.txt
2014-12-06 18:19 - 2014-12-06 18:20 - 00029380 _____ () C:\Users\Orsag\Downloads\Addition.txt
2014-12-06 18:17 - 2014-12-06 21:28 - 00020187 _____ () C:\Users\Orsag\Downloads\FRST.txt
2014-12-06 18:17 - 2014-12-06 21:28 - 00000000 ____D () C:\FRST
2014-12-06 18:12 - 2014-12-06 18:12 - 02119168 _____ (Farbar) C:\Users\Orsag\Downloads\FRST64.exe
2014-11-30 22:23 - 2014-11-30 22:26 - 367385066 _____ () C:\Users\Orsag\Downloads\Ulice 2710 dil (21-11- 2014).avi
2014-11-28 10:47 - 2014-11-28 10:54 - 417103628 _____ () C:\Users\Orsag\Downloads\Ulice 2709.dil 20.11.2014.avi
2014-11-28 10:39 - 2014-11-28 10:43 - 414198802 _____ () C:\Users\Orsag\Downloads\Ulice 2708.dil 19.11.2014.avi
2014-11-28 09:58 - 2014-11-28 10:05 - 420088314 _____ () C:\Users\Orsag\Downloads\Ulice 2707.dil 18.11.2014.avi
2014-11-28 09:54 - 2014-11-28 09:58 - 374987600 _____ () C:\Users\Orsag\Downloads\Ulice 2706.dil 17.11.2014.avi
2014-11-28 07:27 - 2014-11-28 07:31 - 417827518 _____ () C:\Users\Orsag\Downloads\Ulice 2705.dil 14.11.2014.avi
2014-11-27 19:20 - 2014-11-27 19:24 - 417224138 _____ () C:\Users\Orsag\Downloads\Ulice 2704.dil 13.11.2014.avi
2014-11-27 18:13 - 2014-11-27 18:19 - 410513120 _____ () C:\Users\Orsag\Downloads\Ulice 2703.dil 12.11.2014.avi
2014-11-27 09:49 - 2014-12-06 20:29 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00002549 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\ProgramData\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-27 09:46 - 2014-11-27 09:47 - 50726291 _____ () C:\Users\Orsag\Downloads\skype-setup.exe
2014-11-25 19:38 - 2014-11-25 19:51 - 1238040508 _____ () C:\Users\Orsag\Downloads\Pod-zemi----As-Above,-So-Below-2014-titulky-CZ-v-obraze.avi
2014-11-23 18:30 - 2014-11-23 18:31 - 00281376 _____ () C:\windows\Minidump\112314-35453-01.dmp
2014-11-23 18:30 - 2014-11-23 18:30 - 866847321 _____ () C:\windows\MEMORY.DMP
2014-11-23 18:30 - 2014-11-23 18:30 - 00000000 ____D () C:\windows\Minidump
2014-11-21 18:35 - 2014-11-21 18:39 - 00000000 ____D () C:\Users\Orsag\Desktop\Písničky
2014-11-21 18:35 - 2014-11-21 18:35 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-11-20 22:22 - 2014-11-30 22:29 - 00000000 ____D () C:\KMPlayer
2014-11-20 22:22 - 2014-11-20 22:22 - 00000625 _____ () C:\Users\Orsag\Desktop\KMPlayer.lnk
2014-11-20 22:22 - 2014-11-20 22:22 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-11-20 08:52 - 2014-11-20 08:53 - 00000000 ____D () C:\Users\Orsag\Documents\RCT3Demo 1.1
2014-11-20 08:52 - 2014-11-20 08:52 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Atari
2014-11-19 12:21 - 2014-11-19 12:21 - 00000000 ____D () C:\Users\Public\Documents\EA Games
2014-11-19 12:21 - 2014-11-19 12:21 - 00000000 ____D () C:\Users\Orsag\Documents\EA Games
2014-11-19 09:36 - 2014-11-19 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2014-11-19 09:24 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-11-19 09:24 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-11-19 09:24 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2014-11-19 09:24 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2014-11-17 16:34 - 2014-11-17 16:34 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieBrowserModeList
2014-11-16 10:22 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2014-11-16 10:22 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2014-11-16 10:21 - 2014-07-24 16:28 - 00419648 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00412992 ____C (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00280384 ____C (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00143680 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2014-11-16 10:21 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2014-11-16 10:21 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-11-16 10:21 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
2014-11-16 10:21 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2014-11-16 10:21 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
2014-11-16 10:21 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2014-11-16 10:21 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2014-11-16 10:21 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2014-11-16 10:21 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2014-11-16 10:21 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2014-11-16 10:21 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
2014-11-16 10:21 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2014-11-16 10:21 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2014-11-16 10:21 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
2014-11-16 10:21 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
2014-11-16 10:21 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2014-11-16 10:21 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-11-16 10:21 - 2014-07-24 12:45 - 00076800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2014-11-16 10:21 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-11-16 10:21 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2014-11-16 10:21 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
2014-11-16 10:21 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
2014-11-16 10:21 - 2014-07-24 12:41 - 00118272 ____C (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys
2014-11-16 10:21 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
2014-11-16 10:21 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
2014-11-16 10:21 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2014-11-16 10:21 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2014-11-16 10:21 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2014-11-16 10:21 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
2014-11-16 10:21 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
2014-11-16 10:21 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
2014-11-16 10:21 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-11-16 10:21 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-11-16 10:21 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
2014-11-16 10:21 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
2014-11-16 10:21 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
2014-11-16 10:21 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
2014-11-16 10:21 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
2014-11-16 10:21 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
2014-11-16 10:21 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
2014-11-16 10:21 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-11-16 10:21 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-11-16 10:21 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
2014-11-16 10:21 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
2014-11-16 10:21 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
2014-11-16 10:21 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
2014-11-16 10:21 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
2014-11-16 10:21 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2014-11-16 10:21 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
2014-11-16 10:21 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
2014-11-16 10:21 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
2014-11-16 10:21 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2014-11-16 10:21 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2014-11-16 10:21 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2014-11-16 10:21 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
2014-11-16 10:21 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2014-11-16 10:21 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2014-11-16 10:21 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
2014-11-16 10:21 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
2014-11-16 10:21 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2014-11-16 10:21 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2014-11-16 10:21 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
2014-11-16 10:21 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2014-11-16 10:21 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
2014-11-16 10:21 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
2014-11-16 10:21 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
2014-11-16 10:21 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-11-16 10:21 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
2014-11-16 10:21 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2014-11-16 10:21 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
2014-11-16 10:21 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2014-11-16 10:21 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
2014-11-16 10:21 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2014-11-16 10:21 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
2014-11-16 10:21 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
2014-11-16 10:21 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
2014-11-16 10:21 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2014-11-16 10:21 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
2014-11-16 10:21 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
2014-11-16 10:21 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2014-11-16 10:21 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
2014-11-16 10:21 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
2014-11-16 10:21 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
2014-11-16 10:21 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2014-11-16 10:21 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2014-11-16 10:21 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
2014-11-16 10:21 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
2014-11-16 10:21 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
2014-11-16 10:21 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2014-11-16 10:21 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
2014-11-16 10:21 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2014-11-16 10:21 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
2014-11-16 10:21 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\SysWOW64\locale.nls
2014-11-16 10:21 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\system32\locale.nls
2014-11-16 10:21 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
2014-11-16 10:21 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
2014-11-16 10:21 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
2014-11-16 10:21 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
2014-11-16 10:21 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2014-11-16 10:21 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
2014-11-16 10:21 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2014-11-16 10:21 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
2014-11-16 10:21 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
2014-11-16 10:21 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-11-16 10:21 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
2014-11-16 10:21 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
2014-11-16 10:21 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-11-16 10:21 - 2014-06-19 03:13 - 00310080 ____C (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2014-11-16 10:21 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-11-16 10:21 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-11-16 10:21 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
2014-11-16 10:21 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
2014-11-16 10:21 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2014-11-16 10:21 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
2014-11-16 10:21 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
2014-11-16 10:21 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
2014-11-16 10:21 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
2014-11-16 10:21 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2014-11-16 10:21 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2014-11-16 10:21 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
2014-11-16 10:21 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2014-11-16 10:21 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2014-11-16 10:21 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
2014-11-16 10:21 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
2014-11-16 10:21 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2014-11-16 10:21 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2014-11-16 10:21 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2014-11-16 10:21 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2014-11-16 10:20 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
2014-11-16 10:20 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
2014-11-16 10:20 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
2014-11-16 10:20 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
2014-11-16 10:20 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
2014-11-13 20:04 - 2014-12-06 21:09 - 00000976 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA1cfff749608b749.job
2014-11-13 20:04 - 2014-11-13 20:04 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1cfff749608b749
2014-11-13 16:34 - 2014-12-03 00:52 - 00000000 ____D () C:\Program Files (x86)\QuadCoreM2
2014-11-13 16:34 - 2014-11-13 16:34 - 00000974 _____ () C:\Users\Public\Desktop\QuadcoreM2.lnk
2014-11-13 16:32 - 2014-11-13 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuadcoreM2
2014-11-13 16:04 - 2014-11-20 21:51 - 00714208 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-11-13 16:04 - 2014-11-20 21:51 - 00106976 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-13 15:57 - 2014-11-13 16:13 - 00000000 ___RD () C:\windows\BrowserChoice
2014-11-13 01:18 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
2014-11-13 01:18 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
2014-11-13 01:18 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-11-13 01:18 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-11-13 01:18 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-11-13 01:17 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2014-11-13 01:17 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-11-13 01:17 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-11-13 01:17 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2014-11-13 01:17 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2014-11-13 01:17 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2014-11-13 01:17 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2014-11-13 01:17 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2014-11-13 01:17 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2014-11-13 01:17 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-11-13 01:17 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
2014-11-13 01:17 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-11-13 01:17 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2014-11-13 01:17 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
2014-11-13 01:17 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
2014-11-13 01:17 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-11-13 01:17 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-11-13 01:16 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-11-13 01:16 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-11-13 01:16 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2014-11-13 01:16 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2014-11-13 01:16 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2014-11-13 01:16 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2014-11-13 01:16 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2014-11-13 01:16 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2014-11-13 01:16 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2014-11-13 01:14 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-11-13 01:14 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-11-13 01:14 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-11-13 01:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2014-11-13 01:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2014-11-13 01:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2014-11-13 01:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2014-11-13 01:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2014-11-13 01:13 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-11-13 01:13 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-11-13 01:13 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2014-11-13 01:13 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-11-13 01:13 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-11-13 01:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-11-13 01:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2014-11-13 01:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-11-13 01:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2014-11-13 01:13 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-11-13 01:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-11-13 01:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-11-13 01:13 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-11-13 01:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2014-11-13 01:13 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-11-13 01:13 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-13 01:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-11-13 01:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2014-11-13 01:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2014-11-13 01:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-11-13 01:13 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-11-13 01:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2014-11-13 01:13 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2014-11-13 01:13 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-11-13 01:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2014-11-13 01:13 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2014-11-13 01:13 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2014-11-13 01:13 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-11-13 01:13 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-11-13 01:13 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-11-13 01:13 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-11-13 01:13 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-11-13 01:13 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2014-11-13 01:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2014-11-13 01:13 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-11-13 01:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2014-11-13 01:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2014-11-13 01:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2014-11-13 01:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2014-11-13 01:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2014-11-13 01:13 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-11-13 01:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2014-11-13 01:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-11-13 01:13 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2014-11-13 01:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-11-13 01:13 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-11-13 01:13 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-11-13 01:13 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-11-13 01:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-11-13 01:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-11-13 01:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2014-11-13 01:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-11-13 01:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2014-11-13 01:13 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-11-13 01:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-11-13 01:13 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-11-13 01:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2014-11-13 01:13 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-11-13 01:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2014-11-13 01:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-11-13 01:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2014-11-13 01:13 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-11-13 01:13 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2014-11-13 01:13 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-11-13 01:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2014-11-13 01:13 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-11-13 01:13 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2014-11-13 01:13 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2014-11-13 01:13 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-11-13 01:13 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-11-13 01:13 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-11-13 01:13 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2014-11-13 01:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2014-11-13 01:13 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-11-13 01:13 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-11-13 01:13 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-11-13 01:12 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-11-13 01:12 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2014-11-13 01:12 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-11-13 01:12 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2014-11-13 01:12 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2014-11-13 01:12 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2014-11-13 01:12 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll
2014-11-13 01:12 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-11-13 01:12 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-11-13 01:12 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-11-13 01:12 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-11-13 01:12 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-11-13 01:12 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-11-13 01:12 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-11-13 01:12 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-11-13 01:12 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2014-11-13 01:12 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-11-13 01:12 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-11-13 01:12 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2014-11-13 01:12 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2014-11-13 01:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-11-13 01:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2014-11-13 01:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-11-13 01:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2014-11-13 01:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2014-11-13 01:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-11-13 01:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
2014-11-13 01:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2014-11-13 01:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2014-11-13 01:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2014-11-13 01:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2014-11-13 01:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-11-13 01:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-11-13 01:12 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-11-13 01:12 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2014-11-13 01:12 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-11-13 01:12 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-11-13 01:12 - 2014-09-07 23:08 - 00389176 _____ () C:\windows\system32\ApnDatabase.xml
2014-11-13 01:12 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2014-11-13 01:12 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-11-13 01:12 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
2014-11-13 01:12 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
2014-11-13 01:12 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2014-11-13 01:12 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2014-11-13 01:12 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2014-11-13 01:12 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-11-13 01:12 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-11-13 01:12 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
2014-11-13 01:12 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
2014-11-13 01:12 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
2014-11-13 01:12 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
2014-11-13 01:12 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
2014-11-13 01:12 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-11-13 01:12 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2014-11-13 01:12 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2014-11-13 01:12 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2014-11-13 01:12 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2014-11-13 01:12 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2014-11-13 01:12 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
2014-11-13 01:12 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
2014-11-13 01:12 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2014-11-13 01:12 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
2014-11-13 01:12 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
2014-11-13 01:12 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2014-11-13 01:12 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2014-11-13 01:12 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2014-11-13 01:12 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2014-11-12 20:05 - 2014-11-12 20:05 - 00000000 ____D () C:\Users\Orsag\Documents\Vlastní šablony Office
2014-11-12 17:46 - 2014-11-12 17:46 - 00000000 ____D () C:\ProgramData\Caphyon
2014-11-12 17:39 - 2014-11-12 17:39 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Quadcore Games
2014-11-12 16:34 - 2014-12-06 21:21 - 00004970 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for DOMINIK-Orsag Dominik
2014-11-12 16:34 - 2014-11-12 16:34 - 00003094 _____ () C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2531041996-1163777749-3044732384-1002
2014-11-12 16:34 - 2014-11-12 16:34 - 00000000 __RHD () C:\MSOCache
2014-11-12 16:33 - 2014-11-12 16:33 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-11-12 16:29 - 2014-11-12 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-12 16:28 - 2014-11-21 08:44 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-11-10 12:18 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-11-10 12:14 - 2014-11-13 02:32 - 00000000 ____D () C:\windows\system32\MRT
2014-11-10 12:14 - 2014-11-13 02:28 - 103374192 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-11-10 01:02 - 2014-11-10 01:02 - 00000000 ___RD () C:\Users\Orsag\Desktop\Lenovo
2014-11-09 22:43 - 2014-11-11 20:39 - 00000000 ____D () C:\Users\Orsag\Desktop\HOCZ
2014-11-09 12:35 - 2014-11-21 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum
2014-11-09 12:04 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
2014-11-09 12:04 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2014-11-09 12:04 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2014-11-09 08:53 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2014-11-09 08:53 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
2014-11-09 08:53 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
2014-11-09 08:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2014-11-09 08:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2014-11-09 08:46 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
2014-11-09 08:46 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2014-11-09 08:46 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
2014-11-09 08:46 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2014-11-09 08:46 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-11-09 08:45 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-11-09 08:45 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-11-09 08:44 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
2014-11-09 08:44 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2014-11-09 08:44 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
2014-11-09 08:44 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2014-11-09 08:44 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys
2014-11-09 08:42 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2014-11-09 08:42 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2014-11-09 08:40 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\windows\explorer.exe
2014-11-09 08:40 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2014-11-09 08:40 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-11-09 08:40 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-11-09 08:40 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2014-11-09 08:40 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-09 08:40 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
2014-11-09 08:40 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-09 08:40 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
2014-11-09 08:40 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-11-09 08:40 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-11-09 08:40 - 2014-07-24 16:28 - 00468288 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2014-11-09 08:39 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
2014-11-09 08:39 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-11-09 08:39 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-11-09 08:39 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
2014-11-09 08:39 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-11-09 08:39 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-11-09 08:39 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
2014-11-09 08:39 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2014-11-09 08:39 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
2014-11-09 08:39 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
2014-11-09 08:39 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2014-11-09 08:39 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
2014-11-09 08:39 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
2014-11-09 08:39 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
2014-11-09 08:39 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
2014-11-09 08:39 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
2014-11-09 08:39 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
2014-11-09 08:39 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
2014-11-09 08:39 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
2014-11-09 08:39 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
2014-11-09 08:39 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-11-09 08:39 - 2014-07-24 12:42 - 01200640 ____C (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys
2014-11-09 08:39 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
2014-11-09 08:39 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2014-11-09 08:39 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2014-11-09 08:38 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-11-09 08:38 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2014-11-09 08:38 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-11-09 08:38 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
2014-11-09 08:38 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
2014-11-09 08:38 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
2014-11-09 08:38 - 2014-05-13 08:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
2014-11-09 08:38 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2014-11-09 08:38 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
2014-11-09 08:38 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
2014-11-09 08:38 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
2014-11-09 08:38 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
2014-11-09 08:38 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
2014-11-09 08:38 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
2014-11-09 08:38 - 2014-05-03 00:26 - 00050745 _____ () C:\windows\system32\srms.dat
2014-11-09 08:38 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys
2014-11-09 08:38 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2014-11-09 08:38 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2014-11-09 08:38 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2014-11-09 08:38 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2014-11-09 08:38 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll
2014-11-09 08:38 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2014-11-09 08:38 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2014-11-09 08:38 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll
2014-11-09 08:38 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll
2014-11-09 08:38 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll
2014-11-09 08:38 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll
2014-11-09 08:38 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll
2014-11-09 08:38 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll
2014-11-09 08:38 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll
2014-11-09 08:38 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll
2014-11-09 08:38 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-11-09 08:37 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
2014-11-09 08:37 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-11-09 08:37 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-11-09 08:37 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2014-11-09 08:37 - 2014-05-31 11:07 - 00440664 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2014-11-09 08:37 - 2014-05-31 11:07 - 00089944 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2014-11-09 08:37 - 2014-05-31 11:07 - 00027480 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2014-11-09 08:37 - 2014-05-31 07:30 - 00037376 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2014-11-09 08:37 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2014-11-09 08:37 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2014-11-09 08:37 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2014-11-09 08:37 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2014-11-09 08:37 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2014-11-09 08:37 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll
2014-11-09 08:37 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll
2014-11-09 08:37 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll
2014-11-09 08:36 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2014-11-09 08:36 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2014-11-09 08:36 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
2014-11-09 08:36 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2014-11-09 08:36 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2014-11-09 08:17 - 2014-11-09 08:17 - 00001960 _____ () C:\Users\Public\Desktop\Metin2.lnk
2014-11-09 08:17 - 2014-11-09 08:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2
2014-11-09 08:09 - 2014-11-09 08:09 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Macromedia
2014-11-09 08:06 - 2014-11-09 08:18 - 00000000 ____D () C:\Users\Orsag\Desktop\Metin2
2014-11-09 08:05 - 2014-11-09 08:05 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Gameforge4d
2014-11-09 08:05 - 2014-11-09 08:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-11-09 08:04 - 2014-11-09 08:11 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2014-11-08 22:05 - 2014-11-08 22:05 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-11-08 22:01 - 2014-11-08 22:01 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\WebApp
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\Documents\Lenovo
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\Documents\CyberLink
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Lenovo
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\CyberLink
2014-11-08 21:20 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
2014-11-08 21:09 - 2014-12-06 21:11 - 00000000 ___DO () C:\Users\Orsag\OneDrive
2014-11-08 21:04 - 2014-12-06 21:10 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore1cffb8f294bb958.job
2014-11-08 21:04 - 2014-11-13 20:04 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore1cffb8f294bb958
2014-11-08 20:30 - 2014-11-08 20:30 - 00002365 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo Web Start.lnk
2014-11-08 20:05 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Local\CyberLink
2014-11-08 20:05 - 2014-11-08 20:05 - 00000000 ____D () C:\ProgramData\PhotoMaster
2014-11-08 19:59 - 2014-11-27 07:10 - 00002214 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-08 19:59 - 2014-11-08 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-08 19:58 - 2014-12-06 21:10 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-08 19:58 - 2014-12-06 21:09 - 00000976 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-08 19:58 - 2014-11-13 20:04 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-08 19:58 - 2014-11-08 21:04 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-08 19:58 - 2014-11-08 19:59 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Google
2014-11-08 19:58 - 2014-11-08 19:58 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-08 19:55 - 2014-11-23 18:37 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Lenovo
2014-11-08 17:26 - 2014-11-08 17:26 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-08 08:13 - 2014-12-06 21:22 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2531041996-1163777749-3044732384-1002
2014-11-08 08:13 - 2014-12-06 20:41 - 00003922 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{6C89C681-ECDC-4C1D-B741-0C7D4AD50A9C}
2014-11-08 08:13 - 2014-11-08 08:13 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieUserList
2014-11-08 08:13 - 2014-11-08 08:13 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieSiteList
2014-11-08 08:08 - 2014-12-06 21:11 - 00065975 _____ () C:\Users\Orsag\AppData\Local\BTServer.log
2014-11-08 08:08 - 2014-11-19 09:42 - 00000000 ____D () C:\Users\Orsag\AppData\Local\VirtualStore
2014-11-08 08:08 - 2014-11-08 19:59 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Hightail for Lenovo
2014-11-08 08:08 - 2014-11-08 08:08 - 00001457 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-08 08:08 - 2014-11-08 08:08 - 00001264 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BTServer Toasts App.lnk
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\Documents\My Bluetooth
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Adobe
2014-11-08 08:07 - 2014-12-04 14:23 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Packages
2014-11-08 08:07 - 2014-11-23 18:31 - 00000000 ____D () C:\Users\Orsag
2014-11-08 08:07 - 2014-11-08 08:07 - 00000020 ___SH () C:\Users\Orsag\ntuser.ini
2014-11-08 08:07 - 2014-08-14 06:02 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-08 08:07 - 2014-03-18 11:05 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-08 08:07 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-08 08:07 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-08 08:07 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-08 08:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 21:14 - 2014-08-14 06:56 - 00000000 ____D () C:\windows\System32\Tasks\Lenovo
2014-12-06 21:14 - 2014-08-14 06:15 - 01092538 _____ () C:\windows\system32\perfh005.dat
2014-12-06 21:14 - 2014-08-14 06:15 - 00264212 _____ () C:\windows\system32\perfc005.dat
2014-12-06 21:14 - 2014-03-18 10:53 - 00005430 _____ () C:\windows\system32\PerfStringBackup.INI
2014-12-06 21:10 - 2013-08-22 15:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-12-06 21:09 - 2014-08-14 06:57 - 00002560 _____ () C:\windows\system32\VfService.trf
2014-12-06 21:09 - 2014-08-14 06:14 - 01593216 _____ () C:\Users\Public\CAFADEBUG.log
2014-12-06 21:09 - 2014-08-14 06:09 - 00065536 _____ () C:\windows\system32\spu_storage.bin
2014-12-06 21:09 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-12-06 21:00 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sru
2014-12-06 20:26 - 2014-08-14 07:05 - 00009840 _____ () C:\windows\SysWOW64\VisualDiscovery.ini
2014-12-06 20:26 - 2014-08-14 07:05 - 00004824 _____ () C:\windows\SysWOW64\VisualDiscoveryOff.ini
2014-12-06 20:26 - 2014-08-14 07:05 - 00004824 _____ () C:\windows\system32\VisualDiscoveryOff.ini
2014-12-06 20:26 - 2014-03-18 10:44 - 00060282 _____ () C:\windows\PFRO.log
2014-12-06 10:00 - 2014-08-14 05:33 - 02040100 _____ () C:\windows\WindowsUpdate.log
2014-12-05 12:41 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\AppReadiness
2014-11-30 19:32 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-11-26 15:26 - 2013-08-22 16:20 - 00000000 ____D () C:\windows\CbsTemp
2014-11-23 18:37 - 2014-08-14 06:57 - 00000000 ____D () C:\ProgramData\Lenovo
2014-11-23 18:36 - 2014-08-14 06:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-11-23 18:36 - 2014-08-14 06:56 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-11-23 18:30 - 2013-08-22 15:44 - 00492472 _____ () C:\windows\system32\FNTCACHE.DAT
2014-11-23 10:18 - 2013-08-22 15:46 - 00023375 _____ () C:\windows\setupact.log
2014-11-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\rescache
2014-11-21 12:49 - 2014-03-18 10:38 - 00000000 ____D () C:\Program Files\Windows Journal
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ToastData
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\setup
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\setup
2014-11-21 12:49 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\system32\oobe
2014-11-20 08:56 - 2014-08-14 06:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\SysWOW64\WCN
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\system32\WCN
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\system32\slmgr
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\WinStore
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\sk-SK
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sk-SK
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\migwiz
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 15:58 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\SysWOW64\oobe
2014-11-13 15:58 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\system32\Sysprep
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\SystemResetPlatform
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\MediaViewer
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Help
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\FileManager
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Camera
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-09 23:23 - 2014-08-14 06:58 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-11-08 21:56 - 2014-08-14 07:04 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-08 21:19 - 2014-08-14 06:58 - 00000000 ____D () C:\Program Files\Common Files\McAfee
2014-11-08 21:19 - 2013-08-22 16:36 - 00000000 ___HD () C:\windows\ELAMBKUP
2014-11-08 21:18 - 2014-08-14 06:58 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-08 20:27 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\NDF
2014-11-08 08:08 - 2014-08-14 06:04 - 00123981 ____H () C:\windows\modules.log
2014-11-08 08:08 - 2014-04-03 20:15 - 00000000 ____D () C:\windows\Panther
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-03 07:22
==================== End Of Log ============================
Ran by Orsag (administrator) on DOMINIK on 06-12-2014 21:28:37
Running from C:\Users\Orsag\Downloads
Loaded Profile: Orsag (Available profiles: Orsag)
Platform: Windows 8.1 (X64) OS Language: Angličtina (Spojené státy)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
(Superfish, Inc.) C:\Program Files (x86)\Lenovo\VisualDiscovery\VisualDiscovery.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo) C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
() C:\Program Files\Lenovo PhoneCompanion\adb.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Lenovo\Lenovo Messenger\NotificationsViewHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Orsag\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2808560 2014-06-24] (Synaptics Incorporated)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [216064 2014-01-06] (Realtek Semiconductor Corporation)
HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [6340312 2014-01-21] (Realtek semiconductor)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [PhoneCompanion] => C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592 2014-08-14] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704 2014-08-14] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [10842096 2014-08-14] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\platform\McUICnt.exe [642040 2014-08-05] (McAfee, Inc.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30520936 2014-11-18] (Skype Technologies S.A.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\RunOnce: [Application Restart #3] => C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cli (the data entry has 549 more characters).
ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
ShellIconOverlayIdentifiers-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files (x86)\Hightail\Hightail for Lenovo\YSINSE.dll (Hightail Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2531041996-1163777749-3044732384-1002 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2531041996-1163777749-3044732384-1002 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-08-14]
Chrome:
=======
CHR Profile: C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-08]
CHR Extension: (Dokumenty Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-08]
CHR Extension: (Disk Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-08]
CHR Extension: (YouTube) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-08]
CHR Extension: (Tabulky Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-08]
CHR Extension: (Stopify) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfnbpnclgofipdlfpihgfceggbcabjeo [2014-12-06]
CHR Extension: (Color For Facebook™) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmnfmgelbcgoildddbgofpeofhjgipoi [2014-11-11]
CHR Extension: (Peněženka Google) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-08]
CHR Extension: (Gmail) - C:\Users\Orsag\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-08]
CHR HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-06-25] (Advanced Micro Devices, Inc.) [File not signed]
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [84992 2014-01-22] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-11-21] (LENOVO INCORPORATED.)
R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-08-14] (Lenovo(beijing) Limited)
R2 LUService; C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896 2014-02-18] (Lenovo(beijing) Limited)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2014-09-04] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [332528 2014-03-12] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2014-08-01] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-07-18] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189912 2014-07-18] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-07-30] (McAfee, Inc.)
R2 PhoneCompanionPusher; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240 2014-08-14] (Lenovo)
S3 PhoneCompanionVap; C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe [308720 2014-08-14] (Lenovo)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-25] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [190704 2014-06-24] (Synaptics Incorporated)
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [68880 2014-08-14] ()
R2 VisualDiscovery; C:\Program Files (x86)\Lenovo\VisualDiscovery\VisualDiscovery.exe [1354296 2014-06-21] (Superfish, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36608 2013-12-14] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-12] (Advanced Micro Devices)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [225504 2014-03-28] (AppEx Networks Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-12] (Advanced Micro Devices)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-07-18] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-07-18] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313800 2014-07-18] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-07-18] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526352 2014-07-18] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-07-18] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-07-18] (McAfee, Inc.)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [558296 2014-04-12] (Realtek Semiconductor Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [9105624 2014-01-21] (Realtek Semiconductor Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
R2 VDWFP; C:\windows\system32\Drivers\VDWFP64.sys [39800 2014-05-12] (Superfish, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 21:28 - 2014-12-06 21:28 - 02119168 _____ (Farbar) C:\Users\Orsag\Downloads\FRST64 (1).exe
2014-12-06 21:21 - 2014-12-06 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-12-06 21:11 - 2014-12-06 21:11 - 00007619 _____ () C:\Users\Orsag\Desktop\zápis.txt
2014-12-06 21:09 - 2014-12-06 20:33 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-12-06 20:34 - 2014-12-06 21:10 - 00007616 _____ () C:\zoek-results.log
2014-12-06 20:33 - 2014-12-06 21:10 - 00000000 ____D () C:\zoek_backup
2014-12-06 20:32 - 2014-12-06 20:33 - 01295360 _____ () C:\Users\Orsag\Downloads\zoek.exe
2014-12-06 20:31 - 2014-12-06 20:31 - 00003215 _____ () C:\Users\Orsag\Desktop\AdwCleaner[S0].txt
2014-12-06 20:28 - 2014-12-06 20:28 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\My Bluetooth
2014-12-06 20:22 - 2014-12-06 21:25 - 00000110 _____ () C:\AdwCleanerDebug.txt
2014-12-06 20:21 - 2014-12-06 20:21 - 02153472 _____ () C:\Users\Orsag\Downloads\adwcleaner_4.104.exe
2014-12-06 20:18 - 2014-12-06 20:18 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2014-12-06 20:18 - 2014-12-06 20:18 - 00002507 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Apple Computer
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Apple Computer
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-12-06 20:18 - 2014-12-06 20:18 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-12-06 20:17 - 2014-12-06 20:17 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Apple
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\ProgramData\Apple
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Program Files\Bonjour
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-12-06 20:17 - 2014-12-06 20:17 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-12-06 20:16 - 2014-12-06 20:17 - 35624744 _____ (Apple Inc.) C:\Users\Orsag\Downloads\SafariSetup.exe
2014-12-06 18:21 - 2014-12-06 18:21 - 00029380 _____ () C:\Users\Orsag\Desktop\Trojan2.txt
2014-12-06 18:19 - 2014-12-06 18:20 - 00029380 _____ () C:\Users\Orsag\Downloads\Addition.txt
2014-12-06 18:17 - 2014-12-06 21:28 - 00020187 _____ () C:\Users\Orsag\Downloads\FRST.txt
2014-12-06 18:17 - 2014-12-06 21:28 - 00000000 ____D () C:\FRST
2014-12-06 18:12 - 2014-12-06 18:12 - 02119168 _____ (Farbar) C:\Users\Orsag\Downloads\FRST64.exe
2014-11-30 22:23 - 2014-11-30 22:26 - 367385066 _____ () C:\Users\Orsag\Downloads\Ulice 2710 dil (21-11- 2014).avi
2014-11-28 10:47 - 2014-11-28 10:54 - 417103628 _____ () C:\Users\Orsag\Downloads\Ulice 2709.dil 20.11.2014.avi
2014-11-28 10:39 - 2014-11-28 10:43 - 414198802 _____ () C:\Users\Orsag\Downloads\Ulice 2708.dil 19.11.2014.avi
2014-11-28 09:58 - 2014-11-28 10:05 - 420088314 _____ () C:\Users\Orsag\Downloads\Ulice 2707.dil 18.11.2014.avi
2014-11-28 09:54 - 2014-11-28 09:58 - 374987600 _____ () C:\Users\Orsag\Downloads\Ulice 2706.dil 17.11.2014.avi
2014-11-28 07:27 - 2014-11-28 07:31 - 417827518 _____ () C:\Users\Orsag\Downloads\Ulice 2705.dil 14.11.2014.avi
2014-11-27 19:20 - 2014-11-27 19:24 - 417224138 _____ () C:\Users\Orsag\Downloads\Ulice 2704.dil 13.11.2014.avi
2014-11-27 18:13 - 2014-11-27 18:19 - 410513120 _____ () C:\Users\Orsag\Downloads\Ulice 2703.dil 12.11.2014.avi
2014-11-27 09:49 - 2014-12-06 20:29 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00002549 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\ProgramData\Skype
2014-11-27 09:49 - 2014-11-27 09:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-27 09:46 - 2014-11-27 09:47 - 50726291 _____ () C:\Users\Orsag\Downloads\skype-setup.exe
2014-11-25 19:38 - 2014-11-25 19:51 - 1238040508 _____ () C:\Users\Orsag\Downloads\Pod-zemi----As-Above,-So-Below-2014-titulky-CZ-v-obraze.avi
2014-11-23 18:30 - 2014-11-23 18:31 - 00281376 _____ () C:\windows\Minidump\112314-35453-01.dmp
2014-11-23 18:30 - 2014-11-23 18:30 - 866847321 _____ () C:\windows\MEMORY.DMP
2014-11-23 18:30 - 2014-11-23 18:30 - 00000000 ____D () C:\windows\Minidump
2014-11-21 18:35 - 2014-11-21 18:39 - 00000000 ____D () C:\Users\Orsag\Desktop\Písničky
2014-11-21 18:35 - 2014-11-21 18:35 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-11-20 22:22 - 2014-11-30 22:29 - 00000000 ____D () C:\KMPlayer
2014-11-20 22:22 - 2014-11-20 22:22 - 00000625 _____ () C:\Users\Orsag\Desktop\KMPlayer.lnk
2014-11-20 22:22 - 2014-11-20 22:22 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-11-20 08:52 - 2014-11-20 08:53 - 00000000 ____D () C:\Users\Orsag\Documents\RCT3Demo 1.1
2014-11-20 08:52 - 2014-11-20 08:52 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Atari
2014-11-19 12:21 - 2014-11-19 12:21 - 00000000 ____D () C:\Users\Public\Documents\EA Games
2014-11-19 12:21 - 2014-11-19 12:21 - 00000000 ____D () C:\Users\Orsag\Documents\EA Games
2014-11-19 09:36 - 2014-11-19 09:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2014-11-19 09:24 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-11-19 09:24 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-11-19 09:24 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll
2014-11-19 09:24 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\windows\SysWOW64\pku2u.dll
2014-11-17 16:34 - 2014-11-17 16:34 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieBrowserModeList
2014-11-16 10:22 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Xaml.dll
2014-11-16 10:22 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Xaml.dll
2014-11-16 10:21 - 2014-07-24 16:28 - 00419648 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00412992 ____C (Microsoft Corporation) C:\windows\system32\Drivers\spaceport.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00280384 ____C (Microsoft Corporation) C:\windows\system32\Drivers\pci.sys
2014-11-16 10:21 - 2014-07-24 16:28 - 00143680 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2014-11-16 10:21 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2014-11-16 10:21 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-11-16 10:21 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlows.exe
2014-11-16 10:21 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2014-11-16 10:21 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\windows\system32\SndVol.exe
2014-11-16 10:21 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2014-11-16 10:21 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2014-11-16 10:21 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2014-11-16 10:21 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2014-11-16 10:21 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2014-11-16 10:21 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\windows\system32\mfcore.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\windows\system32\mfreadwrite.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2014-11-16 10:21 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\windows\system32\mftranscode.dll
2014-11-16 10:21 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2014-11-16 10:21 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2014-11-16 10:21 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\windows\SysWOW64\SndVol.exe
2014-11-16 10:21 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfcore.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfplat.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfreadwrite.dll
2014-11-16 10:21 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\windows\SysWOW64\mftranscode.dll
2014-11-16 10:21 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\KBDRUM.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL
2014-11-16 10:21 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL
2014-11-16 10:21 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-11-16 10:21 - 2014-07-24 12:45 - 00076800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\hdaudbus.sys
2014-11-16 10:21 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-11-16 10:21 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2014-11-16 10:21 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\nwifi.sys
2014-11-16 10:21 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\NdisImPlatform.sys
2014-11-16 10:21 - 2014-07-24 12:41 - 00118272 ____C (Microsoft Corporation) C:\windows\system32\Drivers\bthpan.sys
2014-11-16 10:21 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\iasnap.dll
2014-11-16 10:21 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\windows\system32\usbmon.dll
2014-11-16 10:21 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2014-11-16 10:21 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDYAK.DLL
2014-11-16 10:21 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTAT.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRUM.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU1.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDBASH.DLL
2014-11-16 10:21 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDRU.DLL
2014-11-16 10:21 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersGPExt.dll
2014-11-16 10:21 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\windows\system32\powercfg.cpl
2014-11-16 10:21 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\windows\system32\SRH.dll
2014-11-16 10:21 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-11-16 10:21 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\windows\system32\ActionCenter.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\windows\system32\Display.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-11-16 10:21 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2014-11-16 10:21 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\iasnap.dll
2014-11-16 10:21 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\WorkFoldersShell.dll
2014-11-16 10:21 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\windows\system32\comdlg32.dll
2014-11-16 10:21 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\windows\SysWOW64\powercfg.cpl
2014-11-16 10:21 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\windows\system32\PrintDialogs.dll
2014-11-16 10:21 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\windows\system32\WorkfoldersControl.dll
2014-11-16 10:21 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\windows\SysWOW64\SRH.dll
2014-11-16 10:21 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-11-16 10:21 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-11-16 10:21 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ActionCenter.dll
2014-11-16 10:21 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\windows\SysWOW64\Display.dll
2014-11-16 10:21 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\windows\system32\browser.dll
2014-11-16 10:21 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\windows\system32\wlansvcpal.dll
2014-11-16 10:21 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll
2014-11-16 10:21 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2014-11-16 10:21 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\wshbth.dll
2014-11-16 10:21 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\windows\SysWOW64\comdlg32.dll
2014-11-16 10:21 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\windows\SysWOW64\PrintDialogs.dll
2014-11-16 10:21 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\windows\system32\Defrag.exe
2014-11-16 10:21 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\srvsvc.dll
2014-11-16 10:21 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2014-11-16 10:21 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\windows\system32\BluetoothApis.dll
2014-11-16 10:21 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2014-11-16 10:21 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\windows\system32\defragsvc.dll
2014-11-16 10:21 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\mispace.dll
2014-11-16 10:21 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\wlanapi.dll
2014-11-16 10:21 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\windows\system32\Windows.Devices.Bluetooth.dll
2014-11-16 10:21 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2014-11-16 10:21 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshbth.dll
2014-11-16 10:21 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\windows\system32\storagewmi.dll
2014-11-16 10:21 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\windows\system32\wlanmsm.dll
2014-11-16 10:21 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\windows\system32\wlansvc.dll
2014-11-16 10:21 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanapi.dll
2014-11-16 10:21 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-11-16 10:21 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.dll
2014-11-16 10:21 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\windows\SysWOW64\storagewmi.dll
2014-11-16 10:21 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\windows\system32\winspool.drv
2014-11-16 10:21 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\windows\system32\Windows.Media.dll
2014-11-16 10:21 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wlanmsm.dll
2014-11-16 10:21 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2014-11-16 10:21 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\windows\system32\spoolsv.exe
2014-11-16 10:21 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\windows\system32\VAN.dll
2014-11-16 10:21 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
2014-11-16 10:21 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\twinapi.dll
2014-11-16 10:21 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.dll
2014-11-16 10:21 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\SndVolSSO.dll
2014-11-16 10:21 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Media.dll
2014-11-16 10:21 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\windows\SysWOW64\winspool.drv
2014-11-16 10:21 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\stobject.dll
2014-11-16 10:21 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\windows\SysWOW64\VAN.dll
2014-11-16 10:21 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll
2014-11-16 10:21 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2014-11-16 10:21 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\windows\SysWOW64\stobject.dll
2014-11-16 10:21 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\windows\SysWOW64\XpsPrint.dll
2014-11-16 10:21 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\windows\system32\printui.dll
2014-11-16 10:21 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2014-11-16 10:21 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\windows\SysWOW64\printui.dll
2014-11-16 10:21 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2014-11-16 10:21 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\windows\system32\workfolderssvc.dll
2014-11-16 10:21 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\SysWOW64\locale.nls
2014-11-16 10:21 - 2014-07-24 05:11 - 00513544 _____ () C:\windows\system32\locale.nls
2014-11-16 10:21 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\windows\system32\wisp.dll
2014-11-16 10:21 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\wisp.dll
2014-11-16 10:21 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ks.sys
2014-11-16 10:21 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\AppxSip.dll
2014-11-16 10:21 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\windows\system32\GdiPlus.dll
2014-11-16 10:21 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxSip.dll
2014-11-16 10:21 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\windows\SysWOW64\GdiPlus.dll
2014-11-16 10:21 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\windows\system32\AppxPackaging.dll
2014-11-16 10:21 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\windows\SysWOW64\AppxPackaging.dll
2014-11-16 10:21 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-11-16 10:21 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mispace.dll
2014-11-16 10:21 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\dab.dll
2014-11-16 10:21 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-11-16 10:21 - 2014-06-19 03:13 - 00310080 ____C (Microsoft Corporation) C:\windows\system32\Drivers\volsnap.sys
2014-11-16 10:21 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-11-16 10:21 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-11-16 10:21 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\windows\system32\rsaenh.dll
2014-11-16 10:21 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\windows\SysWOW64\rsaenh.dll
2014-11-16 10:21 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys
2014-11-16 10:21 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\windows\system32\aclui.dll
2014-11-16 10:21 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\windows\SysWOW64\aclui.dll
2014-11-16 10:21 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\windows\system32\wsecedit.dll
2014-11-16 10:21 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wsecedit.dll
2014-11-16 10:21 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\windows\system32\clusapi.dll
2014-11-16 10:21 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\windows\SysWOW64\clusapi.dll
2014-11-16 10:21 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\AppxSysprep.dll
2014-11-16 10:21 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2014-11-16 10:21 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2014-11-16 10:21 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\windows\system32\netcfgx.dll
2014-11-16 10:21 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\windows\SysWOW64\netcfgx.dll
2014-11-16 10:21 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2014-11-16 10:21 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2014-11-16 10:21 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2014-11-16 10:21 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2014-11-16 10:20 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDTT102.DLL
2014-11-16 10:20 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDTT102.DLL
2014-11-16 10:20 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\windows\system32\wlansec.dll
2014-11-16 10:20 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\BluetoothApis.dll
2014-11-16 10:20 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\windows\system32\SystemSettingsAdminFlowUI.dll
2014-11-13 20:04 - 2014-12-06 21:09 - 00000976 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA1cfff749608b749.job
2014-11-13 20:04 - 2014-11-13 20:04 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA1cfff749608b749
2014-11-13 16:34 - 2014-12-03 00:52 - 00000000 ____D () C:\Program Files (x86)\QuadCoreM2
2014-11-13 16:34 - 2014-11-13 16:34 - 00000974 _____ () C:\Users\Public\Desktop\QuadcoreM2.lnk
2014-11-13 16:32 - 2014-11-13 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuadcoreM2
2014-11-13 16:04 - 2014-11-20 21:51 - 00714208 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-11-13 16:04 - 2014-11-20 21:51 - 00106976 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-13 15:57 - 2014-11-13 16:13 - 00000000 ___RD () C:\windows\BrowserChoice
2014-11-13 01:18 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\windows\system32\ncryptsslp.dll
2014-11-13 01:18 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncryptsslp.dll
2014-11-13 01:18 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-11-13 01:18 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-11-13 01:18 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-11-13 01:17 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2014-11-13 01:17 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2014-11-13 01:17 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2014-11-13 01:17 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2014-11-13 01:17 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\windows\system32\msihnd.dll
2014-11-13 01:17 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msihnd.dll
2014-11-13 01:17 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2014-11-13 01:17 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2014-11-13 01:17 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\windows\system32\user32.dll
2014-11-13 01:17 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-11-13 01:17 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdNisDrv.sys
2014-11-13 01:17 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-11-13 01:17 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll
2014-11-13 01:17 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\winshfhc.dll
2014-11-13 01:17 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\winshfhc.dll
2014-11-13 01:17 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-11-13 01:17 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-11-13 01:16 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-11-13 01:16 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-11-13 01:16 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2014-11-13 01:16 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2014-11-13 01:16 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2014-11-13 01:16 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioSes.dll
2014-11-13 01:16 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\windows\SysWOW64\AUDIOKSE.dll
2014-11-13 01:16 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\windows\SysWOW64\AudioEng.dll
2014-11-13 01:16 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll
2014-11-13 01:16 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2014-11-13 01:14 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-11-13 01:14 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-11-13 01:14 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-11-13 01:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2014-11-13 01:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2014-11-13 01:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2014-11-13 01:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2014-11-13 01:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2014-11-13 01:13 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-11-13 01:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-11-13 01:13 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-11-13 01:13 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2014-11-13 01:13 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-11-13 01:13 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-11-13 01:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-11-13 01:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2014-11-13 01:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-11-13 01:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\windows\system32\hlink.dll
2014-11-13 01:13 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-11-13 01:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-11-13 01:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-11-13 01:13 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-11-13 01:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2014-11-13 01:13 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-11-13 01:13 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-13 01:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-11-13 01:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2014-11-13 01:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2014-11-13 01:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-11-13 01:13 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-11-13 01:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2014-11-13 01:13 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2014-11-13 01:13 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-11-13 01:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2014-11-13 01:13 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2014-11-13 01:13 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2014-11-13 01:13 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-11-13 01:13 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-11-13 01:13 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-11-13 01:13 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-11-13 01:13 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-11-13 01:13 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll
2014-11-13 01:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2014-11-13 01:13 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-11-13 01:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2014-11-13 01:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2014-11-13 01:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2014-11-13 01:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2014-11-13 01:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2014-11-13 01:13 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-11-13 01:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2014-11-13 01:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-11-13 01:13 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2014-11-13 01:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-11-13 01:13 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-11-13 01:13 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-11-13 01:13 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-11-13 01:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-11-13 01:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-11-13 01:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2014-11-13 01:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-11-13 01:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\windows\SysWOW64\hlink.dll
2014-11-13 01:13 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-11-13 01:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-11-13 01:13 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-11-13 01:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2014-11-13 01:13 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-11-13 01:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-11-13 01:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2014-11-13 01:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-11-13 01:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2014-11-13 01:13 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-11-13 01:13 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2014-11-13 01:13 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-11-13 01:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2014-11-13 01:13 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-11-13 01:13 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2014-11-13 01:13 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2014-11-13 01:13 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-11-13 01:13 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-11-13 01:13 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-11-13 01:13 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll
2014-11-13 01:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2014-11-13 01:13 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-11-13 01:13 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-11-13 01:13 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-11-13 01:12 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\packager.dll
2014-11-13 01:12 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\windows\SysWOW64\packager.dll
2014-11-13 01:12 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-11-13 01:12 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2014-11-13 01:12 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2014-11-13 01:12 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2014-11-13 01:12 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll
2014-11-13 01:12 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-11-13 01:12 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-11-13 01:12 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-11-13 01:12 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-11-13 01:12 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-11-13 01:12 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-11-13 01:12 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-11-13 01:12 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-11-13 01:12 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2014-11-13 01:12 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-11-13 01:12 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-11-13 01:12 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2014-11-13 01:12 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2014-11-13 01:12 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-11-13 01:12 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2014-11-13 01:12 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-11-13 01:12 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2014-11-13 01:12 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2014-11-13 01:12 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-11-13 01:12 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\rfxvmt.dll
2014-11-13 01:12 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2014-11-13 01:12 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2014-11-13 01:12 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2014-11-13 01:12 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2014-11-13 01:12 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-11-13 01:12 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-11-13 01:12 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-11-13 01:12 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2014-11-13 01:12 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-11-13 01:12 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-11-13 01:12 - 2014-09-07 23:08 - 00389176 _____ () C:\windows\system32\ApnDatabase.xml
2014-11-13 01:12 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2014-11-13 01:12 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2014-11-13 01:12 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\windows\system32\mfmp4srcsnk.dll
2014-11-13 01:12 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mfmp4srcsnk.dll
2014-11-13 01:12 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2014-11-13 01:12 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2014-11-13 01:12 - 2014-08-31 01:17 - 00148800 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2014-11-13 01:12 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-11-13 01:12 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-11-13 01:12 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\windows\system32\FXSCOMEX.dll
2014-11-13 01:12 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\FXSAPI.dll
2014-11-13 01:12 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\windows\system32\MFMediaEngine.dll
2014-11-13 01:12 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\windows\SysWOW64\FXSAPI.dll
2014-11-13 01:12 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\windows\SysWOW64\MFMediaEngine.dll
2014-11-13 01:12 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-11-13 01:12 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll
2014-11-13 01:12 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll
2014-11-13 01:12 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2014-11-13 01:12 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2014-11-13 01:12 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\windows\system32\SettingsHandlers.dll
2014-11-13 01:12 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\windows\system32\untfs.dll
2014-11-13 01:12 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\windows\SysWOW64\untfs.dll
2014-11-13 01:12 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\windows\system32\compstui.dll
2014-11-13 01:12 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\windows\system32\prnntfy.dll
2014-11-13 01:12 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\windows\SysWOW64\prnntfy.dll
2014-11-13 01:12 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2014-11-13 01:12 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2014-11-13 01:12 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2014-11-13 01:12 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2014-11-12 20:05 - 2014-11-12 20:05 - 00000000 ____D () C:\Users\Orsag\Documents\Vlastní šablony Office
2014-11-12 17:46 - 2014-11-12 17:46 - 00000000 ____D () C:\ProgramData\Caphyon
2014-11-12 17:39 - 2014-11-12 17:39 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Quadcore Games
2014-11-12 16:34 - 2014-12-06 21:21 - 00004970 _____ () C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for DOMINIK-Orsag Dominik
2014-11-12 16:34 - 2014-11-12 16:34 - 00003094 _____ () C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2531041996-1163777749-3044732384-1002
2014-11-12 16:34 - 2014-11-12 16:34 - 00000000 __RHD () C:\MSOCache
2014-11-12 16:33 - 2014-11-12 16:33 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-11-12 16:29 - 2014-11-12 16:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-11-12 16:28 - 2014-11-21 08:44 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-11-10 12:18 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll
2014-11-10 12:14 - 2014-11-13 02:32 - 00000000 ____D () C:\windows\system32\MRT
2014-11-10 12:14 - 2014-11-13 02:28 - 103374192 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-11-10 01:02 - 2014-11-10 01:02 - 00000000 ___RD () C:\Users\Orsag\Desktop\Lenovo
2014-11-09 22:43 - 2014-11-11 20:39 - 00000000 ____D () C:\Users\Orsag\Desktop\HOCZ
2014-11-09 12:35 - 2014-11-21 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum
2014-11-09 12:04 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\winbici.dll
2014-11-09 12:04 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\windows\system32\MrmCoreR.dll
2014-11-09 12:04 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\MrmCoreR.dll
2014-11-09 08:53 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2014-11-09 08:53 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\windows\system32\WSDMon.dll
2014-11-09 08:53 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\tcpmon.dll
2014-11-09 08:53 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2014-11-09 08:53 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2014-11-09 08:46 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll
2014-11-09 08:46 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2014-11-09 08:46 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxgi.dll
2014-11-09 08:46 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2014-11-09 08:46 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-11-09 08:45 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2014-11-09 08:45 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2014-11-09 08:44 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\windows\system32\WpcMon.exe
2014-11-09 08:44 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\windows\system32\Wpc.dll
2014-11-09 08:44 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\windows\system32\WpcWebSync.dll
2014-11-09 08:44 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wpc.dll
2014-11-09 08:44 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wpcfltr.sys
2014-11-09 08:42 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\SysWOW64\TsWpfWrp.exe
2014-11-09 08:42 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe
2014-11-09 08:40 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\windows\explorer.exe
2014-11-09 08:40 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
2014-11-09 08:40 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-11-09 08:40 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-11-09 08:40 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\windows\system32\uDWM.dll
2014-11-09 08:40 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-09 08:40 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveShell.dll
2014-11-09 08:40 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-09 08:40 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\windows\SysWOW64\SkyDriveShell.dll
2014-11-09 08:40 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-11-09 08:40 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-11-09 08:40 - 2014-07-24 16:28 - 00468288 ____C (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2014-11-09 08:39 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\windows\system32\propsys.dll
2014-11-09 08:39 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2014-11-09 08:39 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-11-09 08:39 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\windows\SysWOW64\propsys.dll
2014-11-09 08:39 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2014-11-09 08:39 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-11-09 08:39 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\windows\system32\Wldap32.dll
2014-11-09 08:39 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll
2014-11-09 08:39 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\httpprxm.dll
2014-11-09 08:39 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\ProximityService.dll
2014-11-09 08:39 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\windows\system32\bisrv.dll
2014-11-09 08:39 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\windows\SysWOW64\Wldap32.dll
2014-11-09 08:39 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\windows\system32\adhsvc.dll
2014-11-09 08:39 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\windows\system32\iphlpsvc.dll
2014-11-09 08:39 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\windows\system32\pcsvDevice.dll
2014-11-09 08:39 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\windows\system32\SearchFolder.dll
2014-11-09 08:39 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\windows\system32\SkyDriveTelemetry.dll
2014-11-09 08:39 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\windows\system32\SyncEngine.dll
2014-11-09 08:39 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\windows\system32\Windows.UI.Search.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.UI.Search.dll
2014-11-09 08:39 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchFolder.dll
2014-11-09 08:39 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\SkyDrive.exe
2014-11-09 08:39 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-11-09 08:39 - 2014-07-24 12:42 - 01200640 ____C (Microsoft Corporation) C:\windows\system32\Drivers\bthport.sys
2014-11-09 08:39 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\bridge.sys
2014-11-09 08:39 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2014-11-09 08:39 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2014-11-09 08:38 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll
2014-11-09 08:38 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\windows\SysWOW64\rastls.dll
2014-11-09 08:38 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-11-09 08:38 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\windows\system32\drvcfg.exe
2014-11-09 08:38 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\drvinst.exe
2014-11-09 08:38 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\windows\SysWOW64\drvinst.exe
2014-11-09 08:38 - 2014-05-13 08:01 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\BulkOperationHost.exe
2014-11-09 08:38 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\windows\system32\reseteng.dll
2014-11-09 08:38 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\windows\system32\ncobjapi.dll
2014-11-09 08:38 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\windows\system32\framedynos.dll
2014-11-09 08:38 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\framedyn.dll
2014-11-09 08:38 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncobjapi.dll
2014-11-09 08:38 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedynos.dll
2014-11-09 08:38 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\windows\SysWOW64\framedyn.dll
2014-11-09 08:38 - 2014-05-03 00:26 - 00050745 _____ () C:\windows\system32\srms.dat
2014-11-09 08:38 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwififlt.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\agilevpn.sys
2014-11-09 08:38 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\vwifimp.sys
2014-11-09 08:38 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\Robocopy.exe
2014-11-09 08:38 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\windows\SysWOW64\Robocopy.exe
2014-11-09 08:38 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2014-11-09 08:38 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2014-11-09 08:38 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc6.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\windows\system32\dhcpcore6.dll
2014-11-09 08:38 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\dhcpcsvc.dll
2014-11-09 08:38 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2014-11-09 08:38 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2014-11-09 08:38 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcore6.dll
2014-11-09 08:38 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc6.dll
2014-11-09 08:38 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\windows\SysWOW64\dhcpcsvc.dll
2014-11-09 08:38 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\windows\system32\vpnike.dll
2014-11-09 08:38 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\windows\system32\fveapi.dll
2014-11-09 08:38 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\bdesvc.dll
2014-11-09 08:38 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\windows\system32\d3d9.dll
2014-11-09 08:38 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d9.dll
2014-11-09 08:38 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d8thk.dll
2014-11-09 08:38 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-11-09 08:37 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\windows\system32\MDMAgent.exe
2014-11-09 08:37 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-11-09 08:37 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-11-09 08:37 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2014-11-09 08:37 - 2014-05-31 11:07 - 00440664 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2014-11-09 08:37 - 2014-05-31 11:07 - 00089944 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2014-11-09 08:37 - 2014-05-31 11:07 - 00027480 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2014-11-09 08:37 - 2014-05-31 07:30 - 00037376 ____C (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2014-11-09 08:37 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFPf.sys
2014-11-09 08:37 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WUDFRd.sys
2014-11-09 08:37 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\WUDFHost.exe
2014-11-09 08:37 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\windows\system32\WUDFPlatform.dll
2014-11-09 08:37 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\WUDFSvc.dll
2014-11-09 08:37 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\windows\system32\DaOtpCredentialProvider.dll
2014-11-09 08:37 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\windows\SysWOW64\DaOtpCredentialProvider.dll
2014-11-09 08:37 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\windows\system32\wpccpl.dll
2014-11-09 08:36 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2014-11-09 08:36 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2014-11-09 08:36 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\windows\system32\twinapi.appcore.dll
2014-11-09 08:36 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\windows\system32\twinui.appcore.dll
2014-11-09 08:36 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.appcore.dll
2014-11-09 08:17 - 2014-11-09 08:17 - 00001960 _____ () C:\Users\Public\Desktop\Metin2.lnk
2014-11-09 08:17 - 2014-11-09 08:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metin2
2014-11-09 08:09 - 2014-11-09 08:09 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Macromedia
2014-11-09 08:06 - 2014-11-09 08:18 - 00000000 ____D () C:\Users\Orsag\Desktop\Metin2
2014-11-09 08:05 - 2014-11-09 08:05 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Gameforge4d
2014-11-09 08:05 - 2014-11-09 08:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-11-09 08:04 - 2014-11-09 08:11 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2014-11-08 22:05 - 2014-11-08 22:05 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-11-08 22:01 - 2014-11-08 22:01 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\WebApp
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\Documents\Lenovo
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\Documents\CyberLink
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Lenovo
2014-11-08 21:56 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\CyberLink
2014-11-08 21:20 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\windows\system32\Drivers\HipShieldK.sys
2014-11-08 21:09 - 2014-12-06 21:11 - 00000000 ___DO () C:\Users\Orsag\OneDrive
2014-11-08 21:04 - 2014-12-06 21:10 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore1cffb8f294bb958.job
2014-11-08 21:04 - 2014-11-13 20:04 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore1cffb8f294bb958
2014-11-08 20:30 - 2014-11-08 20:30 - 00002365 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo Web Start.lnk
2014-11-08 20:05 - 2014-11-08 21:56 - 00000000 ____D () C:\Users\Orsag\AppData\Local\CyberLink
2014-11-08 20:05 - 2014-11-08 20:05 - 00000000 ____D () C:\ProgramData\PhotoMaster
2014-11-08 19:59 - 2014-11-27 07:10 - 00002214 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-08 19:59 - 2014-11-08 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-08 19:58 - 2014-12-06 21:10 - 00000972 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-08 19:58 - 2014-12-06 21:09 - 00000976 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-08 19:58 - 2014-11-13 20:04 - 00003948 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-08 19:58 - 2014-11-08 21:04 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-08 19:58 - 2014-11-08 19:59 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Google
2014-11-08 19:58 - 2014-11-08 19:58 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-08 19:55 - 2014-11-23 18:37 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Lenovo
2014-11-08 17:26 - 2014-11-08 17:26 - 00000000 ____H () C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-08 08:13 - 2014-12-06 21:22 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2531041996-1163777749-3044732384-1002
2014-11-08 08:13 - 2014-12-06 20:41 - 00003922 _____ () C:\windows\System32\Tasks\User_Feed_Synchronization-{6C89C681-ECDC-4C1D-B741-0C7D4AD50A9C}
2014-11-08 08:13 - 2014-11-08 08:13 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieUserList
2014-11-08 08:13 - 2014-11-08 08:13 - 00000000 __SHD () C:\Users\Orsag\AppData\Local\EmieSiteList
2014-11-08 08:08 - 2014-12-06 21:11 - 00065975 _____ () C:\Users\Orsag\AppData\Local\BTServer.log
2014-11-08 08:08 - 2014-11-19 09:42 - 00000000 ____D () C:\Users\Orsag\AppData\Local\VirtualStore
2014-11-08 08:08 - 2014-11-08 19:59 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Hightail for Lenovo
2014-11-08 08:08 - 2014-11-08 08:08 - 00001457 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-08 08:08 - 2014-11-08 08:08 - 00001264 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BTServer Toasts App.lnk
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\Documents\My Bluetooth
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-11-08 08:08 - 2014-11-08 08:08 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Adobe
2014-11-08 08:07 - 2014-12-04 14:23 - 00000000 ____D () C:\Users\Orsag\AppData\Local\Packages
2014-11-08 08:07 - 2014-11-23 18:31 - 00000000 ____D () C:\Users\Orsag
2014-11-08 08:07 - 2014-11-08 08:07 - 00000020 ___SH () C:\Users\Orsag\ntuser.ini
2014-11-08 08:07 - 2014-08-14 06:02 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-08 08:07 - 2014-03-18 11:05 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-08 08:07 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-08 08:07 - 2014-03-18 10:55 - 00000369 _____ () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-08 08:07 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-08 08:07 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Orsag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 21:14 - 2014-08-14 06:56 - 00000000 ____D () C:\windows\System32\Tasks\Lenovo
2014-12-06 21:14 - 2014-08-14 06:15 - 01092538 _____ () C:\windows\system32\perfh005.dat
2014-12-06 21:14 - 2014-08-14 06:15 - 00264212 _____ () C:\windows\system32\perfc005.dat
2014-12-06 21:14 - 2014-03-18 10:53 - 00005430 _____ () C:\windows\system32\PerfStringBackup.INI
2014-12-06 21:10 - 2013-08-22 15:45 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-12-06 21:09 - 2014-08-14 06:57 - 00002560 _____ () C:\windows\system32\VfService.trf
2014-12-06 21:09 - 2014-08-14 06:14 - 01593216 _____ () C:\Users\Public\CAFADEBUG.log
2014-12-06 21:09 - 2014-08-14 06:09 - 00065536 _____ () C:\windows\system32\spu_storage.bin
2014-12-06 21:09 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-12-06 21:00 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sru
2014-12-06 20:26 - 2014-08-14 07:05 - 00009840 _____ () C:\windows\SysWOW64\VisualDiscovery.ini
2014-12-06 20:26 - 2014-08-14 07:05 - 00004824 _____ () C:\windows\SysWOW64\VisualDiscoveryOff.ini
2014-12-06 20:26 - 2014-08-14 07:05 - 00004824 _____ () C:\windows\system32\VisualDiscoveryOff.ini
2014-12-06 20:26 - 2014-03-18 10:44 - 00060282 _____ () C:\windows\PFRO.log
2014-12-06 10:00 - 2014-08-14 05:33 - 02040100 _____ () C:\windows\WindowsUpdate.log
2014-12-05 12:41 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\AppReadiness
2014-11-30 19:32 - 2013-08-22 14:25 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-11-26 15:26 - 2013-08-22 16:20 - 00000000 ____D () C:\windows\CbsTemp
2014-11-23 18:37 - 2014-08-14 06:57 - 00000000 ____D () C:\ProgramData\Lenovo
2014-11-23 18:36 - 2014-08-14 06:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-11-23 18:36 - 2014-08-14 06:56 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-11-23 18:30 - 2013-08-22 15:44 - 00492472 _____ () C:\windows\system32\FNTCACHE.DAT
2014-11-23 10:18 - 2013-08-22 15:46 - 00023375 _____ () C:\windows\setupact.log
2014-11-21 13:08 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\rescache
2014-11-21 12:49 - 2014-03-18 10:38 - 00000000 ____D () C:\Program Files\Windows Journal
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ToastData
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\windows\ImmersiveControlPanel
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\setup
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\InputMethod
2014-11-21 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\setup
2014-11-21 12:49 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\system32\oobe
2014-11-20 08:56 - 2014-08-14 06:18 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\SysWOW64\WCN
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\SysWOW64\slmgr
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\system32\WCN
2014-11-13 15:58 - 2014-03-18 10:25 - 00000000 ____D () C:\windows\system32\slmgr
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\WinStore
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\SysWOW64\sk-SK
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\sk-SK
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\migwiz
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-11-13 15:58 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-13 15:58 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\SysWOW64\oobe
2014-11-13 15:58 - 2013-08-22 14:36 - 00000000 ____D () C:\windows\system32\Sysprep
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\SystemResetPlatform
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\MediaViewer
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Help
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\FileManager
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\Camera
2014-11-13 15:57 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-09 23:23 - 2014-08-14 06:58 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-11-08 21:56 - 2014-08-14 07:04 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-08 21:19 - 2014-08-14 06:58 - 00000000 ____D () C:\Program Files\Common Files\McAfee
2014-11-08 21:19 - 2013-08-22 16:36 - 00000000 ___HD () C:\windows\ELAMBKUP
2014-11-08 21:18 - 2014-08-14 06:58 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-08 20:27 - 2013-08-22 16:36 - 00000000 ____D () C:\windows\system32\NDF
2014-11-08 08:08 - 2014-08-14 06:04 - 00123981 ____H () C:\windows\modules.log
2014-11-08 08:08 - 2014-04-03 20:15 - 00000000 ____D () C:\windows\Panther
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-03 07:22
==================== End Of Log ============================
Re: Facebook profilový vir
Tvorba fixlistu pro FRST
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start CloseProcesses: HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.) HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30520936 2014-11-18] (Skype Technologies S.A.) HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\RunOnce: [Application Restart #3] => C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cli (the data entry has 549 more characters). HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin. BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) CHR HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) 2014-12-06 21:09 - 2014-12-06 20:33 - 00024064 _____ () C:\windows\zoek-delete.exe 2014-12-06 20:34 - 2014-12-06 21:10 - 00007616 _____ () C:\zoek-results.log 2014-12-06 20:33 - 2014-12-06 21:10 - 00000000 ____D () C:\zoek_backup 2014-12-06 20:32 - 2014-12-06 20:33 - 01295360 _____ () C:\Users\Orsag\Downloads\zoek.exe 2014-12-06 20:31 - 2014-12-06 20:31 - 00003215 _____ () C:\Users\Orsag\Desktop\AdwCleaner[S0].txt 2014-12-06 20:22 - 2014-12-06 21:25 - 00000110 _____ () C:\AdwCleanerDebug.txt 2014-12-06 20:21 - 2014-12-06 20:21 - 02153472 _____ () C:\Users\Orsag\Downloads\adwcleaner_4.104.exe 2014-12-06 18:21 - 2014-12-06 18:21 - 00029380 _____ () C:\Users\Orsag\Desktop\Trojan2.txt 2014-12-06 18:19 - 2014-12-06 18:20 - 00029380 _____ () C:\Users\Orsag\Downloads\Addition.txt 2014-12-06 18:17 - 2014-12-06 21:28 - 00020187 _____ () C:\Users\Orsag\Downloads\FRST.txt C:\Users\Orsag\AppData\Local\Pokki Hosts: EmptyTemp: Reboot: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Facebook profilový vir
fixlist.txt jsem přesunul k FRST. Pak FRST sputím a kliknu na fix, jenže ono o nic nezačně dělat, prootže fixlist je prý někde mimo, proprosil bych o lepší vysvělení, nebo jsem to pochopil špatně já.
Re: Facebook profilový vir
FRST mate umisteny zde Running from C:\Users\Orsag\Downloads takze i do te slozky (pravdepodobne Stazene soubory) ulozte fixlist... Nebo si FRST i fixlist.txt dejte na plochu..."Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Facebook profilový vir
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-12-2014 02
Ran by Orsag at 2014-12-06 21:53:13 Run:1
Running from C:\Users\Orsag\Downloads
Loaded Profile: Orsag (Available profiles: Orsag)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30520936 2014-11-18] (Skype Technologies S.A.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\RunOnce: [Application Restart #3] => C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cli (the data entry has 549 more characters).
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
CHR HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
2014-12-06 21:09 - 2014-12-06 20:33 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-12-06 20:34 - 2014-12-06 21:10 - 00007616 _____ () C:\zoek-results.log
2014-12-06 20:33 - 2014-12-06 21:10 - 00000000 ____D () C:\zoek_backup
2014-12-06 20:32 - 2014-12-06 20:33 - 01295360 _____ () C:\Users\Orsag\Downloads\zoek.exe
2014-12-06 20:31 - 2014-12-06 20:31 - 00003215 _____ () C:\Users\Orsag\Desktop\AdwCleaner[S0].txt
2014-12-06 20:22 - 2014-12-06 21:25 - 00000110 _____ () C:\AdwCleanerDebug.txt
2014-12-06 20:21 - 2014-12-06 20:21 - 02153472 _____ () C:\Users\Orsag\Downloads\adwcleaner_4.104.exe
2014-12-06 18:21 - 2014-12-06 18:21 - 00029380 _____ () C:\Users\Orsag\Desktop\Trojan2.txt
2014-12-06 18:19 - 2014-12-06 18:20 - 00029380 _____ () C:\Users\Orsag\Downloads\Addition.txt
2014-12-06 18:17 - 2014-12-06 21:28 - 00020187 _____ () C:\Users\Orsag\Downloads\FRST.txt
C:\Users\Orsag\AppData\Local\Pokki
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GShortCut => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFolderOptions => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Application Restart #3 => value deleted successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL => value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\PROTOCOLS\Handler\skypec2c" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
"HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c" => Key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
"HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\SOFTWARE\Google\Chrome\Extensions\fkkcgfbgohboipdhliafmacjnhjbhmim" => Key deleted successfully.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service deleted successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Orsag\Downloads\zoek.exe => Moved successfully.
C:\Users\Orsag\Desktop\AdwCleaner[S0].txt => Moved successfully.
C:\AdwCleanerDebug.txt => Moved successfully.
C:\Users\Orsag\Downloads\adwcleaner_4.104.exe => Moved successfully.
C:\Users\Orsag\Desktop\Trojan2.txt => Moved successfully.
C:\Users\Orsag\Downloads\Addition.txt => Moved successfully.
C:\Users\Orsag\Downloads\FRST.txt => Moved successfully.
"C:\Users\Orsag\AppData\Local\Pokki" => File/Directory not found.
Hosts was reset successfully.
EmptyTemp: => Removed 125.2 MB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Ran by Orsag at 2014-12-06 21:53:13 Run:1
Running from C:\Users\Orsag\Downloads
Loaded Profile: Orsag (Available profiles: Orsag)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30520936 2014-11-18] (Skype Technologies S.A.)
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\RunOnce: [Application Restart #3] => C:\Users\Orsag\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cli (the data entry has 549 more characters).
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {44DFFF9F-6389-4BD9-8179-F640AB4EF7DB} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
CHR HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - No Path
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
2014-12-06 21:09 - 2014-12-06 20:33 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-12-06 20:34 - 2014-12-06 21:10 - 00007616 _____ () C:\zoek-results.log
2014-12-06 20:33 - 2014-12-06 21:10 - 00000000 ____D () C:\zoek_backup
2014-12-06 20:32 - 2014-12-06 20:33 - 01295360 _____ () C:\Users\Orsag\Downloads\zoek.exe
2014-12-06 20:31 - 2014-12-06 20:31 - 00003215 _____ () C:\Users\Orsag\Desktop\AdwCleaner[S0].txt
2014-12-06 20:22 - 2014-12-06 21:25 - 00000110 _____ () C:\AdwCleanerDebug.txt
2014-12-06 20:21 - 2014-12-06 20:21 - 02153472 _____ () C:\Users\Orsag\Downloads\adwcleaner_4.104.exe
2014-12-06 18:21 - 2014-12-06 18:21 - 00029380 _____ () C:\Users\Orsag\Desktop\Trojan2.txt
2014-12-06 18:19 - 2014-12-06 18:20 - 00029380 _____ () C:\Users\Orsag\Downloads\Addition.txt
2014-12-06 18:17 - 2014-12-06 21:28 - 00020187 _____ () C:\Users\Orsag\Downloads\FRST.txt
C:\Users\Orsag\AppData\Local\Pokki
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GShortCut => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFolderOptions => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Application Restart #3 => value deleted successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\Software\Microsoft\Internet Explorer\Main\\Default_Secondary_Page_URL => value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\PROTOCOLS\Handler\skypec2c" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
"HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c" => Key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
"HKU\S-1-5-21-2531041996-1163777749-3044732384-1002\SOFTWARE\Google\Chrome\Extensions\fkkcgfbgohboipdhliafmacjnhjbhmim" => Key deleted successfully.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service deleted successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Orsag\Downloads\zoek.exe => Moved successfully.
C:\Users\Orsag\Desktop\AdwCleaner[S0].txt => Moved successfully.
C:\AdwCleanerDebug.txt => Moved successfully.
C:\Users\Orsag\Downloads\adwcleaner_4.104.exe => Moved successfully.
C:\Users\Orsag\Desktop\Trojan2.txt => Moved successfully.
C:\Users\Orsag\Downloads\Addition.txt => Moved successfully.
C:\Users\Orsag\Downloads\FRST.txt => Moved successfully.
"C:\Users\Orsag\AppData\Local\Pokki" => File/Directory not found.
Hosts was reset successfully.
EmptyTemp: => Removed 125.2 MB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Re: Facebook profilový vir
Jak se chova FB, stale si sam od sebe povida???
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Facebook profilový vir
Zatím nevím, uvidíme .. ještě před cca před 10 minutami si samo povídalo, kdyby něco, tak se určitě ozvu, zatím moc děkuju
Re: Facebook profilový vir
DelFix https://toolslib.net/downloads/finish/2/
- Stahnete a spustte
- Ponechte zatrzitkou pouze u volby Remote disinfection tools
- Kliknete na Run
Zmente heslo na FB Pustte tam MBAM dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Facebook profilový vir
No, tak jsem se na FB příhlásil a co nevidím, opět si FB sám povídá ..ještě teď provádím ten scan co jste doporučili...
Přispějete na provoz fóra?