Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

čistka PC

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

čistka PC

#1 Příspěvek od MiranDAA »

Zdravim :)

Logfile of random's system information tool 1.10 (written by random/random)
Run by Matej at 2015-01-16 16:01:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 338 GB (78%) free of 432 GB
Total RAM: 3959 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:01:34, on 16.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Matej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6936 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss a834f368-4030-406a-9d1e-15b5cb13f478 1
\??\C:\Windows\system32\conhost.exe "-1556981930-732785030733422457-267411940-22612052524470238-2137980606-1642546793
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-540025682-1503256579-21315603191301984013582066885212317118916351533031688060694
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-51d08daf-e63f-4450-ae2c-00d3d6e1d220 -SystemEventPortName:HostProcess-57a1c939-e040-4cbf-bfa9-836b4b8fad49 -IoCancelEventPortName:HostProcess-65f4dc20-f7a5-4fac-8b9f-872c81097ad2 -NonStateChangingEventPortName:HostProcess-bf6b451e-ce1d-48a4-9b7f-abc58594bb7f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2c3b5b22-cdfa-44e5-b091-6b00b2bb5500 -DeviceGroupId:WpdFsGroup
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC

"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\System32\svchost.exe -k swprv
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Matej\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Matej\AppData\Roaming\Mozilla\Firefox\Profiles\5hklrdug.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-23 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-23 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-23 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-12-13 2531472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
C:\Windows\system32\nvspcap64.dll [2014-12-13 2824504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07 507776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\Matej\AppData\Roaming\uTorrent\uTorrent.exe [2015-01-11 3054592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Matej^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-10 5227112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.xtor"=DxtoryCodec.dll
"VIDC.LAGS"=lagarith.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-16 16:01:31 ----D---- C:\rsit
2015-01-16 15:57:37 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-01-16 15:57:34 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2015-01-16 15:57:34 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-01-16 15:17:50 ----D---- C:\Program Files (x86)\DirectX
2015-01-16 15:10:54 ----HD---- C:\Windows\msdownld.tmp
2015-01-16 14:54:39 ----A---- C:\Windows\SYSWOW64\granny2.dll
2015-01-14 17:34:49 ----D---- C:\ProgramData\Mozilla
2015-01-14 15:39:07 ----A---- C:\Windows\Reimage.ini
2015-01-14 15:31:37 ----D---- C:\Users\Matej\AppData\Roaming\Solvusoft
2015-01-14 15:23:44 ----D---- C:\ProgramData\Logs
2015-01-14 15:23:43 ----D---- C:\ProgramData\TEMP
2015-01-14 15:23:41 ----A---- C:\Windows\system32\roboot64.exe
2015-01-14 15:13:59 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2015-01-14 15:13:52 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2015-01-12 18:03:09 ----D---- C:\Program Files (x86)\Microsoft Games
2015-01-11 19:19:58 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-01-11 11:36:00 ----A---- C:\Windows\system32\lagarith.dll
2015-01-11 11:35:59 ----A---- C:\Windows\unins000.exe
2015-01-11 11:35:59 ----A---- C:\Windows\unins000.dat
2015-01-11 11:16:06 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-01-11 11:16:06 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-01-06 19:17:01 ----D---- C:\Windows\Migration
2015-01-02 17:17:32 ----D---- C:\Program Files\CCleaner
2015-01-02 12:26:57 ----D---- C:\Program Files (x86)\Prime95
2015-01-01 16:02:12 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-01-01 16:02:12 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-01-01 16:02:12 ----A---- C:\Windows\system32\nvspcap64.dll
2015-01-01 16:02:12 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-01-01 16:01:41 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-01-01 10:01:08 ----D---- C:\Users\Matej\AppData\Roaming\vlc
2015-01-01 10:00:14 ----D---- C:\Program Files (x86)\VideoLAN
2014-12-27 20:08:08 ----D---- C:\Users\Matej\AppData\Roaming\NVIDIA
2014-12-27 20:05:11 ----D---- C:\Users\Matej\AppData\Roaming\Macromedia
2014-12-27 20:01:50 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-12-27 20:01:48 ----D---- C:\Windows\SYSWOW64\Macromed
2014-12-27 20:01:47 ----D---- C:\Windows\system32\Macromed
2014-12-27 16:38:02 ----D---- C:\Program Files (x86)\Microsoft Works
2014-12-27 16:37:39 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2014-12-27 16:37:15 ----D---- C:\Windows\PCHEALTH
2014-12-27 16:35:17 ----D---- C:\Program Files\Microsoft Office
2014-12-27 16:35:12 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-12-27 16:34:26 ----D---- C:\Program Files (x86)\Microsoft Office
2014-12-27 16:33:37 ----RHD---- C:\MSOCache
2014-12-27 12:15:05 ----D---- C:\Program Files\Defraggler
2014-12-27 10:55:03 ----A---- C:\Windows\SYSWOW64\oemdspif.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvvsvc.exe
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvsvc64.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvshext.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvmctray.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvcpl.dll
2014-12-27 10:54:53 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-12-27 10:54:53 ----A---- C:\Windows\system32\OpenCL.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvopencl.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvoglv64.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvhdap64.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-12-27 10:52:06 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\NvIFR64.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\NvFBC64.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvdispgenco6434052.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvdispco6434052.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcuvid.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcuda.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcompiler.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvapi64.dll
2014-12-27 10:23:15 ----D---- C:\Users\Matej\AppData\Roaming\Mozilla
2014-12-27 10:23:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-27 10:17:22 ----D---- C:\Program Files\IrfanView
2014-12-27 10:16:32 ----D---- C:\Users\Matej\AppData\Roaming\IrfanView
2014-12-27 10:16:31 ----D---- C:\Program Files (x86)\IrfanView
2014-12-24 21:19:15 ----D---- C:\Dxtory
2014-12-24 21:08:46 ----A---- C:\Windows\system32\DxtoryCodec.dll
2014-12-24 21:08:45 ----A---- C:\Windows\SYSWOW64\DxtoryCodec.dll
2014-12-24 21:08:44 ----D---- C:\Program Files (x86)\ExKode
2014-12-24 10:58:59 ----HD---- C:\AdwCleaner
2014-12-23 19:38:37 ----D---- C:\Users\Matej\AppData\Roaming\Polda 6
2014-12-23 19:31:25 ----D---- C:\Program Files (x86)\Polda6
2014-12-21 17:30:26 ----D---- C:\Users\Matej\AppData\Roaming\Publish Providers
2014-12-21 17:16:03 ----D---- C:\ProgramData\Sony
2014-12-21 17:16:03 ----D---- C:\Program Files\Sony
2014-12-21 17:16:03 ----D---- C:\Program Files (x86)\Sony
2014-12-21 17:08:09 ----D---- C:\Users\Matej\AppData\Roaming\Sony
2014-12-21 12:24:14 ----D---- C:\ProgramData\NVIDIA
2014-12-21 12:03:30 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-12-21 11:53:48 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-12-21 11:53:48 ----A---- C:\Windows\system32\DWrite.dll
2014-12-20 18:52:14 ----D---- C:\Users\Matej\AppData\Roaming\Audacity
2014-12-20 18:51:54 ----D---- C:\Program Files (x86)\Audacity
2014-12-19 12:02:13 ----D---- C:\Users\Matej\AppData\Roaming\Skype
2014-12-19 12:02:00 ----RD---- C:\Program Files (x86)\Skype
2014-12-19 12:01:54 ----D---- C:\ProgramData\Skype
2014-12-19 09:32:27 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-12-19 09:32:27 ----A---- C:\Windows\system32\ieUnatt.exe

======List of files/folders modified in the last 1 month======

2015-01-16 16:01:34 ----D---- C:\Windows\Temp
2015-01-16 16:01:33 ----D---- C:\Program Files\trend micro
2015-01-16 15:57:39 ----D---- C:\Windows\System32
2015-01-16 15:57:38 ----D---- C:\Windows\SysWOW64
2015-01-16 15:57:04 ----RSD---- C:\Windows\assembly
2015-01-16 15:56:26 ----SHD---- C:\System Volume Information
2015-01-16 15:50:27 ----D---- C:\Windows\system32\config
2015-01-16 15:17:52 ----RD---- C:\Program Files (x86)
2015-01-16 15:12:31 ----D---- C:\Windows\Logs
2015-01-16 15:12:28 ----D---- C:\Windows\SYSWOW64\directx
2015-01-16 15:12:23 ----D---- C:\Windows\system32\Tasks
2015-01-16 15:10:54 ----D---- C:\Windows
2015-01-16 15:06:33 ----D---- C:\Windows\inf
2015-01-16 15:06:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-16 15:01:01 ----D---- C:\Windows\Tasks
2015-01-16 14:59:06 ----D---- C:\Users\Matej\AppData\Roaming\uTorrent
2015-01-16 14:32:56 ----D---- C:\Windows\SYSWOW64\config
2015-01-16 13:30:09 ----RD---- C:\Program Files
2015-01-14 17:58:17 ----D---- C:\Windows\system32\catroot
2015-01-14 17:44:36 ----HD---- C:\Program Files\Internet Explorer
2015-01-14 17:34:49 ----HD---- C:\ProgramData
2015-01-14 15:22:41 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-01-14 15:20:22 ----SHD---- C:\Windows\Installer
2015-01-14 15:20:19 ----D---- C:\Windows\winsxs
2015-01-14 15:14:17 ----D---- C:\Windows\system32\drivers
2015-01-14 15:14:15 ----D---- C:\Windows\system32\DriverStore
2015-01-14 15:14:15 ----D---- C:\Windows\system32\catroot2
2015-01-12 18:08:25 ----D---- C:\Program Files (x86)\Common Files
2015-01-12 17:59:13 ----D---- C:\Users\Matej\AppData\Roaming\DAEMON Tools Lite
2015-01-11 15:18:11 ----D---- C:\Windows\Microsoft.NET
2015-01-11 12:24:06 ----D---- C:\Users\Matej\AppData\Roaming\Media Player Classic
2015-01-11 11:47:49 ----D---- C:\Users\Matej\AppData\Roaming\.minecraft
2015-01-11 11:16:26 ----D---- C:\Program Files\NVIDIA Corporation
2015-01-10 15:38:59 ----D---- C:\Windows\pss
2015-01-08 20:30:35 ----D---- C:\Windows\system32\wdi
2015-01-07 14:44:49 ----D---- C:\Windows\SoftwareDistribution
2015-01-06 19:19:20 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-01-06 19:17:16 ----D---- C:\Windows\SYSWOW64\en-US
2015-01-06 19:17:15 ----D---- C:\Windows\system32\en-US
2015-01-06 19:17:05 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-01-06 19:14:17 ----D---- C:\Windows\Prefetch
2015-01-05 16:35:22 ----D---- C:\Windows\system32\cs-CZ
2015-01-05 16:35:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-01-05 16:01:07 ----SD---- C:\Users\Matej\AppData\Roaming\Microsoft
2015-01-04 18:25:55 ----D---- C:\Windows\system32\LogFiles
2015-01-02 17:21:43 ----D---- C:\Windows\SYSWOW64\LogFiles
2015-01-01 16:03:26 ----D---- C:\ProgramData\NVIDIA Corporation
2015-01-01 16:02:12 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-12-28 18:59:15 ----D---- C:\Windows\system32\NDF
2014-12-27 16:39:36 ----D---- C:\ProgramData\Microsoft Help
2014-12-27 16:37:50 ----D---- C:\Program Files (x86)\MSBuild
2014-12-27 16:37:37 ----D---- C:\Windows\ShellNew
2014-12-27 16:37:22 ----RSD---- C:\Windows\Fonts
2014-12-27 16:37:15 ----SD---- C:\ProgramData\Microsoft
2014-12-27 16:36:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-27 16:34:51 ----A---- C:\Windows\win.ini
2014-12-27 10:55:03 ----D---- C:\Windows\Help
2014-12-26 19:11:08 ----D---- C:\Windows\Panther
2014-12-26 19:11:07 ----D---- C:\Windows\debug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 436624]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-01-14 283064]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 116728]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-01 4745280]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-08-11 197408]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-12-13 19600]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-11-22 38032]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-12-13 1148560]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-12-13 1701520]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-12-13 19823248]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-07-02 935368]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-11-23 1255736]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-27 267440]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]

-----------------EOF-----------------
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119315
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: čistka PC

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

Re: čistka PC

#3 Příspěvek od MiranDAA »

# AdwCleaner v4.107 - Report created 16/01/2015 at 19:06:15
# Updated 07/01/2015 by Xplode
# Database : 2015-01-13.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Matej - MATEJ-PC
# Running from : C:\Users\Matej\Downloads\adwcleaner_4.107.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Matej\AppData\Roaming\Solvusoft
File Deleted : C:\Windows\Reimage.ini
File Deleted : C:\Windows\System32\roboot64.exe

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Reimage
Key Deleted : [x64] HKLM\SOFTWARE\Reimage
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

Re: čistka PC

#4 Příspěvek od MiranDAA »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Matej at 2015-01-16 19:11:17
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 339 GB (79%) free of 432 GB
Total RAM: 3959 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:11:21, on 16.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Matej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5787 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-36f4c71b-246d-418a-a8f1-2d6054954c22 -SystemEventPortName:HostProcess-99f91584-a57e-4b52-83aa-9498491c275e -IoCancelEventPortName:HostProcess-4c7b20d2-9eb5-468f-b087-b1bfce915b0d -NonStateChangingEventPortName:HostProcess-6257ac57-fec4-4d8d-bd06-48d9e0561ec9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:79033a57-a814-4a68-9690-3805c0d3a395 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
taskeng.exe {985D7695-07BD-4AC7-97CA-111DB001C22C}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\Matej\Aplikace\RSIT x64\RSIT.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\Matej\AppData\Roaming\Mozilla\Firefox\Profiles\5hklrdug.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-23 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-23 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-23 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07 507776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Matej^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-10 5227112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
"SynchronousMachineGroupPolicy"=1
"SynchronousUserGroupPolicy"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.xtor"=DxtoryCodec.dll
"VIDC.LAGS"=lagarith.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2015-01-16 17:47:03 ----A---- C:\Windows\SYSWOW64\granny2.dll
2015-01-16 17:45:56 ----A---- C:\Windows\SYSWOW64\rockalldll.dll
2015-01-16 17:09:40 ----D---- C:\Program Files\Yamicsoft
2015-01-16 16:01:31 ----D---- C:\rsit
2015-01-16 15:57:37 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-01-16 15:57:34 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2015-01-16 15:57:34 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-01-16 15:17:50 ----D---- C:\Program Files (x86)\DirectX
2015-01-16 15:10:54 ----HD---- C:\Windows\msdownld.tmp
2015-01-14 17:34:49 ----D---- C:\ProgramData\Mozilla
2015-01-14 15:23:44 ----D---- C:\ProgramData\Logs
2015-01-14 15:23:43 ----D---- C:\ProgramData\TEMP
2015-01-14 15:13:59 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2015-01-14 15:13:52 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2015-01-12 18:03:09 ----D---- C:\Program Files (x86)\Microsoft Games
2015-01-11 19:19:58 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-01-11 11:36:00 ----A---- C:\Windows\system32\lagarith.dll
2015-01-11 11:35:59 ----A---- C:\Windows\unins000.exe
2015-01-11 11:35:59 ----A---- C:\Windows\unins000.dat
2015-01-06 19:17:01 ----D---- C:\Windows\Migration
2015-01-02 17:17:32 ----D---- C:\Program Files\CCleaner
2015-01-02 12:26:57 ----D---- C:\Program Files (x86)\Prime95
2015-01-01 16:01:41 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-01-01 10:01:08 ----D---- C:\Users\Matej\AppData\Roaming\vlc
2015-01-01 10:00:14 ----D---- C:\Program Files (x86)\VideoLAN
2014-12-27 20:08:08 ----D---- C:\Users\Matej\AppData\Roaming\NVIDIA
2014-12-27 20:05:11 ----D---- C:\Users\Matej\AppData\Roaming\Macromedia
2014-12-27 20:01:48 ----D---- C:\Windows\SYSWOW64\Macromed
2014-12-27 20:01:47 ----D---- C:\Windows\system32\Macromed
2014-12-27 16:38:02 ----D---- C:\Program Files (x86)\Microsoft Works
2014-12-27 16:37:39 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2014-12-27 16:37:15 ----D---- C:\Windows\PCHEALTH
2014-12-27 16:35:17 ----D---- C:\Program Files\Microsoft Office
2014-12-27 16:35:12 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-12-27 16:34:26 ----D---- C:\Program Files (x86)\Microsoft Office
2014-12-27 16:33:37 ----RHD---- C:\MSOCache
2014-12-27 12:15:05 ----D---- C:\Program Files\Defraggler
2014-12-27 10:55:03 ----A---- C:\Windows\SYSWOW64\oemdspif.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvvsvc.exe
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvsvc64.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvshext.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvmctray.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvcpl.dll
2014-12-27 10:54:53 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-12-27 10:54:53 ----A---- C:\Windows\system32\OpenCL.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvopencl.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvoglv64.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvhdap64.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-12-27 10:52:06 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\NvIFR64.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\NvFBC64.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvdispgenco6434052.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvdispco6434052.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcuvid.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcuda.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcompiler.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvapi64.dll
2014-12-27 10:23:15 ----D---- C:\Users\Matej\AppData\Roaming\Mozilla
2014-12-27 10:23:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-27 10:17:22 ----D---- C:\Program Files\IrfanView
2014-12-27 10:16:32 ----D---- C:\Users\Matej\AppData\Roaming\IrfanView
2014-12-27 10:16:31 ----D---- C:\Program Files (x86)\IrfanView
2014-12-24 21:19:15 ----D---- C:\Dxtory
2014-12-24 21:08:46 ----A---- C:\Windows\system32\DxtoryCodec.dll
2014-12-24 21:08:45 ----A---- C:\Windows\SYSWOW64\DxtoryCodec.dll
2014-12-24 21:08:44 ----D---- C:\Program Files (x86)\ExKode
2014-12-24 10:58:59 ----HD---- C:\AdwCleaner
2014-12-23 19:38:37 ----D---- C:\Users\Matej\AppData\Roaming\Polda 6
2014-12-23 19:31:25 ----D---- C:\Program Files (x86)\Polda6
2014-12-21 17:30:26 ----D---- C:\Users\Matej\AppData\Roaming\Publish Providers
2014-12-21 17:16:03 ----D---- C:\ProgramData\Sony
2014-12-21 17:16:03 ----D---- C:\Program Files\Sony
2014-12-21 17:16:03 ----D---- C:\Program Files (x86)\Sony
2014-12-21 17:08:09 ----D---- C:\Users\Matej\AppData\Roaming\Sony
2014-12-21 12:24:14 ----D---- C:\ProgramData\NVIDIA
2014-12-21 11:53:48 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-12-21 11:53:48 ----A---- C:\Windows\system32\DWrite.dll
2014-12-20 18:52:14 ----D---- C:\Users\Matej\AppData\Roaming\Audacity
2014-12-20 18:51:54 ----D---- C:\Program Files (x86)\Audacity
2014-12-19 12:02:13 ----D---- C:\Users\Matej\AppData\Roaming\Skype
2014-12-19 12:02:00 ----RD---- C:\Program Files (x86)\Skype
2014-12-19 12:01:54 ----D---- C:\ProgramData\Skype
2014-12-19 09:32:27 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-12-19 09:32:27 ----A---- C:\Windows\system32\ieUnatt.exe
2014-12-16 18:11:15 ----D---- C:\Users\Matej\AppData\Roaming\uTorrent
2014-12-15 19:01:04 ----D---- C:\Program Files (x86)\Languages
2014-12-11 17:10:11 ----D---- C:\Windows\system32\appraiser
2014-12-11 14:30:02 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2014-12-11 14:30:02 ----A---- C:\Windows\SYSWOW64\mfps.dll
2014-12-11 14:30:02 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2014-12-11 14:30:02 ----A---- C:\Windows\SYSWOW64\mferror.dll
2014-12-11 14:30:02 ----A---- C:\Windows\system32\rrinstaller.exe
2014-12-11 14:30:02 ----A---- C:\Windows\system32\mfps.dll
2014-12-11 14:30:02 ----A---- C:\Windows\system32\mfpmp.exe
2014-12-11 14:30:02 ----A---- C:\Windows\system32\mferror.dll
2014-12-11 14:30:01 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-12-11 14:30:01 ----A---- C:\Windows\system32\mf.dll
2014-12-11 13:20:48 ----A---- C:\Windows\system32\invagent.dll
2014-12-11 13:20:48 ----A---- C:\Windows\system32\appraiser.dll
2014-12-11 13:20:48 ----A---- C:\Windows\system32\aitstatic.exe
2014-12-11 13:20:48 ----A---- C:\Windows\system32\aepic.dll
2014-12-11 13:20:48 ----A---- C:\Windows\system32\aeinv.dll
2014-12-11 13:20:47 ----A---- C:\Windows\system32\generaltel.dll
2014-12-11 13:20:47 ----A---- C:\Windows\system32\devinv.dll
2014-12-11 13:20:46 ----A---- C:\Windows\system32\aepdu.dll
2014-12-11 13:20:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-11 13:20:44 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-11 13:20:42 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-12-11 13:20:40 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-11 13:20:40 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-12-11 13:20:40 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-12-11 13:20:40 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-12-11 13:20:40 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-12-11 13:20:39 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-11 13:20:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-11 13:20:39 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-12-11 13:20:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-11 13:20:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-11 13:20:39 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-11 13:20:39 ----A---- C:\Windows\system32\iernonce.dll
2014-12-11 13:20:39 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-11 13:20:38 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-11 13:20:37 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-12-11 13:20:37 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-12-11 13:20:37 ----A---- C:\Windows\system32\urlmon.dll
2014-12-11 13:20:37 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-11 13:20:36 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-12-11 13:20:36 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-12-11 13:20:36 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-11 13:20:36 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-12-11 13:20:35 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-12-11 13:20:35 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-11 13:20:34 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-12-11 13:20:34 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-11 13:20:34 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-11 13:20:33 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-11 13:20:33 ----A---- C:\Windows\system32\iesetup.dll
2014-12-11 13:20:33 ----A---- C:\Windows\system32\ieapfltr.dll
2014-12-11 13:20:31 ----A---- C:\Windows\system32\iertutil.dll
2014-12-11 13:20:30 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-11 13:20:30 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-11 13:20:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-12-11 13:20:30 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-12-11 13:20:30 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-12-11 13:20:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-11 13:20:30 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-11 13:20:29 ----A---- C:\Windows\system32\ieui.dll
2014-12-11 13:20:29 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-11 13:20:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-12-11 13:20:28 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-11 13:20:28 ----A---- C:\Windows\system32\jscript9diag.dll
2014-12-11 13:20:28 ----A---- C:\Windows\system32\ieframe.dll
2014-12-11 13:20:27 ----A---- C:\Windows\system32\wininet.dll
2014-12-11 13:20:27 ----A---- C:\Windows\system32\vbscript.dll
2014-12-11 13:20:27 ----A---- C:\Windows\system32\jscript9.dll
2014-12-11 13:20:26 ----A---- C:\Windows\system32\msrating.dll
2014-12-11 13:20:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-12-11 13:20:25 ----A---- C:\Windows\system32\mshtml.dll
2014-12-11 13:20:14 ----A---- C:\Windows\SYSWOW64\charmap.exe
2014-12-11 13:20:14 ----A---- C:\Windows\system32\charmap.exe
2014-12-11 13:20:13 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-12-11 13:20:13 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-12-11 13:20:13 ----A---- C:\Windows\system32\WsmSvc.dll
2014-12-11 13:20:13 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-11 13:20:13 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2014-12-11 13:20:12 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2014-12-11 13:20:12 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2014-12-11 13:20:12 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2014-12-11 13:20:12 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2014-12-11 13:20:12 ----A---- C:\Windows\system32\WsmAuto.dll
2014-12-11 13:20:10 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-12-11 13:20:10 ----A---- C:\Windows\system32\tzres.dll
2014-12-09 19:34:49 ----D---- C:\ProgramData\Solidshield
2014-12-07 16:02:48 ----D---- C:\Users\Matej\AppData\Roaming\WinRAR
2014-12-07 16:02:13 ----D---- C:\Program Files (x86)\WinRAR
2014-12-07 12:21:24 ----D---- C:\ProgramData\ChessBase
2014-12-07 12:04:57 ----D---- C:\Users\Matej\AppData\Roaming\ChessBase
2014-12-07 12:00:01 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-06 21:56:49 ----D---- C:\ProgramData\WinZip
2014-12-05 14:02:50 ----D---- C:\Windows\pss
2014-12-05 13:56:41 ----D---- C:\Users\Matej\AppData\Roaming\Media Player Classic
2014-12-05 13:56:14 ----A---- C:\Windows\SYSWOW64\lagarith.dll
2014-12-05 13:56:13 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2014-12-05 13:56:13 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2014-12-05 13:56:13 ----A---- C:\Windows\SYSWOW64\unrar.dll
2014-12-05 13:56:10 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2014-12-05 13:56:06 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2014-12-03 14:13:59 ----D---- C:\Program Files\trend micro
2014-11-29 15:59:35 ----D---- C:\Users\Matej\AppData\Roaming\DAEMON Tools Lite
2014-11-29 15:58:57 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-11-26 18:35:34 ----D---- C:\Users\Matej\AppData\Roaming\Wargaming.net
2014-11-26 17:44:39 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-11-26 17:44:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-11-26 17:44:39 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-11-26 17:44:39 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-11-26 17:44:38 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-11-26 17:44:38 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-11-26 17:44:37 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-11-26 17:44:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-11-26 17:44:37 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-11-26 17:44:37 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-11-26 17:44:36 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-11-26 17:44:36 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-11-26 17:44:36 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-11-26 17:44:36 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-11-26 17:44:36 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-11-26 17:44:36 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-11-26 17:44:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-11-26 17:44:35 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-11-26 17:44:34 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-11-26 17:44:34 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-11-26 17:44:33 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-11-26 17:44:33 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-11-26 17:44:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-11-26 17:44:32 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-11-26 17:44:31 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-11-26 17:44:31 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-11-26 17:44:31 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-11-26 17:44:31 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-11-26 17:44:30 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-11-26 17:44:30 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-11-26 17:44:29 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-11-26 17:44:29 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-11-26 17:44:28 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-11-26 17:44:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-11-26 17:44:28 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-11-26 17:44:28 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-11-26 17:44:27 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-11-26 17:44:27 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-11-26 17:44:26 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-11-26 17:44:26 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-11-26 17:44:26 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-11-26 17:44:26 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-11-26 17:44:25 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-11-26 17:44:25 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-11-26 17:44:25 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-11-26 17:44:25 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-11-26 17:44:22 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-11-26 17:44:22 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-11-26 17:44:22 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-11-26 17:44:22 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-11-26 17:44:22 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-11-26 17:44:22 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-11-26 17:44:21 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-11-26 17:44:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-11-26 17:44:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-11-26 17:44:21 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-11-26 17:44:21 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-11-26 17:44:21 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-11-26 17:44:20 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-11-26 17:44:20 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-11-26 17:44:19 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-11-26 17:44:19 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-11-26 17:44:19 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-11-26 17:44:19 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-11-26 17:44:18 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-11-26 17:44:18 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-11-26 17:44:17 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-11-26 17:44:17 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-11-26 17:44:17 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-11-26 17:44:17 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-11-26 17:44:16 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-11-26 17:44:16 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-11-26 17:44:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-11-26 17:44:15 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-11-26 17:44:14 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-11-26 17:44:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-11-26 17:44:14 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-11-26 17:44:14 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-11-26 17:44:13 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-11-26 17:44:13 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-11-26 17:44:12 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-11-26 17:44:12 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-11-26 17:44:11 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-11-26 17:44:11 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-11-26 17:44:10 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-11-26 17:44:10 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-11-26 17:44:09 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-11-26 17:44:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-11-26 17:44:09 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-11-26 17:44:09 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-11-26 17:44:08 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-11-26 17:44:08 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-11-26 17:44:07 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-11-26 17:44:07 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-11-26 17:44:05 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-11-26 17:44:05 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-11-26 17:44:05 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-11-26 17:44:05 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-11-26 17:44:03 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-11-26 17:44:03 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-11-26 17:44:01 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-11-26 17:44:01 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-11-26 17:44:01 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-11-26 17:44:01 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-11-26 17:44:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-11-26 17:44:00 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-11-26 17:43:59 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-11-26 17:43:59 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-11-26 17:43:55 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-11-26 17:43:55 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-11-26 17:43:55 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-11-26 17:43:55 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-11-26 17:43:54 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-11-26 17:43:54 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-11-26 17:43:54 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-11-26 17:43:54 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-11-26 17:43:52 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-11-26 17:43:52 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-11-26 17:43:51 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-11-26 17:43:51 ----A---- C:\Windows\system32\xinput1_3.dll
2014-11-26 17:43:49 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-11-26 17:43:49 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-11-26 17:43:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-11-26 17:43:49 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-11-26 17:43:49 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-11-26 17:43:49 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-11-26 17:43:48 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-11-26 17:43:48 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-11-26 17:43:44 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-11-26 17:43:44 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-11-26 17:43:41 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-11-26 17:43:41 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-11-26 17:43:41 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-11-26 17:43:41 ----A---- C:\Windows\system32\d3dx10.dll
2014-11-26 17:43:38 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-11-26 17:43:38 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-11-26 17:43:36 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-11-26 17:43:36 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-11-26 17:43:36 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-11-26 17:43:36 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-11-26 17:43:35 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-11-26 17:43:35 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-11-26 17:43:33 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-11-26 17:43:33 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-11-26 17:43:31 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-11-26 17:43:31 ----A---- C:\Windows\system32\xinput1_2.dll
2014-11-26 17:43:29 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-11-26 17:43:29 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-11-26 17:43:29 ----A---- C:\Windows\system32\xinput1_1.dll
2014-11-26 17:43:29 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-11-26 17:43:26 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-11-26 17:43:26 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-11-26 17:43:22 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-11-26 17:43:22 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-11-26 17:43:17 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-11-26 17:43:17 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-11-26 17:43:17 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-11-26 17:43:17 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-11-26 17:43:15 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-11-26 17:43:15 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-11-26 17:43:14 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-11-26 17:43:14 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-11-26 17:43:12 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-11-26 17:43:12 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-11-26 17:43:10 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-11-26 17:43:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-11-26 17:43:09 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-11-26 17:43:09 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-11-26 17:43:08 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-11-26 17:43:08 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-11-26 17:41:31 ----D---- C:\Windows\SYSWOW64\directx
2014-11-23 21:20:20 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-11-23 21:20:20 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-11-23 20:46:05 ----D---- C:\Users\Matej\AppData\Roaming\java
2014-11-23 20:45:48 ----D---- C:\Users\Matej\AppData\Roaming\.minecraft
2014-11-23 20:44:29 ----D---- C:\ProgramData\Sun
2014-11-23 20:44:12 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2014-11-23 20:43:43 ----D---- C:\ProgramData\Oracle
2014-11-23 20:43:39 ----D---- C:\Program Files\Java
2014-11-23 18:25:27 ----A---- C:\Windows\explorer.exe
2014-11-23 18:25:25 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-11-23 18:25:21 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\system32\KBDRU.DLL
2014-11-23 18:25:21 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-11-23 18:25:20 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-11-23 18:25:20 ----A---- C:\Windows\system32\d3d10warp.dll
2014-11-23 18:25:18 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-11-23 18:25:18 ----A---- C:\Windows\system32\WMPhoto.dll
2014-11-23 18:25:11 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-11-23 18:25:11 ----A---- C:\Windows\system32\d2d1.dll
2014-11-23 18:25:08 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-11-23 18:25:08 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-11-23 18:25:08 ----A---- C:\Windows\system32\fsutil.exe
2014-11-23 18:25:08 ----A---- C:\Windows\system32\esent.dll
2014-11-23 18:25:08 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-11-23 18:25:07 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-11-23 18:25:07 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-11-23 18:25:07 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-11-23 18:25:07 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-11-23 18:25:07 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-11-23 18:24:56 ----A---- C:\Windows\system32\spoolsv.exe
2014-11-23 18:24:56 ----A---- C:\Windows\splwow64.exe
2014-11-23 16:38:14 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-11-23 16:38:14 ----A---- C:\Windows\system32\wmploc.DLL
2014-11-23 16:38:13 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-11-23 16:38:12 ----A---- C:\Windows\system32\wmp.dll
2014-11-23 16:09:23 ----D---- C:\ProgramData\Microsoft Help
2014-11-23 15:15:12 ----D---- C:\Windows\SYSWOW64\Wat
2014-11-23 15:15:11 ----D---- C:\Windows\system32\Wat
2014-11-23 15:09:54 ----D---- C:\Users\Matej\AppData\Roaming\Adobe
2014-11-23 14:58:53 ----SD---- C:\Windows\system32\CompatTel
2014-11-23 14:28:36 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-11-23 14:16:38 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-11-23 14:16:28 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-11-23 14:16:28 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-11-23 14:16:28 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-11-23 14:16:28 ----A---- C:\Windows\system32\elshyph.dll
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\url.dll
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-11-23 14:16:27 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-11-23 14:16:26 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-11-23 14:16:25 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-11-23 14:16:25 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-11-23 14:16:25 ----A---- C:\Windows\system32\msls31.dll
2014-11-23 14:16:25 ----A---- C:\Windows\system32\mshtmler.dll
2014-11-23 14:16:25 ----A---- C:\Windows\system32\msfeedssync.exe
2014-11-23 14:16:25 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-11-23 14:16:25 ----A---- C:\Windows\system32\jsIntl.dll
2014-11-23 14:16:25 ----A---- C:\Windows\system32\iesysprep.dll
2014-11-23 14:16:25 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-11-23 14:16:24 ----A---- C:\Windows\system32\wextract.exe
2014-11-23 14:16:24 ----A---- C:\Windows\system32\webcheck.dll
2014-11-23 14:16:24 ----A---- C:\Windows\system32\url.dll
2014-11-23 14:16:24 ----A---- C:\Windows\system32\pngfilt.dll
2014-11-23 14:16:24 ----A---- C:\Windows\system32\occache.dll
2014-11-23 14:16:24 ----A---- C:\Windows\system32\licmgr10.dll
2014-11-23 14:16:24 ----A---- C:\Windows\system32\inseng.dll
2014-11-23 14:16:24 ----A---- C:\Windows\system32\iexpress.exe
2014-11-23 14:16:24 ----A---- C:\Windows\system32\ieapfltr.dat
2014-11-23 14:16:24 ----A---- C:\Windows\system32\icardie.dll
2014-11-23 14:16:23 ----A---- C:\Windows\system32\mshta.exe
2014-11-23 14:16:23 ----A---- C:\Windows\system32\jscript.dll
2014-11-23 14:16:23 ----A---- C:\Windows\system32\imgutil.dll
2014-11-23 14:16:23 ----A---- C:\Windows\system32\iepeers.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-11-23 14:04:34 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-11-23 14:04:34 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-11-23 14:04:34 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-11-23 14:04:34 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-11-23 14:04:34 ----A---- C:\Windows\system32\XpsPrint.dll
2014-11-23 14:04:34 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-11-23 14:04:34 ----A---- C:\Windows\system32\dxgi.dll
2014-11-23 14:04:33 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-11-23 14:04:33 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-11-23 14:04:33 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-11-23 14:04:33 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-11-23 14:04:33 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-11-23 14:04:33 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-11-23 14:04:33 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\UIAnimation.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\FntCache.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\d3d10level9.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\d3d10core.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\d3d10_1.dll
2014-11-23 14:04:33 ----A---- C:\Windows\system32\d3d10.dll
2014-11-23 12:30:07 ----A---- C:\Windows\system32\browserchoice.exe
2014-11-23 11:38:05 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-11-23 11:38:05 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-11-23 11:38:03 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-11-23 11:38:03 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-11-23 11:38:01 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-11-23 11:38:00 ----A---- C:\Windows\system32\WUDFx.dll
2014-11-23 11:38:00 ----A---- C:\Windows\system32\WUDFHost.exe
2014-11-23 11:18:27 ----D---- C:\Windows\system32\MRT
2014-11-23 11:18:20 ----A---- C:\Windows\system32\MRT.exe
2014-11-23 11:14:34 ----D---- C:\Users\Matej\AppData\Roaming\AVAST Software
2014-11-23 11:12:44 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-11-23 11:12:42 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-11-23 11:12:40 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-11-23 11:12:37 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-11-23 11:12:35 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-11-23 11:12:32 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-11-23 11:12:30 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-11-23 11:12:23 ----A---- C:\Windows\system32\drivers\aswsnx.sys
2014-11-23 11:12:04 ----A---- C:\Windows\system32\aswBoot.exe
2014-11-23 11:12:00 ----A---- C:\Windows\avastSS.scr
2014-11-23 11:10:58 ----D---- C:\Program Files\AVAST Software
2014-11-23 11:10:04 ----D---- C:\ProgramData\AVAST Software
2014-11-23 10:55:40 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-11-23 10:55:40 ----A---- C:\Windows\system32\wmi.dll
2014-11-23 10:55:40 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-11-23 10:33:46 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2014-11-23 10:33:46 ----A---- C:\Windows\system32\infocardapi.dll
2014-11-23 10:33:41 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2014-11-23 10:33:41 ----A---- C:\Windows\system32\icardagt.exe
2014-11-23 10:33:39 ----A---- C:\Windows\SYSWOW64\icardres.dll
2014-11-23 10:33:39 ----A---- C:\Windows\system32\icardres.dll
2014-11-23 10:33:00 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-11-23 10:33:00 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-11-23 10:29:59 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-11-23 10:29:59 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-11-23 10:29:57 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-11-23 10:29:50 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-23 10:29:50 ----A---- C:\Windows\system32\termsrv.dll
2014-11-23 10:29:50 ----A---- C:\Windows\system32\adtschema.dll
2014-11-23 10:29:49 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-23 10:29:49 ----A---- C:\Windows\system32\msaudite.dll
2014-11-23 10:28:29 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-11-23 10:28:29 ----A---- C:\Windows\system32\dpnet.dll
2014-11-23 10:28:05 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-11-23 10:28:05 ----A---- C:\Windows\system32\d3d11.dll
2014-11-23 10:27:47 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-11-23 10:27:47 ----A---- C:\Windows\system32\wintrust.dll
2014-11-23 10:27:12 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-11-23 10:27:12 ----A---- C:\Windows\system32\comctl32.dll
2014-11-23 10:27:10 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-11-23 10:27:10 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-11-23 10:27:10 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-11-23 10:27:10 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-11-23 10:27:10 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-11-23 10:26:56 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-11-23 10:26:56 ----A---- C:\Windows\system32\poqexec.exe
2014-11-23 10:26:30 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-11-23 10:26:30 ----A---- C:\Windows\system32\usp10.dll
2014-11-23 10:26:26 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-11-23 10:26:26 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-11-23 10:26:03 ----A---- C:\Windows\system32\Wdfres.dll
2014-11-23 10:26:03 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-11-23 10:26:03 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-11-23 10:26:00 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-23 10:25:59 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-23 10:25:56 ----A---- C:\Windows\system32\msxml6.dll
2014-11-23 10:25:55 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-11-23 10:25:55 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-11-23 10:25:55 ----A---- C:\Windows\system32\msxml6r.dll
2014-11-23 10:25:52 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-11-23 10:25:52 ----A---- C:\Windows\system32\imagehlp.dll
2014-11-23 10:25:47 ----A---- C:\Windows\system32\Wpc.dll
2014-11-23 10:25:47 ----A---- C:\Windows\system32\gameux.dll
2014-11-23 10:25:46 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-11-23 10:25:46 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-11-23 10:24:46 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-23 10:24:46 ----A---- C:\Windows\system32\msxml3.dll
2014-11-23 10:24:45 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-23 10:24:45 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-23 10:24:43 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-23 10:24:43 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-23 10:24:43 ----A---- C:\Windows\system32\kerberos.dll
2014-11-23 10:24:42 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-23 10:24:42 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-23 10:24:42 ----A---- C:\Windows\system32\sspicli.dll
2014-11-23 10:24:42 ----A---- C:\Windows\system32\secur32.dll
2014-11-23 10:24:42 ----A---- C:\Windows\system32\pku2u.dll
2014-11-23 10:24:42 ----A---- C:\Windows\system32\lsass.exe
2014-11-23 10:24:42 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-23 10:24:42 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-11-23 10:24:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-23 10:24:41 ----A---- C:\Windows\system32\sspisrv.dll
2014-11-23 10:23:48 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-11-23 10:23:48 ----A---- C:\Windows\system32\tdh.dll
2014-11-23 10:23:48 ----A---- C:\Windows\system32\ntdll.dll
2014-11-23 10:23:48 ----A---- C:\Windows\system32\advapi32.dll
2014-11-23 10:23:47 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-11-23 10:23:47 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-11-23 10:15:36 ----A---- C:\Windows\system32\schannel.dll
2014-11-23 10:15:35 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-23 10:15:35 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-23 10:15:35 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-23 10:15:34 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-23 10:15:34 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-23 10:15:34 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-23 10:15:34 ----A---- C:\Windows\system32\wdigest.dll
2014-11-23 10:15:34 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-23 10:15:34 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-23 10:15:33 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-23 10:15:33 ----A---- C:\Windows\system32\credssp.dll
2014-11-23 10:14:51 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-11-23 10:14:51 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-11-23 10:14:51 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-11-23 10:14:51 ----A---- C:\Windows\system32\RMActivate.exe
2014-11-23 10:14:50 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-11-23 10:14:50 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-11-23 10:14:50 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-11-23 10:14:50 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-11-23 10:14:50 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-11-23 10:14:50 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-11-23 10:14:50 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-11-23 10:14:50 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-11-23 10:14:50 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-11-23 10:14:50 ----A---- C:\Windows\system32\secproc_isv.dll
2014-11-23 10:14:50 ----A---- C:\Windows\system32\secproc.dll
2014-11-23 10:14:50 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-11-23 10:14:50 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-11-23 10:14:50 ----A---- C:\Windows\system32\msdrm.dll
2014-11-23 10:13:26 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-11-23 10:13:24 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-11-23 10:13:24 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-11-23 10:13:23 ----A---- C:\Windows\system32\objsel.dll
2014-11-23 10:13:23 ----A---- C:\Windows\system32\KernelBase.dll
2014-11-23 10:13:22 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-11-23 10:13:22 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-11-23 10:13:22 ----A---- C:\Windows\system32\smss.exe
2014-11-23 10:13:22 ----A---- C:\Windows\system32\dimsroam.dll
2014-11-23 10:13:21 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-11-23 10:13:21 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\system32\wincredprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\system32\csrsrv.dll
2014-11-23 10:13:21 ----A---- C:\Windows\system32\cngprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\system32\capiprovider.dll
2014-11-23 10:13:21 ----A---- C:\Windows\system32\adprovider.dll
2014-11-23 10:13:19 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-11-23 10:13:19 ----A---- C:\Windows\system32\apisetschema.dll
2014-11-23 10:12:01 ----A---- C:\Windows\system32\shell32.dll
2014-11-23 10:12:00 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-11-23 10:11:56 ----A---- C:\Windows\system32\qdvd.dll
2014-11-23 10:11:55 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-11-23 10:11:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-11-23 10:11:06 ----A---- C:\Windows\system32\winlogon.exe
2014-11-23 10:11:06 ----A---- C:\Windows\system32\mstscax.dll
2014-11-23 10:11:04 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-11-23 10:11:04 ----A---- C:\Windows\system32\mstsc.exe
2014-11-23 10:11:03 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-11-23 10:11:03 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2014-11-23 10:11:03 ----A---- C:\Windows\system32\winsta.dll
2014-11-23 10:11:03 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-11-23 10:11:03 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-11-23 10:11:03 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-11-23 10:11:02 ----A---- C:\Windows\system32\rdpwsx.dll
2014-11-23 10:11:02 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-11-23 10:11:01 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-11-23 10:11:01 ----A---- C:\Windows\system32\tsgqec.dll
2014-11-23 10:11:01 ----A---- C:\Windows\system32\aaclient.dll
2014-11-23 10:09:25 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-23 10:09:25 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-23 10:09:25 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-23 10:09:25 ----A---- C:\Windows\system32\EncDump.dll
2014-11-23 10:09:25 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-23 10:09:25 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-23 10:09:25 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-23 10:09:25 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-23 10:09:17 ----A---- C:\Windows\system32\drivers\afd.sys
2014-11-23 10:09:13 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-11-23 10:09:13 ----A---- C:\Windows\system32\osk.exe
2014-11-23 10:09:10 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-11-23 10:09:10 ----A---- C:\Windows\system32\xmllite.dll
2014-11-23 10:09:03 ----A---- C:\Windows\system32\winresume.exe
2014-11-23 10:09:03 ----A---- C:\Windows\system32\winload.exe
2014-11-23 10:09:03 ----A---- C:\Windows\system32\kdusb.dll
2014-11-23 10:09:03 ----A---- C:\Windows\system32\kdcom.dll
2014-11-23 10:09:03 ----A---- C:\Windows\system32\kd1394.dll
2014-11-23 10:08:37 ----A---- C:\Windows\system32\odbccu32.dll
2014-11-23 10:08:37 ----A---- C:\Windows\system32\odbccr32.dll
2014-11-23 10:08:36 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-11-23 10:08:36 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-11-23 10:08:36 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-11-23 10:08:36 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-11-23 10:08:36 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-11-23 10:08:36 ----A---- C:\Windows\system32\odbctrac.dll
2014-11-23 10:08:36 ----A---- C:\Windows\system32\odbccp32.dll
2014-11-23 10:08:02 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-11-23 10:08:02 ----A---- C:\Windows\system32\webio.dll
2014-11-23 10:07:55 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-11-23 10:07:55 ----A---- C:\Windows\system32\mswsock.dll
2014-11-23 10:07:46 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-11-23 10:07:46 ----A---- C:\Windows\system32\cryptdlg.dll
2014-11-23 10:07:25 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-11-23 10:07:25 ----A---- C:\Windows\system32\wow64win.dll
2014-11-23 10:07:25 ----A---- C:\Windows\system32\wow64.dll
2014-11-23 10:07:25 ----A---- C:\Windows\system32\winsrv.dll
2014-11-23 10:07:25 ----A---- C:\Windows\system32\kernel32.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-11-23 10:07:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-11-23 10:07:24 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-11-23 10:07:24 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-11-23 10:07:24 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-11-23 10:07:24 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-11-23 10:07:24 ----A---- C:\Windows\system32\wow64cpu.dll
2014-11-23 10:07:24 ----A---- C:\Windows\system32\ntvdm64.dll
2014-11-23 10:07:24 ----A---- C:\Windows\system32\conhost.exe
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-11-23 10:07:23 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-11-23 10:07:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-11-23 10:07:22 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-11-23 10:07:22 ----A---- C:\Windows\SYSWOW64\user.exe
2014-11-23 10:07:03 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-23 10:07:03 ----A---- C:\Windows\system32\packager.dll
2014-11-23 10:07:02 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-11-23 10:07:02 ----A---- C:\Windows\system32\drivers\netio.sys
2014-11-23 10:07:02 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-11-23 10:07:00 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-11-23 10:07:00 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-11-23 10:07:00 ----A---- C:\Windows\system32\mfc42u.dll
2014-11-23 10:07:00 ----A---- C:\Windows\system32\mfc42.dll
2014-11-23 10:06:58 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-11-23 10:06:58 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-11-23 10:06:50 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-11-23 10:06:50 ----A---- C:\Windows\system32\shdocvw.dll
2014-11-23 10:06:38 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-11-23 10:06:38 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-11-23 10:06:38 ----A---- C:\Windows\system32\drivers\srv.sys
2014-11-23 10:06:36 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-11-23 10:06:36 ----A---- C:\Windows\system32\WebClnt.dll
2014-11-23 10:06:36 ----A---- C:\Windows\system32\davclnt.dll
2014-11-23 10:06:35 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-11-23 10:06:35 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-11-23 10:06:32 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-11-23 10:06:32 ----A---- C:\Windows\system32\ntshrui.dll
2014-11-23 10:06:25 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-11-23 10:06:25 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-11-23 10:06:25 ----A---- C:\Windows\system32\sbe.dll
2014-11-23 10:06:25 ----A---- C:\Windows\system32\CPFilters.dll
2014-11-23 10:06:22 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-11-23 10:06:22 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-11-23 10:06:22 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-11-23 10:06:22 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-11-23 10:06:22 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-11-23 10:06:22 ----A---- C:\Windows\system32\tquery.dll
2014-11-23 10:06:22 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-11-23 10:06:22 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-11-23 10:06:22 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-11-23 10:06:22 ----A---- C:\Windows\system32\mssrch.dll
2014-11-23 10:06:22 ----A---- C:\Windows\system32\mssph.dll
2014-11-23 10:06:21 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-11-23 10:06:21 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-11-23 10:06:21 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-11-23 10:06:21 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-11-23 10:06:21 ----A---- C:\Windows\system32\mssvp.dll
2014-11-23 10:06:21 ----A---- C:\Windows\system32\mssphtb.dll
2014-11-23 10:06:21 ----A---- C:\Windows\system32\msscntrs.dll
2014-11-23 10:06:20 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-11-23 10:06:20 ----A---- C:\Windows\system32\synceng.dll
2014-11-23 10:06:09 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-11-23 10:06:09 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-11-23 10:06:09 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-11-23 10:06:09 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-11-23 10:06:06 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-11-23 10:06:06 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-11-23 10:06:04 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-11-23 10:06:04 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-11-23 10:06:04 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-11-23 10:06:04 ----A---- C:\Windows\system32\cryptsvc.dll
2014-11-23 10:06:04 ----A---- C:\Windows\system32\cryptnet.dll
2014-11-23 10:06:04 ----A---- C:\Windows\system32\crypt32.dll
2014-11-23 10:05:52 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-11-23 10:05:52 ----A---- C:\Windows\system32\msieftp.dll
2014-11-23 10:05:51 ----A---- C:\Windows\system32\wwansvc.dll
2014-11-23 10:05:51 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-11-23 10:05:50 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-11-23 10:05:50 ----A---- C:\Windows\system32\wer.dll
2014-11-23 10:05:48 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-11-23 10:05:48 ----A---- C:\Windows\system32\quartz.dll
2014-11-23 10:05:47 ----A---- C:\Windows\system32\win32k.sys
2014-11-23 10:05:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-11-23 10:05:34 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-11-23 10:05:34 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-11-23 10:05:33 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-11-23 10:05:33 ----A---- C:\Windows\system32\qedit.dll
2014-11-23 10:05:32 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-11-23 10:05:27 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-11-23 10:05:27 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-11-23 10:05:27 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-11-23 10:05:27 ----A---- C:\Windows\system32\mscories.dll
2014-11-23 10:05:27 ----A---- C:\Windows\system32\mscorier.dll
2014-11-23 10:05:27 ----A---- C:\Windows\system32\dfshim.dll
2014-11-23 10:05:07 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-11-23 10:05:07 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-11-23 10:05:07 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-11-23 10:05:07 ----A---- C:\Windows\system32\credui.dll
2014-11-23 10:04:59 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-11-23 10:04:58 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-11-23 10:04:56 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-11-23 10:04:56 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-11-23 10:04:56 ----A---- C:\Windows\system32\nlasvc.dll
2014-11-23 10:04:56 ----A---- C:\Windows\system32\netcorehc.dll
2014-11-23 10:04:56 ----A---- C:\Windows\system32\ncsi.dll
2014-11-23 10:04:56 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-11-23 10:04:55 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-11-23 10:04:55 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-11-23 10:04:55 ----A---- C:\Windows\system32\nlaapi.dll
2014-11-23 10:04:55 ----A---- C:\Windows\system32\netevent.dll
2014-11-23 10:04:55 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-11-23 10:04:48 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-11-23 10:04:48 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-11-23 10:04:46 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-11-23 10:04:46 ----A---- C:\Windows\system32\dciman32.dll
2014-11-23 10:04:46 ----A---- C:\Windows\system32\atmlib.dll
2014-11-23 10:04:46 ----A---- C:\Windows\system32\atmfd.dll
2014-11-23 10:04:45 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-11-23 10:04:45 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-11-23 10:04:45 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-11-23 10:04:45 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-11-23 10:04:45 ----A---- C:\Windows\system32\lpk.dll
2014-11-23 10:04:45 ----A---- C:\Windows\system32\fontsub.dll
2014-11-23 10:04:45 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-11-23 10:04:45 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-11-23 10:04:44 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-11-23 10:04:44 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-11-23 10:04:44 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-11-23 10:04:44 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-11-23 10:04:44 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-11-23 10:04:44 ----A---- C:\Windows\system32\cdd.dll
2014-11-23 10:04:42 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-11-23 10:04:42 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-11-23 10:04:41 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-11-23 10:04:41 ----A---- C:\Windows\system32\win32spl.dll
2014-11-23 10:04:39 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-11-23 10:04:39 ----A---- C:\Windows\system32\rastls.dll
2014-11-23 10:04:39 ----A---- C:\Windows\system32\profsvc.dll
2014-11-23 10:04:38 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-11-23 10:04:38 ----A---- C:\Windows\system32\psisdecd.dll
2014-11-23 10:04:35 ----A---- C:\Windows\system32\taskhost.exe
2014-11-23 10:04:33 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-11-23 10:04:33 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-11-23 10:04:33 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-11-23 10:04:33 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-11-23 10:04:33 ----A---- C:\Windows\system32\dnsapi.dll
2014-11-23 10:04:30 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-11-23 10:04:30 ----A---- C:\Windows\system32\iologmsg.dll
2014-11-23 10:04:30 ----A---- C:\Windows\system32\drivers\storport.sys
2014-11-23 10:04:30 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-11-23 10:04:30 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-11-23 10:04:15 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-11-23 10:03:52 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-11-23 10:03:52 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-23 10:03:50 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-11-23 10:03:50 ----A---- C:\Windows\system32\prevhost.exe
2014-11-23 10:03:48 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-11-23 10:03:48 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-11-23 10:03:48 ----A---- C:\Windows\system32\netapi32.dll
2014-11-23 10:03:48 ----A---- C:\Windows\system32\browser.dll
2014-11-23 10:03:48 ----A---- C:\Windows\system32\browcli.dll
2014-11-23 10:03:46 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-11-23 10:03:46 ----A---- C:\Windows\system32\srcore.dll
2014-11-23 10:03:45 ----A---- C:\Windows\system32\msvcrt.dll
2014-11-23 10:03:44 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-11-23 10:03:02 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-11-23 10:02:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-11-23 10:02:46 ----A---- C:\Windows\system32\inetcomm.dll
2014-11-23 10:02:41 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-11-23 10:02:41 ----A---- C:\Windows\system32\EncDec.dll
2014-11-23 10:02:39 ----A---- C:\Windows\system32\drivers\cng.sys
2014-11-23 10:02:15 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-11-23 10:02:15 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-11-23 10:02:15 ----A---- C:\Windows\system32\certutil.exe
2014-11-23 10:02:15 ----A---- C:\Windows\system32\certenc.dll
2014-11-23 10:02:05 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-11-23 10:02:02 ----A---- C:\Windows\system32\msi.dll
2014-11-23 10:02:01 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-11-23 10:02:01 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-23 10:02:01 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-11-23 10:02:01 ----A---- C:\Windows\system32\msihnd.dll
2014-11-23 10:02:01 ----A---- C:\Windows\system32\consent.exe
2014-11-23 10:02:01 ----A---- C:\Windows\system32\authui.dll
2014-11-23 10:02:01 ----A---- C:\Windows\system32\appinfo.dll
2014-11-23 10:01:56 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-11-23 10:01:56 ----A---- C:\Windows\system32\gdi32.dll
2014-11-23 10:01:55 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-11-23 10:01:55 ----A---- C:\Windows\system32\cdosys.dll
2014-11-23 10:01:53 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-11-23 10:01:53 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-11-23 10:01:53 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-11-23 10:01:53 ----A---- C:\Windows\system32\wscript.exe
2014-11-23 10:01:53 ----A---- C:\Windows\system32\scrrun.dll
2014-11-23 10:01:53 ----A---- C:\Windows\system32\cscript.exe
2014-11-23 10:01:52 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-11-23 10:01:51 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-11-23 10:01:51 ----A---- C:\Windows\system32\oleacc.dll
2014-11-23 10:01:50 ----A---- C:\Windows\system32\localspl.dll
2014-11-23 10:01:46 ----A---- C:\Windows\system32\nshwfp.dll
2014-11-23 10:01:46 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-11-23 10:01:46 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-11-23 10:01:45 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-11-23 10:01:45 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-11-23 10:01:42 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-23 10:01:42 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-23 09:47:28 ----A---- C:\Windows\system32\scavengeui.dll
2014-11-23 09:46:35 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-11-23 09:46:35 ----A---- C:\Windows\system32\rpcrt4.dll
2014-11-22 21:21:49 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-11-22 21:21:49 ----A---- C:\Windows\system32\rdpcore.dll
2014-11-22 21:21:49 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-11-22 17:59:05 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-11-22 17:59:05 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-11-22 17:59:05 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-11-22 17:59:05 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-11-22 17:59:04 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-11-22 17:59:04 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-11-22 17:57:50 ----D---- C:\Program Files (x86)\AGEIA Technologies
2014-11-22 17:57:13 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-11-22 17:56:26 ----D---- C:\ProgramData\NVIDIA Corporation
2014-11-22 17:52:48 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-11-22 17:49:13 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-11-22 17:45:09 ----D---- C:\Program Files\NVIDIA Corporation
2014-11-22 16:22:00 ----SHD---- C:\Windows\Installer
2014-11-22 16:12:40 ----A---- C:\Windows\system32\wups2.dll
2014-11-22 16:12:40 ----A---- C:\Windows\system32\wucltux.dll
2014-11-22 16:12:40 ----A---- C:\Windows\system32\wuauclt.exe
2014-11-22 16:12:39 ----A---- C:\Windows\system32\wuaueng.dll
2014-11-22 16:12:14 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-11-22 16:12:14 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-11-22 16:12:14 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-11-22 16:12:14 ----A---- C:\Windows\system32\wups.dll
2014-11-22 16:12:14 ----A---- C:\Windows\system32\wudriver.dll
2014-11-22 16:12:14 ----A---- C:\Windows\system32\wuapi.dll
2014-11-22 16:11:43 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-11-22 16:11:43 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-11-22 16:11:42 ----A---- C:\Windows\system32\wuwebv.dll
2014-11-22 16:11:42 ----A---- C:\Windows\system32\wuapp.exe
2014-11-22 16:11:17 ----D---- C:\Users\Matej\AppData\Roaming\Identities
2014-11-22 16:10:48 ----SD---- C:\Users\Matej\AppData\Roaming\Microsoft
2014-11-22 16:10:48 ----D---- C:\Users\Matej\AppData\Roaming\Media Center Programs
2014-11-22 16:10:36 ----SHD---- C:\Recovery
2014-11-22 16:10:36 ----SHD---- C:\ProgramData\Šablony
2014-11-22 16:10:36 ----SHD---- C:\ProgramData\Plocha
2014-11-22 16:10:36 ----SHD---- C:\ProgramData\Oblíbené položky
2014-11-22 16:10:36 ----SHD---- C:\ProgramData\Nabídka Start
2014-11-22 16:10:36 ----SHD---- C:\ProgramData\Dokumenty
2014-11-22 16:10:36 ----SHD---- C:\ProgramData\Data aplikací
2014-11-22 15:38:25 ----D---- C:\Windows\SoftwareDistribution
2014-11-22 15:36:13 ----D---- C:\Windows\Prefetch
2014-11-22 15:34:40 ----ASH---- C:\hiberfil.sys
2014-11-22 15:34:05 ----D---- C:\Windows\Panther

======List of files/folders modified in the last 3 months======

2015-01-16 19:11:18 ----D---- C:\Windows\Temp
2015-01-16 19:06:15 ----D---- C:\Windows\System32
2015-01-16 19:06:15 ----D---- C:\Windows
2015-01-16 17:48:35 ----D---- C:\Windows\system32\Tasks
2015-01-16 17:47:05 ----D---- C:\Windows\SysWOW64
2015-01-16 17:27:50 ----D---- C:\Windows\system32\config
2015-01-16 17:21:15 ----SHD---- C:\System Volume Information
2015-01-16 17:21:10 ----RD---- C:\Program Files (x86)
2015-01-16 17:21:10 ----A---- C:\Windows\win.ini
2015-01-16 17:17:14 ----RD---- C:\Program Files
2015-01-16 16:10:16 ----D---- C:\Windows\system32\drivers
2015-01-16 16:10:15 ----D---- C:\Windows\system32\DriverStore
2015-01-16 16:10:15 ----D---- C:\Windows\system32\catroot
2015-01-16 16:10:14 ----D---- C:\Windows\inf
2015-01-16 16:07:16 ----D---- C:\Windows\Tasks
2015-01-16 15:57:04 ----RSD---- C:\Windows\assembly
2015-01-16 15:12:31 ----D---- C:\Windows\Logs
2015-01-16 15:06:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-16 14:32:56 ----D---- C:\Windows\SYSWOW64\config
2015-01-14 17:44:36 ----HD---- C:\Program Files\Internet Explorer
2015-01-14 17:34:49 ----HD---- C:\ProgramData
2015-01-14 15:20:19 ----D---- C:\Windows\winsxs
2015-01-14 15:14:15 ----D---- C:\Windows\system32\catroot2
2015-01-12 18:08:25 ----D---- C:\Program Files (x86)\Common Files
2015-01-11 15:18:11 ----D---- C:\Windows\Microsoft.NET
2015-01-08 20:30:35 ----D---- C:\Windows\system32\wdi
2015-01-06 19:17:16 ----D---- C:\Windows\SYSWOW64\en-US
2015-01-06 19:17:15 ----D---- C:\Windows\system32\en-US
2015-01-05 16:35:22 ----D---- C:\Windows\system32\cs-CZ
2015-01-05 16:35:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-01-04 18:25:55 ----D---- C:\Windows\system32\LogFiles
2015-01-02 17:21:43 ----D---- C:\Windows\SYSWOW64\LogFiles
2014-12-28 18:59:15 ----D---- C:\Windows\system32\NDF
2014-12-27 16:37:50 ----D---- C:\Program Files (x86)\MSBuild
2014-12-27 16:37:37 ----D---- C:\Windows\ShellNew
2014-12-27 16:37:22 ----RSD---- C:\Windows\Fonts
2014-12-27 16:37:15 ----SD---- C:\ProgramData\Microsoft
2014-12-27 16:36:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-27 10:55:03 ----D---- C:\Windows\Help
2014-12-26 19:11:07 ----D---- C:\Windows\debug
2014-12-11 19:58:33 ----D---- C:\Windows\rescache
2014-12-11 17:10:12 ----D---- C:\Windows\AppCompat
2014-12-11 17:10:07 ----D---- C:\Windows\PolicyDefinitions
2014-12-11 17:10:05 ----HD---- C:\Program Files (x86)\Internet Explorer
2014-11-24 14:04:56 ----N---- C:\Windows\system32\MpSigStub.exe
2014-11-23 16:38:34 ----D---- C:\Windows\ehome
2014-11-23 16:38:34 ----D---- C:\Program Files\Windows Media Player
2014-11-23 16:38:34 ----D---- C:\Program Files (x86)\Windows Media Player
2014-11-23 16:38:32 ----D---- C:\Program Files\Common Files\System
2014-11-23 14:59:07 ----D---- C:\Windows\SYSWOW64\migration
2014-11-23 14:59:03 ----D---- C:\Windows\system32\migration
2014-11-23 14:59:00 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\it-IT
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\es-ES
2014-11-23 14:58:59 ----D---- C:\Windows\SYSWOW64\el-GR
2014-11-23 14:58:58 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-11-23 14:58:58 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-11-23 14:58:58 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-11-23 14:58:58 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-11-23 14:58:58 ----D---- C:\Windows\SYSWOW64\de-DE
2014-11-23 14:58:58 ----D---- C:\Windows\SYSWOW64\da-DK
2014-11-23 14:58:57 ----D---- C:\Windows\system32\zh-HK
2014-11-23 14:58:57 ----D---- C:\Windows\system32\pt-PT
2014-11-23 14:58:57 ----D---- C:\Windows\system32\pt-BR
2014-11-23 14:58:57 ----D---- C:\Windows\system32\pl-PL
2014-11-23 14:58:57 ----D---- C:\Windows\system32\nl-NL
2014-11-23 14:58:57 ----D---- C:\Windows\system32\ko-KR
2014-11-23 14:58:57 ----D---- C:\Windows\system32\it-IT
2014-11-23 14:58:57 ----D---- C:\Windows\system32\hu-HU
2014-11-23 14:58:57 ----D---- C:\Windows\system32\fr-FR
2014-11-23 14:58:57 ----D---- C:\Windows\system32\el-GR
2014-11-23 14:58:56 ----D---- C:\Windows\system32\zh-TW
2014-11-23 14:58:56 ----D---- C:\Windows\system32\zh-CN
2014-11-23 14:58:56 ----D---- C:\Windows\system32\tr-TR
2014-11-23 14:58:56 ----D---- C:\Windows\system32\sv-SE
2014-11-23 14:58:56 ----D---- C:\Windows\system32\ru-RU
2014-11-23 14:58:56 ----D---- C:\Windows\system32\nb-NO
2014-11-23 14:58:56 ----D---- C:\Windows\system32\ja-JP
2014-11-23 14:58:56 ----D---- C:\Windows\system32\fi-FI
2014-11-23 14:58:56 ----D---- C:\Windows\system32\es-ES
2014-11-23 14:58:56 ----D---- C:\Windows\system32\de-DE
2014-11-23 14:58:56 ----D---- C:\Windows\system32\da-DK
2014-11-23 14:58:53 ----D---- C:\Windows\AppPatch
2014-11-23 14:58:51 ----D---- C:\Program Files\Windows Journal
2014-11-23 14:58:25 ----D---- C:\Windows\SYSWOW64\Dism
2014-11-23 14:58:24 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-11-23 14:58:24 ----D---- C:\Windows\system32\Dism
2014-11-23 14:58:21 ----D---- C:\Program Files\Windows Defender
2014-11-23 14:58:21 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-23 14:58:15 ----D---- C:\Windows\system32\wbem
2014-11-23 14:57:44 ----D---- C:\Windows\system32\Boot
2014-11-23 11:08:36 ----HD---- C:\Záloha
2014-11-22 16:11:11 ----D---- C:\Windows\system32\restore
2014-11-22 16:11:02 ----SHD---- C:\$Recycle.Bin
2014-11-22 16:10:45 ----RD---- C:\Users
2014-11-22 16:10:36 ----D---- C:\Program Files\Windows NT
2014-11-22 15:44:25 ----D---- C:\Windows\system32\CodeIntegrity
2014-11-22 15:39:55 ----D---- C:\Windows\system32\sysprep
2014-11-22 15:38:05 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 436624]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-01-14 283064]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 116728]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-01 4745280]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-08-11 197408]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-11-23 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-07-02 935368]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]

-----------------EOF-----------------
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119315
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: čistka PC

#5 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

Re: čistka PC

#6 Příspěvek od MiranDAA »

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Matej
->Temp folder emptied: 2219569 bytes
->Temporary Internet Files folder emptied: 38438308 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 48403976 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 10154 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1440 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 85,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Matej
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 01162015_192645

Files moved on Reboot...
File move failed. C:\Users\Matej\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\63547c51a55c7182c5c77fb521826c6c_fce8394c8fd8a807_6229ccd76215aea1_0_0.bin scheduled to be moved on reboot.
File move failed. C:\Users\Matej\AppData\Local\Temp\NVIDIA Corporation\NV_Cache\63547c51a55c7182c5c77fb521826c6c_fce8394c8fd8a807_6229ccd76215aea1_0_0.toc scheduled to be moved on reboot.
C:\Users\Matej\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Matej\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

Re: čistka PC

#7 Příspěvek od MiranDAA »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Matej at 2015-01-16 19:29:54
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 339 GB (79%) free of 432 GB
Total RAM: 3959 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:29:59, on 16.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Matej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5787 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
taskeng.exe {7F400877-62A3-4E5E-82DB-D3E9CD321D73}
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-0d3f6944-a996-4303-bf22-4ab25d52cb83 -SystemEventPortName:HostProcess-852e2653-2708-44f2-afe4-5fd80ee9346d -IoCancelEventPortName:HostProcess-59a4cb1e-879e-44b2-b858-686aba902278 -NonStateChangingEventPortName:HostProcess-a3d05517-8f80-470c-b63b-bc204ceaca0b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e9e485b3-09a1-4cc5-a0c2-731c280c2946 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Matej\Aplikace\RSIT x64\RSIT.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\Matej\AppData\Roaming\Mozilla\Firefox\Profiles\5hklrdug.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-11-23 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-23 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-23 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07 507776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Matej^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-10 5227112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1
"SynchronousMachineGroupPolicy"=1
"SynchronousUserGroupPolicy"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.xtor"=DxtoryCodec.dll
"VIDC.LAGS"=lagarith.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-16 19:26:45 ----D---- C:\_OTM
2015-01-16 17:47:03 ----A---- C:\Windows\SYSWOW64\granny2.dll
2015-01-16 17:45:56 ----A---- C:\Windows\SYSWOW64\rockalldll.dll
2015-01-16 17:09:40 ----D---- C:\Program Files\Yamicsoft
2015-01-16 16:01:31 ----D---- C:\rsit
2015-01-16 15:57:37 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-01-16 15:57:37 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-01-16 15:57:34 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2015-01-16 15:57:34 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-01-16 15:17:50 ----D---- C:\Program Files (x86)\DirectX
2015-01-14 17:34:49 ----D---- C:\ProgramData\Mozilla
2015-01-14 15:23:44 ----D---- C:\ProgramData\Logs
2015-01-14 15:23:43 ----D---- C:\ProgramData\TEMP
2015-01-14 15:13:59 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2015-01-14 15:13:52 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2015-01-12 18:03:09 ----D---- C:\Program Files (x86)\Microsoft Games
2015-01-11 19:19:58 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-01-11 11:36:00 ----A---- C:\Windows\system32\lagarith.dll
2015-01-11 11:35:59 ----A---- C:\Windows\unins000.exe
2015-01-11 11:35:59 ----A---- C:\Windows\unins000.dat
2015-01-06 19:17:01 ----D---- C:\Windows\Migration
2015-01-02 17:17:32 ----D---- C:\Program Files\CCleaner
2015-01-02 12:26:57 ----D---- C:\Program Files (x86)\Prime95
2015-01-01 16:01:41 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-01-01 10:01:08 ----D---- C:\Users\Matej\AppData\Roaming\vlc
2015-01-01 10:00:14 ----D---- C:\Program Files (x86)\VideoLAN
2014-12-27 20:08:08 ----D---- C:\Users\Matej\AppData\Roaming\NVIDIA
2014-12-27 20:05:11 ----D---- C:\Users\Matej\AppData\Roaming\Macromedia
2014-12-27 20:01:48 ----D---- C:\Windows\SYSWOW64\Macromed
2014-12-27 20:01:47 ----D---- C:\Windows\system32\Macromed
2014-12-27 16:38:02 ----D---- C:\Program Files (x86)\Microsoft Works
2014-12-27 16:37:39 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2014-12-27 16:37:15 ----D---- C:\Windows\PCHEALTH
2014-12-27 16:35:17 ----D---- C:\Program Files\Microsoft Office
2014-12-27 16:35:12 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-12-27 16:34:26 ----D---- C:\Program Files (x86)\Microsoft Office
2014-12-27 16:33:37 ----RHD---- C:\MSOCache
2014-12-27 12:15:05 ----D---- C:\Program Files\Defraggler
2014-12-27 10:55:03 ----A---- C:\Windows\SYSWOW64\oemdspif.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvvsvc.exe
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvsvc64.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvshext.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvmctray.dll
2014-12-27 10:55:03 ----A---- C:\Windows\system32\nvcpl.dll
2014-12-27 10:54:53 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-12-27 10:54:53 ----A---- C:\Windows\system32\OpenCL.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-12-27 10:52:06 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvopencl.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvoglv64.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvhdap64.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2014-12-27 10:52:06 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-12-27 10:52:06 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-12-27 10:52:05 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\NvIFR64.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\NvFBC64.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvdispgenco6434052.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvdispco6434052.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcuvid.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcuda.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvcompiler.dll
2014-12-27 10:52:05 ----A---- C:\Windows\system32\nvapi64.dll
2014-12-27 10:23:15 ----D---- C:\Users\Matej\AppData\Roaming\Mozilla
2014-12-27 10:23:06 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-27 10:17:22 ----D---- C:\Program Files\IrfanView
2014-12-27 10:16:32 ----D---- C:\Users\Matej\AppData\Roaming\IrfanView
2014-12-27 10:16:31 ----D---- C:\Program Files (x86)\IrfanView
2014-12-24 21:19:15 ----D---- C:\Dxtory
2014-12-24 21:08:46 ----A---- C:\Windows\system32\DxtoryCodec.dll
2014-12-24 21:08:45 ----A---- C:\Windows\SYSWOW64\DxtoryCodec.dll
2014-12-24 21:08:44 ----D---- C:\Program Files (x86)\ExKode
2014-12-24 10:58:59 ----HD---- C:\AdwCleaner
2014-12-23 19:38:37 ----D---- C:\Users\Matej\AppData\Roaming\Polda 6
2014-12-23 19:31:25 ----D---- C:\Program Files (x86)\Polda6
2014-12-21 17:30:26 ----D---- C:\Users\Matej\AppData\Roaming\Publish Providers
2014-12-21 17:16:03 ----D---- C:\ProgramData\Sony
2014-12-21 17:16:03 ----D---- C:\Program Files\Sony
2014-12-21 17:16:03 ----D---- C:\Program Files (x86)\Sony
2014-12-21 17:08:09 ----D---- C:\Users\Matej\AppData\Roaming\Sony
2014-12-21 12:24:14 ----D---- C:\ProgramData\NVIDIA
2014-12-21 11:53:48 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-12-21 11:53:48 ----A---- C:\Windows\system32\DWrite.dll
2014-12-20 18:52:14 ----D---- C:\Users\Matej\AppData\Roaming\Audacity
2014-12-20 18:51:54 ----D---- C:\Program Files (x86)\Audacity
2014-12-19 12:02:13 ----D---- C:\Users\Matej\AppData\Roaming\Skype
2014-12-19 12:02:00 ----RD---- C:\Program Files (x86)\Skype
2014-12-19 12:01:54 ----D---- C:\ProgramData\Skype
2014-12-19 09:32:27 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-12-19 09:32:27 ----A---- C:\Windows\system32\ieUnatt.exe

======List of files/folders modified in the last 1 month======

2015-01-16 19:29:58 ----D---- C:\Program Files\trend micro
2015-01-16 19:28:27 ----D---- C:\Windows\Temp
2015-01-16 19:27:20 ----D---- C:\Windows
2015-01-16 19:21:43 ----D---- C:\Users\Matej\AppData\Roaming\Media Player Classic
2015-01-16 19:06:15 ----D---- C:\Windows\System32
2015-01-16 17:48:35 ----D---- C:\Windows\system32\Tasks
2015-01-16 17:47:05 ----D---- C:\Windows\SysWOW64
2015-01-16 17:27:50 ----D---- C:\Windows\system32\config
2015-01-16 17:21:15 ----SHD---- C:\System Volume Information
2015-01-16 17:21:10 ----RD---- C:\Program Files (x86)
2015-01-16 17:21:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-01-16 17:21:10 ----A---- C:\Windows\win.ini
2015-01-16 17:17:14 ----RD---- C:\Program Files
2015-01-16 17:09:53 ----SHD---- C:\Windows\Installer
2015-01-16 16:10:17 ----D---- C:\ProgramData\NVIDIA Corporation
2015-01-16 16:10:17 ----D---- C:\Program Files\NVIDIA Corporation
2015-01-16 16:10:17 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-01-16 16:10:16 ----D---- C:\Windows\system32\drivers
2015-01-16 16:10:15 ----D---- C:\Windows\system32\DriverStore
2015-01-16 16:10:15 ----D---- C:\Windows\system32\catroot
2015-01-16 16:10:14 ----D---- C:\Windows\inf
2015-01-16 16:07:16 ----D---- C:\Windows\Tasks
2015-01-16 16:06:56 ----D---- C:\Users\Matej\AppData\Roaming\uTorrent
2015-01-16 15:57:04 ----RSD---- C:\Windows\assembly
2015-01-16 15:12:31 ----D---- C:\Windows\Logs
2015-01-16 15:12:28 ----D---- C:\Windows\SYSWOW64\directx
2015-01-16 15:06:33 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-16 14:32:56 ----D---- C:\Windows\SYSWOW64\config
2015-01-14 17:44:36 ----HD---- C:\Program Files\Internet Explorer
2015-01-14 17:34:49 ----HD---- C:\ProgramData
2015-01-14 15:20:19 ----D---- C:\Windows\winsxs
2015-01-14 15:14:15 ----D---- C:\Windows\system32\catroot2
2015-01-12 18:08:25 ----D---- C:\Program Files (x86)\Common Files
2015-01-12 17:59:13 ----D---- C:\Users\Matej\AppData\Roaming\DAEMON Tools Lite
2015-01-11 15:18:11 ----D---- C:\Windows\Microsoft.NET
2015-01-11 11:47:49 ----D---- C:\Users\Matej\AppData\Roaming\.minecraft
2015-01-10 15:38:59 ----D---- C:\Windows\pss
2015-01-08 20:30:35 ----D---- C:\Windows\system32\wdi
2015-01-07 14:44:49 ----D---- C:\Windows\SoftwareDistribution
2015-01-06 19:19:20 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-01-06 19:17:16 ----D---- C:\Windows\SYSWOW64\en-US
2015-01-06 19:17:15 ----D---- C:\Windows\system32\en-US
2015-01-06 19:17:05 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-01-06 19:14:17 ----D---- C:\Windows\Prefetch
2015-01-05 16:35:22 ----D---- C:\Windows\system32\cs-CZ
2015-01-05 16:35:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-01-05 16:01:07 ----SD---- C:\Users\Matej\AppData\Roaming\Microsoft
2015-01-04 18:25:55 ----D---- C:\Windows\system32\LogFiles
2015-01-02 17:21:43 ----D---- C:\Windows\SYSWOW64\LogFiles
2014-12-28 18:59:15 ----D---- C:\Windows\system32\NDF
2014-12-27 16:39:36 ----D---- C:\ProgramData\Microsoft Help
2014-12-27 16:37:50 ----D---- C:\Program Files (x86)\MSBuild
2014-12-27 16:37:37 ----D---- C:\Windows\ShellNew
2014-12-27 16:37:22 ----RSD---- C:\Windows\Fonts
2014-12-27 16:37:15 ----SD---- C:\ProgramData\Microsoft
2014-12-27 16:36:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-12-27 10:55:03 ----D---- C:\Windows\Help
2014-12-26 19:11:08 ----D---- C:\Windows\Panther
2014-12-26 19:11:07 ----D---- C:\Windows\debug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 436624]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-01-14 283064]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 116728]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-01 4745280]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-08-11 197408]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-11-23 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-07-02 935368]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]

-----------------EOF-----------------
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119315
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: čistka PC

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

Re: čistka PC

#9 Příspěvek od MiranDAA »

Hotovo.
Jinak na fóru doporučujete i win7 manager, tak ho už používám :)
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119315
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: čistka PC

#10 Příspěvek od Rudy »

MiranDAA píše:Hotovo.
Jinak na fóru doporučujete i win7 manager, tak ho už používám :)
To je ovšem program na opravu systému, nikoli na čištění.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

Re: čistka PC

#11 Příspěvek od MiranDAA »

Pardon :oops:
Myslel jsem, že když to čistí registry a tak, tak je to čistič.

Už je PC čistý?
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119315
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: čistka PC

#12 Příspěvek od Rudy »

MiranDAA píše:....Už je PC čistý?
Měl by být. :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

MiranDAA
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 117
Registrován: 03 srp 2014 16:34

Re: čistka PC

#13 Příspěvek od MiranDAA »

Super, díky za pomoc! :)

:193:
---------------------------------
Tykejte mi :-)

Čistič: http://www.slunecnice.cz/sw/ccleaner/stahnout/ - Ccleaner Free
Antivir: http://www.slunecnice.cz/sw/avast-free- ... /stahnout/ - Avast! Free
Logy: http://images.malwareremoval.com/random/RSIT.exe - RSIT
Internetový prohlížeč: https://www.google.com/chrome/browser/#eula - Google Chrome (případně Maxthon)

Můj setup:
Notebook: Lenovo G560, Koupeno: Prosinec 2010 , Procesor: Intel i3, 2 jádra, 4 thready, takt 2,4ghz, RAM: 4GB, HDD: 500GB, Windows: Windows 7 Home Premium,
Grafika: NVIDIA GeForce 310M 512MB

---------------------------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119315
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: čistka PC

#14 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno