Prosím o preventivku.

Zpráva

RacKastab · #1 Příspěvek od **RacKastab** » 13 dub 2015 07:20

Dobrý den, potřeboval bych kouknout na tento log jestli je vše jak má být. Předem děkuji!

Logfile of random's system information tool 1.10 (written by random/random)
Run by notebook at 2015-04-13 08:20:11
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 332 GB (70%) free of 477 GB
Total RAM: 6007 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:20:16, on 13.4.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Battle.net\Agent\Agent.3918\Agent.exe
C:\Program Files (x86)\Battle.net\Battle.net.5669\Battle.net.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\notebook.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gfe_rd=cr&ei=bNQ ... gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [BitTorrent] "C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6984 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 37722704
\??\C:\Windows\system32\conhost.exe "-440426517777715082-663370219-1541250247-20621984031026642925-1818120873540547353
atieclxx
C:\Windows\System32\spoolsv.exe
"C:\Windows\system32\Dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3920.0.1538642186\171213536" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x1002 --gpu-device-id=0x68e0 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=14.501.1003.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A2_Stable_R7_Postperiod/PasswordGeneration/Disabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3920 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3920.4.61780890\190851294" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3920.5.1034498938\1732460896" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files\Microsoft Security Client\msseces.exe"
C:\Windows\system32\sppsvc.exe
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\ProgramData\Battle.net\Agent\Agent.3918\Agent.exe" --locale=enGB --session=1300645552331017220
\??\C:\Windows\system32\conhost.exe "494879078103998326-1375866786-879191554-155707384568890049353207861-34260032
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Battle.net\Battle.net.5669\Battle.net.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/Hivemind_A2_Stable_R7_Postperiod/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/Disabled/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3920 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3920.7.2072367145\1496971212" /prefetch:673131151
C:\Windows\servicing\TrustedInstaller.exe
"C:\Users\notebook\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-04-03 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-04-03 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-03 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-03 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-01-30 1332296]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-02-26 31346784]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088]
"BitTorrent"=C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe [2015-03-17 1692248]
"DAEMON Tools Pro Agent"=C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [2012-10-23 3108480]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-03-24 2888896]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-11-20 767176]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-06-22 968272]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-03-07 335232]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-04-13 08:20:11 ----D---- C:\rsit
2015-04-13 08:20:11 ----D---- C:\Program Files\trend micro
2015-04-12 11:05:49 ----D---- C:\Program Files (x86)\Heroes of the Storm
2015-04-10 03:23:27 ----D---- C:\Program Files (x86)\Hearthstone
2015-04-10 02:02:08 ----D---- C:\Users\notebook\AppData\Roaming\Battle.net
2015-04-10 02:01:31 ----D---- C:\ProgramData\Blizzard Entertainment
2015-04-10 02:01:31 ----D---- C:\Program Files (x86)\Battle.net
2015-04-10 01:48:32 ----D---- C:\ProgramData\Battle.net
2015-04-04 23:01:15 ----SD---- C:\Windows\SYSWOW64\GWX
2015-04-04 23:01:13 ----SD---- C:\Windows\system32\GWX
2015-04-04 18:56:34 ----D---- C:\Users\notebook\AppData\Roaming\Ubisoft
2015-04-04 18:56:34 ----D---- C:\ProgramData\Ubisoft
2015-04-04 17:52:43 ----D---- C:\Hry
2015-04-03 23:23:23 ----D---- C:\Windows\SYSWOW64\Adobe
2015-04-03 04:53:52 ----D---- C:\Users\notebook\AppData\Roaming\JetBrains
2015-04-03 04:50:28 ----A---- C:\HaxLogs.txt
2015-04-03 04:50:07 ----DC---- C:\Windows\system32\DRVSTORE
2015-04-03 04:50:07 ----A---- C:\Windows\system32\drivers\IntelHaxm.sys
2015-04-03 04:50:06 ----D---- C:\Program Files\Intel
2015-04-03 04:39:42 ----D---- C:\Program Files\Android
2015-04-03 04:38:18 ----A---- C:\Windows\system32\javaws.exe
2015-04-03 04:38:05 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll
2015-04-03 04:38:05 ----A---- C:\Windows\system32\javaw.exe
2015-04-03 04:38:05 ----A---- C:\Windows\system32\java.exe
2015-04-03 04:36:30 ----D---- C:\Program Files\Java
2015-04-03 04:29:38 ----D---- C:\ProgramData\Sun
2015-04-03 04:29:31 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2015-04-03 04:28:59 ----D---- C:\ProgramData\Oracle
2015-04-03 04:28:55 ----D---- C:\Program Files (x86)\Java
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsvousb.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsvcom.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghstrace.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsnmea.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsnet.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsmdm.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsdiagmdm.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsdiag.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\zghsat.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\massfilter_hs.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\ghsnmea.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\ghsmdm.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\ghsdiagMDM.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\ghsdiagAP.sys
2015-04-03 04:26:25 ----A---- C:\Windows\system32\drivers\ghsat.sys
2015-04-03 04:26:20 ----A---- C:\Windows\AdbWinUsbApi.dll
2015-04-03 04:26:20 ----A---- C:\Windows\AdbWinApi.dll
2015-04-03 04:26:20 ----A---- C:\Windows\adb.exe
2015-04-03 04:26:19 ----D---- C:\Program Files\ZTE Handset USB Driver
2015-04-02 09:33:05 ----D---- C:\Program Files\DIFX
2015-03-28 11:44:23 ----D---- C:\ProgramData\Steam
2015-03-26 17:04:14 ----D---- C:\ProgramData\ALI213
2015-03-26 16:58:13 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2015-03-26 16:58:13 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2015-03-26 16:58:13 ----A---- C:\Windows\system32\d3dx10_40.dll
2015-03-26 16:58:13 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2015-03-26 16:58:11 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2015-03-26 16:58:11 ----A---- C:\Windows\system32\D3DX9_40.dll
2015-03-26 15:51:17 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-03-25 16:46:48 ----A---- C:\Windows\system32\appraiser.dll
2015-03-25 16:46:48 ----A---- C:\Windows\system32\acmigration.dll
2015-03-25 16:46:47 ----A---- C:\Windows\system32\invagent.dll
2015-03-25 16:46:47 ----A---- C:\Windows\system32\generaltel.dll
2015-03-25 16:46:47 ----A---- C:\Windows\system32\devinv.dll
2015-03-25 16:46:47 ----A---- C:\Windows\system32\aepic.dll
2015-03-25 16:46:47 ----A---- C:\Windows\system32\aepdu.dll
2015-03-25 16:46:47 ----A---- C:\Windows\system32\aeinv.dll
2015-03-24 18:43:47 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2015-03-24 18:43:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2015-03-24 18:43:47 ----A---- C:\Windows\system32\XAudio2_7.dll
2015-03-24 18:43:47 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2015-03-24 18:43:46 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2015-03-24 18:43:46 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2015-03-24 18:43:46 ----A---- C:\Windows\system32\xactengine3_7.dll
2015-03-24 18:43:46 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2015-03-24 18:43:45 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2015-03-24 18:43:45 ----A---- C:\Windows\system32\d3dcsx_43.dll
2015-03-24 18:43:44 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2015-03-24 18:43:44 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2015-03-24 18:43:44 ----A---- C:\Windows\system32\d3dx11_43.dll
2015-03-24 18:43:44 ----A---- C:\Windows\system32\d3dx10_43.dll
2015-03-24 18:43:43 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2015-03-24 18:43:43 ----A---- C:\Windows\system32\D3DX9_43.dll
2015-03-24 18:43:42 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2015-03-24 18:43:42 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2015-03-24 18:43:42 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2015-03-24 18:43:42 ----A---- C:\Windows\system32\XAudio2_6.dll
2015-03-24 18:43:42 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2015-03-24 18:43:42 ----A---- C:\Windows\system32\xactengine3_6.dll
2015-03-24 18:43:41 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2015-03-24 18:43:41 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2015-03-24 18:43:40 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2015-03-24 18:43:40 ----A---- C:\Windows\system32\XAudio2_5.dll
2015-03-24 18:43:39 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2015-03-24 18:43:39 ----A---- C:\Windows\system32\xactengine3_5.dll
2015-03-24 18:43:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2015-03-24 18:43:38 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2015-03-24 18:43:37 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2015-03-24 18:43:37 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2015-03-24 18:43:37 ----A---- C:\Windows\system32\d3dx11_42.dll
2015-03-24 18:43:37 ----A---- C:\Windows\system32\d3dcsx_42.dll
2015-03-24 18:43:36 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2015-03-24 18:43:36 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2015-03-24 18:43:36 ----A---- C:\Windows\system32\D3DX9_42.dll
2015-03-24 18:43:36 ----A---- C:\Windows\system32\d3dx10_42.dll
2015-03-24 18:43:35 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2015-03-24 18:43:35 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2015-03-24 18:43:35 ----A---- C:\Windows\system32\d3dx10_41.dll
2015-03-24 18:43:35 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2015-03-24 18:43:34 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2015-03-24 18:43:34 ----A---- C:\Windows\system32\D3DX9_41.dll
2015-03-24 18:43:33 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2015-03-24 18:43:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2015-03-24 18:43:33 ----A---- C:\Windows\system32\XAudio2_4.dll
2015-03-24 18:43:33 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2015-03-24 18:43:32 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2015-03-24 18:43:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2015-03-24 18:43:32 ----A---- C:\Windows\system32\xactengine3_4.dll
2015-03-24 18:43:32 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2015-03-24 18:43:30 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2015-03-24 18:43:30 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2015-03-24 18:43:30 ----A---- C:\Windows\system32\XAudio2_3.dll
2015-03-24 18:43:30 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2015-03-24 18:43:29 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2015-03-24 18:43:29 ----A---- C:\Windows\system32\xactengine3_3.dll
2015-03-24 18:43:28 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2015-03-24 18:43:28 ----A---- C:\Windows\system32\XAudio2_2.dll
2015-03-24 18:43:28 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2015-03-24 18:43:28 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2015-03-24 18:43:27 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2015-03-24 18:43:27 ----A---- C:\Windows\system32\xactengine3_2.dll
2015-03-24 18:43:26 ----A---- C:\Windows\system32\D3DX9_39.dll
2015-03-24 18:43:26 ----A---- C:\Windows\system32\d3dx10_39.dll
2015-03-24 18:43:26 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2015-03-24 18:43:25 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2015-03-24 18:43:25 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2015-03-24 18:43:25 ----A---- C:\Windows\system32\XAudio2_1.dll
2015-03-24 18:43:25 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2015-03-24 18:43:24 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2015-03-24 18:43:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2015-03-24 18:43:24 ----A---- C:\Windows\system32\xactengine3_1.dll
2015-03-24 18:43:24 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2015-03-24 18:43:23 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2015-03-24 18:43:23 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2015-03-24 18:43:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2015-03-24 18:43:23 ----A---- C:\Windows\system32\D3DX9_38.dll
2015-03-24 18:43:23 ----A---- C:\Windows\system32\d3dx10_38.dll
2015-03-24 18:43:23 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2015-03-24 18:43:22 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2015-03-24 18:43:22 ----A---- C:\Windows\system32\XAudio2_0.dll
2015-03-24 18:43:20 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2015-03-24 18:43:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2015-03-24 18:43:20 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2015-03-24 18:43:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2015-03-24 18:43:20 ----A---- C:\Windows\system32\xactengine3_0.dll
2015-03-24 18:43:20 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2015-03-24 18:43:20 ----A---- C:\Windows\system32\d3dx10_37.dll
2015-03-24 18:43:20 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2015-03-24 18:43:19 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2015-03-24 18:43:19 ----A---- C:\Windows\system32\D3DX9_37.dll
2015-03-24 18:43:18 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2015-03-24 18:43:18 ----A---- C:\Windows\system32\xactengine2_10.dll
2015-03-24 18:43:17 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2015-03-24 18:43:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2015-03-24 18:43:17 ----A---- C:\Windows\system32\d3dx10_36.dll
2015-03-24 18:43:17 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2015-03-24 18:43:16 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2015-03-24 18:43:16 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2015-03-24 18:43:16 ----A---- C:\Windows\system32\xactengine2_9.dll
2015-03-24 18:43:16 ----A---- C:\Windows\system32\d3dx9_36.dll
2015-03-24 18:43:15 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2015-03-24 18:43:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2015-03-24 18:43:15 ----A---- C:\Windows\system32\d3dx10_35.dll
2015-03-24 18:43:15 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2015-03-24 18:43:14 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2015-03-24 18:43:14 ----A---- C:\Windows\system32\d3dx9_35.dll
2015-03-24 18:43:13 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2015-03-24 18:43:13 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2015-03-24 18:43:13 ----A---- C:\Windows\system32\xactengine2_8.dll
2015-03-24 18:43:13 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2015-03-24 18:43:12 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2015-03-24 18:43:12 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2015-03-24 18:43:12 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2015-03-24 18:43:12 ----A---- C:\Windows\system32\d3dx9_34.dll
2015-03-24 18:43:12 ----A---- C:\Windows\system32\d3dx10_34.dll
2015-03-24 18:43:12 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2015-03-24 18:43:11 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2015-03-24 18:43:11 ----A---- C:\Windows\system32\xinput1_3.dll
2015-03-24 18:43:10 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2015-03-24 18:43:10 ----A---- C:\Windows\system32\xactengine2_7.dll
2015-03-24 18:43:09 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2015-03-24 18:43:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2015-03-24 18:43:09 ----A---- C:\Windows\system32\d3dx10_33.dll
2015-03-24 18:43:09 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2015-03-24 18:43:08 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2015-03-24 18:43:08 ----A---- C:\Windows\system32\d3dx9_33.dll
2015-03-24 18:43:07 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2015-03-24 18:43:07 ----A---- C:\Windows\system32\xactengine2_6.dll
2015-03-24 18:43:06 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2015-03-24 18:43:06 ----A---- C:\Windows\system32\xactengine2_5.dll
2015-03-24 18:43:04 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2015-03-24 18:43:04 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2015-03-24 18:43:04 ----A---- C:\Windows\system32\d3dx9_32.dll
2015-03-24 18:43:04 ----A---- C:\Windows\system32\d3dx10.dll
2015-03-24 18:43:03 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2015-03-24 18:43:03 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2015-03-24 18:43:03 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2015-03-24 18:43:03 ----A---- C:\Windows\system32\xactengine2_4.dll
2015-03-24 18:43:03 ----A---- C:\Windows\system32\x3daudio1_1.dll
2015-03-24 18:43:03 ----A---- C:\Windows\system32\d3dx9_31.dll
2015-03-24 18:43:02 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2015-03-24 18:43:02 ----A---- C:\Windows\system32\xactengine2_3.dll
2015-03-24 18:43:01 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2015-03-24 18:43:01 ----A---- C:\Windows\system32\xinput1_2.dll
2015-03-24 18:43:00 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2015-03-24 18:43:00 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2015-03-24 18:43:00 ----A---- C:\Windows\system32\xinput1_1.dll
2015-03-24 18:43:00 ----A---- C:\Windows\system32\xactengine2_2.dll
2015-03-24 18:42:59 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2015-03-24 18:42:59 ----A---- C:\Windows\system32\xactengine2_1.dll
2015-03-24 18:42:51 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2015-03-24 18:42:51 ----A---- C:\Windows\system32\d3dx9_30.dll
2015-03-24 18:42:48 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2015-03-24 18:42:48 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2015-03-24 18:42:48 ----A---- C:\Windows\system32\xactengine2_0.dll
2015-03-24 18:42:48 ----A---- C:\Windows\system32\x3daudio1_0.dll
2015-03-24 18:42:47 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2015-03-24 18:42:47 ----A---- C:\Windows\system32\d3dx9_29.dll
2015-03-24 18:42:46 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2015-03-24 18:42:46 ----A---- C:\Windows\system32\d3dx9_28.dll
2015-03-24 18:42:45 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2015-03-24 18:42:45 ----A---- C:\Windows\system32\d3dx9_27.dll
2015-03-24 18:42:44 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2015-03-24 18:42:44 ----A---- C:\Windows\system32\d3dx9_26.dll
2015-03-24 18:42:43 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2015-03-24 18:42:43 ----A---- C:\Windows\system32\d3dx9_25.dll
2015-03-24 18:42:41 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2015-03-24 18:42:41 ----A---- C:\Windows\system32\d3dx9_24.dll
2015-03-24 17:51:14 ----HD---- C:\Windows\msdownld.tmp
2015-03-24 17:51:14 ----D---- C:\Windows\SYSWOW64\directx
2015-03-24 17:44:03 ----D---- C:\Games
2015-03-24 15:39:32 ----D---- C:\Users\notebook\AppData\Roaming\LolClient
2015-03-24 15:39:30 ----D---- C:\Users\notebook\AppData\Roaming\Macromedia
2015-03-22 12:10:46 ----D---- C:\Program Files (x86)\Steam
2015-03-18 01:58:00 ----D---- C:\Program Files (x86)\OpenAL
2015-03-18 01:58:00 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2015-03-18 01:58:00 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2015-03-18 01:58:00 ----A---- C:\Windows\system32\wrap_oal.dll
2015-03-18 01:58:00 ----A---- C:\Windows\system32\OpenAL32.dll
2015-03-18 01:52:43 ----D---- C:\Gamesy
2015-03-18 01:43:50 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2015-03-18 01:43:43 ----D---- C:\Users\notebook\AppData\Roaming\DAEMON Tools Pro
2015-03-18 01:43:24 ----D---- C:\Program Files (x86)\DAEMON Tools Pro
2015-03-18 01:43:03 ----D---- C:\ProgramData\DAEMON Tools Pro
2015-03-18 01:37:21 ----D---- C:\ProgramData\DAEMON Tools Lite
2015-03-17 13:36:31 ----D---- C:\Users\notebook\AppData\Roaming\OpenCandy
2015-03-17 13:13:20 ----D---- C:\Users\notebook\AppData\Roaming\BitTorrent
2015-03-17 03:43:21 ----D---- C:\ProgramData\Riot Games
2015-03-17 03:39:55 ----D---- C:\Riot Games
2015-03-17 03:33:10 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2015-03-17 03:33:10 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2015-03-17 03:33:10 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2015-03-17 03:33:10 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2015-03-17 03:33:09 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2015-03-17 03:16:23 ----D---- C:\Program Files\CCleaner
2015-03-17 03:15:13 ----D---- C:\Users\notebook\AppData\Roaming\Riot Games
2015-03-17 01:27:43 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\system32\KBDYAK.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\system32\KBDTAT.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\system32\KBDRU1.DLL
2015-03-17 01:27:43 ----A---- C:\Windows\system32\KBDRU.DLL
2015-03-17 01:27:42 ----A---- C:\Windows\system32\KBDBASH.DLL
2015-03-17 01:10:24 ----SD---- C:\Windows\system32\CompatTel
2015-03-17 01:10:24 ----D---- C:\Windows\system32\appraiser
2015-03-17 00:48:51 ----D---- C:\Windows\SYSWOW64\Wat
2015-03-17 00:48:47 ----D---- C:\Windows\system32\Wat
2015-03-17 00:46:48 ----D---- C:\Program Files\CPUID
2015-03-17 00:45:12 ----D---- C:\Program Files (x86)\Google
2015-03-14 09:55:04 ----D---- C:\Windows\system32\MRT
2015-03-14 09:55:02 ----A---- C:\Windows\system32\MRT.exe
2015-03-14 09:48:30 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2015-03-14 09:48:30 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2015-03-14 09:43:15 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-14 09:43:15 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-14 09:43:15 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-14 09:43:15 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-14 09:43:15 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-14 09:43:14 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-14 09:43:14 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-14 09:43:14 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-14 09:43:14 ----A---- C:\Windows\system32\iernonce.dll
2015-03-14 09:43:14 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-14 09:43:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-14 09:43:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-14 09:43:13 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-14 09:43:13 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-14 09:43:13 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-14 09:43:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-14 09:43:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-14 09:43:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-14 09:43:11 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-14 09:43:11 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-14 09:43:11 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-14 09:43:11 ----A---- C:\Windows\system32\urlmon.dll
2015-03-14 09:43:11 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-14 09:43:11 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-14 09:43:10 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-14 09:43:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-14 09:43:10 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-14 09:43:10 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-14 09:43:10 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-14 09:43:10 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-14 09:43:09 ----A---- C:\Windows\system32\iesetup.dll
2015-03-14 09:43:09 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-14 09:43:08 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-14 09:43:08 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-14 09:43:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-14 09:43:08 ----A---- C:\Windows\system32\iertutil.dll
2015-03-14 09:43:07 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-14 09:43:07 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-14 09:43:07 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-14 09:43:07 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-14 09:43:07 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-14 09:43:06 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-14 09:43:06 ----A---- C:\Windows\system32\ieui.dll
2015-03-14 09:43:06 ----A---- C:\Windows\system32\ieframe.dll
2015-03-14 09:43:05 ----A---- C:\Windows\system32\wininet.dll
2015-03-14 09:43:05 ----A---- C:\Windows\system32\vbscript.dll
2015-03-14 09:43:05 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-14 09:43:05 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-14 09:43:05 ----A---- C:\Windows\system32\jscript9.dll
2015-03-14 09:43:04 ----A---- C:\Windows\system32\msrating.dll
2015-03-14 09:43:04 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-14 09:43:03 ----A---- C:\Windows\system32\mshtml.dll
2015-03-14 09:42:33 ----A---- C:\Windows\system32\blackbox.dll
2015-03-14 09:42:32 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-14 09:42:32 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-14 09:42:32 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-14 09:42:32 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-14 09:42:31 ----A---- C:\Windows\system32\wmp.dll
2015-03-14 09:42:29 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-14 09:42:29 ----A---- C:\Windows\system32\mf.dll
2015-03-14 09:42:28 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-14 09:42:28 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-14 09:42:28 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-14 09:42:27 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-14 09:42:26 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-14 09:42:26 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-14 09:42:25 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-14 09:42:25 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-14 09:42:25 ----A---- C:\Windows\system32\crypt32.dll
2015-03-14 09:42:24 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-14 09:42:24 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-14 09:42:24 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-14 09:42:24 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-14 09:42:23 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-14 09:42:23 ----A---- C:\Windows\system32\wintrust.dll
2015-03-14 09:42:23 ----A---- C:\Windows\system32\quartz.dll
2015-03-14 09:42:23 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-14 09:42:22 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-14 09:42:22 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-14 09:42:22 ----A---- C:\Windows\system32\evr.dll
2015-03-14 09:42:22 ----A---- C:\Windows\system32\cryptui.dll
2015-03-14 09:42:21 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-14 09:42:21 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-14 09:42:21 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-14 09:42:21 ----A---- C:\Windows\system32\qdvd.dll
2015-03-14 09:42:21 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-14 09:42:21 ----A---- C:\Windows\system32\mfplat.dll
2015-03-14 09:42:21 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-14 09:42:20 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-14 09:42:20 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-14 09:42:20 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-14 09:42:20 ----A---- C:\Windows\system32\srcore.dll
2015-03-14 09:42:20 ----A---- C:\Windows\system32\EncDump.dll
2015-03-14 09:42:20 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-14 09:42:20 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-14 09:42:20 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-14 09:42:20 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-14 09:42:19 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-14 09:42:19 ----A---- C:\Windows\system32\msscp.dll
2015-03-14 09:42:19 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-14 09:42:19 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-14 09:42:18 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-14 09:42:18 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-14 09:42:18 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-14 09:42:18 ----A---- C:\Windows\system32\rstrui.exe
2015-03-14 09:42:18 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-14 09:42:18 ----A---- C:\Windows\system32\audiodg.exe
2015-03-14 09:42:18 ----A---- C:\Windows\system32\appidapi.dll
2015-03-14 09:42:17 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-14 09:42:17 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-14 09:42:17 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-14 09:42:17 ----A---- C:\Windows\system32\smss.exe
2015-03-14 09:42:17 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-14 09:42:17 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-14 09:42:17 ----A---- C:\Windows\system32\pcadm.dll
2015-03-14 09:42:17 ----A---- C:\Windows\system32\mfps.dll
2015-03-14 09:42:17 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-14 09:42:16 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-14 09:42:16 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-14 09:42:16 ----A---- C:\Windows\system32\srclient.dll
2015-03-14 09:42:16 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-14 09:42:16 ----A---- C:\Windows\system32\pcalua.exe
2015-03-14 09:42:16 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-14 09:42:16 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-14 09:42:16 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-14 09:42:16 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-14 09:42:15 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-14 09:42:15 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-14 09:42:15 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-14 09:42:15 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-14 09:42:15 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-14 09:42:15 ----A---- C:\Windows\system32\spwmp.dll
2015-03-14 09:42:15 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-14 09:42:15 ----A---- C:\Windows\system32\mferror.dll
2015-03-14 09:42:15 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-14 09:42:15 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-14 09:42:14 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-14 09:42:05 ----A---- C:\Windows\system32\termsrv.dll
2015-03-14 09:41:40 ----A---- C:\Windows\SYSWOW64\winsta.dll
2015-03-14 09:41:40 ----A---- C:\Windows\system32\winsta.dll
2015-03-14 09:41:40 ----A---- C:\Windows\system32\winlogon.exe
2015-03-14 09:41:40 ----A---- C:\Windows\system32\rdpcorekmts.dll
2015-03-14 09:41:40 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2015-03-14 09:41:39 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2015-03-14 09:41:10 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-03-14 09:41:10 ----A---- C:\Windows\system32\msi.dll
2015-03-14 09:41:10 ----A---- C:\Windows\system32\authui.dll
2015-03-14 09:41:09 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2015-03-14 09:41:09 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-03-14 09:41:09 ----A---- C:\Windows\system32\msihnd.dll
2015-03-14 09:41:09 ----A---- C:\Windows\system32\consent.exe
2015-03-14 09:41:04 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2015-03-14 09:41:04 ----A---- C:\Windows\system32\pku2u.dll
2015-03-14 09:40:32 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-14 09:40:32 ----A---- C:\Windows\system32\schannel.dll
2015-03-14 09:40:32 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-14 09:40:32 ----A---- C:\Windows\system32\kerberos.dll
2015-03-14 09:40:31 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-14 09:40:31 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-14 09:40:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-14 09:40:31 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-14 09:40:31 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-14 09:40:31 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-03-14 09:40:31 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-14 09:40:31 ----A---- C:\Windows\system32\wdigest.dll
2015-03-14 09:40:31 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-14 09:40:31 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-14 09:40:31 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-14 09:40:31 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-14 09:40:31 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-14 09:40:31 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-14 09:40:31 ----A---- C:\Windows\system32\certcli.dll
2015-03-14 09:40:31 ----A---- C:\Windows\system32\adtschema.dll
2015-03-14 09:40:30 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-14 09:40:30 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-14 09:40:30 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-14 09:40:30 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-14 09:40:30 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-14 09:40:30 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-14 09:40:30 ----A---- C:\Windows\system32\sspicli.dll
2015-03-14 09:40:30 ----A---- C:\Windows\system32\secur32.dll
2015-03-14 09:40:30 ----A---- C:\Windows\system32\msaudite.dll
2015-03-14 09:40:30 ----A---- C:\Windows\system32\lsass.exe
2015-03-14 09:40:30 ----A---- C:\Windows\system32\credssp.dll
2015-03-14 09:40:30 ----A---- C:\Windows\system32\auditpol.exe
2015-03-14 09:40:29 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-14 09:40:29 ----A---- C:\Windows\system32\msobjs.dll
2015-03-14 09:40:22 ----A---- C:\Windows\system32\winresume.exe
2015-03-14 09:40:22 ----A---- C:\Windows\system32\winload.exe
2015-03-14 09:40:22 ----A---- C:\Windows\system32\ci.dll
2015-03-14 09:40:13 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-03-14 09:40:13 ----A---- C:\Windows\system32\tzres.dll
2015-03-14 09:40:07 ----A---- C:\Windows\system32\msxml6.dll
2015-03-14 09:40:06 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-03-14 09:40:06 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-03-14 09:40:06 ----A---- C:\Windows\system32\msxml6r.dll
2015-03-14 09:40:06 ----A---- C:\Windows\system32\drivers\tcpip.sys
2015-03-14 09:40:06 ----A---- C:\Windows\system32\drivers\netio.sys
2015-03-14 09:40:06 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2015-03-14 09:40:03 ----A---- C:\Windows\system32\aitstatic.exe
2015-03-14 09:39:53 ----A---- C:\Windows\system32\rdpudd.dll
2015-03-14 09:39:53 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-14 09:39:53 ----A---- C:\Windows\system32\rdpcorets.dll
2015-03-14 09:39:48 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2015-03-14 09:39:48 ----A---- C:\Windows\system32\WsmSvc.dll
2015-03-14 09:39:47 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2015-03-14 09:39:47 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2015-03-14 09:39:47 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2015-03-14 09:39:47 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2015-03-14 09:39:47 ----A---- C:\Windows\system32\WsmWmiPl.dll
2015-03-14 09:39:47 ----A---- C:\Windows\system32\WsmAuto.dll
2015-03-14 09:39:47 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2015-03-14 09:39:47 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2015-03-14 09:39:43 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-03-14 09:39:43 ----A---- C:\Windows\system32\mstscax.dll
2015-03-14 09:39:42 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-03-14 09:39:41 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2015-03-14 09:39:41 ----A---- C:\Windows\system32\TSWorkspace.dll
2015-03-14 09:39:40 ----A---- C:\Windows\system32\shell32.dll
2015-03-14 09:39:39 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-14 09:39:37 ----A---- C:\Windows\SYSWOW64\osk.exe
2015-03-14 09:39:37 ----A---- C:\Windows\system32\osk.exe
2015-03-14 09:39:36 ----A---- C:\Windows\system32\profsvc.dll
2015-03-14 09:39:36 ----A---- C:\Windows\system32\profprov.dll
2015-03-14 09:39:34 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-14 09:39:34 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-14 09:39:33 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-03-14 09:39:33 ----A---- C:\Windows\system32\oleaut32.dll
2015-03-14 09:39:32 ----A---- C:\Windows\SYSWOW64\rastls.dll
2015-03-14 09:39:32 ----A---- C:\Windows\system32\rastls.dll
2015-03-14 09:39:31 ----A---- C:\Windows\SYSWOW64\packager.dll
2015-03-14 09:39:31 ----A---- C:\Windows\system32\packager.dll
2015-03-14 09:39:30 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-03-14 09:39:30 ----A---- C:\Windows\system32\wdi.dll
2015-03-14 09:39:30 ----A---- C:\Windows\system32\powertracker.dll
2015-03-14 09:39:30 ----A---- C:\Windows\system32\perftrack.dll
2015-03-14 09:39:28 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-14 09:39:28 ----A---- C:\Windows\system32\msctf.dll
2015-03-14 09:39:27 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-03-14 09:39:27 ----A---- C:\Windows\system32\d3d10warp.dll
2015-03-14 09:39:25 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-14 09:39:25 ----A---- C:\Windows\system32\ubpm.dll
2015-03-14 09:39:23 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2015-03-14 09:39:23 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-14 09:39:23 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-14 09:39:23 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-14 09:39:23 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-14 09:39:23 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-14 09:39:23 ----A---- C:\Windows\system32\nlasvc.dll
2015-03-14 09:39:23 ----A---- C:\Windows\system32\ncsi.dll
2015-03-14 09:39:23 ----A---- C:\Windows\system32\lpk.dll
2015-03-14 09:39:23 ----A---- C:\Windows\system32\fontsub.dll
2015-03-14 09:39:23 ----A---- C:\Windows\system32\dciman32.dll
2015-03-14 09:39:23 ----A---- C:\Windows\system32\atmlib.dll
2015-03-14 09:39:23 ----A---- C:\Windows\system32\atmfd.dll
2015-03-14 09:39:22 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-03-14 09:39:22 ----A---- C:\Windows\SYSWOW64\charmap.exe
2015-03-14 09:39:22 ----A---- C:\Windows\system32\charmap.exe
2015-03-14 09:39:21 ----A---- C:\Windows\SYSWOW64\usp10.dll
2015-03-14 09:39:21 ----A---- C:\Windows\system32\usp10.dll
2015-03-14 09:39:21 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-03-14 09:39:20 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2015-03-14 09:39:20 ----A---- C:\Windows\system32\IMJP10K.DLL
2015-03-14 09:39:20 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2015-03-14 09:39:19 ----A---- C:\Windows\system32\drivers\afd.sys
2015-03-14 09:39:18 ----A---- C:\Windows\SYSWOW64\qedit.dll
2015-03-14 09:39:18 ----A---- C:\Windows\system32\qedit.dll
2015-03-14 09:39:17 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-03-14 09:39:17 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-03-14 09:39:17 ----A---- C:\Windows\system32\WebClnt.dll
2015-03-14 09:39:17 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-03-14 09:39:17 ----A---- C:\Windows\system32\davclnt.dll
2015-03-14 09:39:16 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-03-14 09:39:16 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-03-14 09:39:16 ----A---- C:\Windows\system32\msxml3r.dll
2015-03-14 09:39:16 ----A---- C:\Windows\system32\msxml3.dll
2015-03-14 09:39:13 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-03-14 09:39:13 ----A---- C:\Windows\system32\gdi32.dll
2015-03-14 09:39:12 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-03-14 09:39:12 ----A---- C:\Windows\system32\scesrv.dll
2015-03-14 09:39:11 ----A---- C:\Windows\system32\win32k.sys
2015-03-14 09:33:12 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-14 09:33:12 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-14 09:25:40 ----A---- C:\Windows\system32\rpcrt4.dll
2015-03-14 09:25:39 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-03-14 09:24:26 ----D---- C:\Users\notebook\AppData\Roaming\AMD
2015-03-14 09:15:07 ----D---- C:\Users\notebook\AppData\Roaming\ATI
2015-03-14 09:15:07 ----D---- C:\ProgramData\ATI
2015-03-14 09:02:54 ----A---- C:\Windows\system32\drivers\k57amd64.sys
2015-03-14 08:55:46 ----A---- C:\Windows\Setup.INI
2015-03-14 08:55:39 ----D---- C:\Program Files (x86)\Launch Manager
2015-03-14 08:55:33 ----A---- C:\Windows\UNINSTLMv4.EXE
2015-03-14 08:55:19 ----D---- C:\Users\notebook\AppData\Roaming\WinRAR
2015-03-14 08:55:13 ----D---- C:\Users\notebook\AppData\Roaming\library_dir
2015-03-14 08:54:28 ----D---- C:\Program Files (x86)\Raptr
2015-03-14 08:54:24 ----D---- C:\ProgramData\AMD
2015-03-14 08:54:23 ----D---- C:\Program Files (x86)\AMD AVT
2015-03-14 08:52:54 ----D---- C:\Program Files (x86)\AMD
2015-03-14 08:51:22 ----D---- C:\Program Files\Common Files\ATI Technologies
2015-03-14 08:50:29 ----D---- C:\ProgramData\Package Cache
2015-03-14 08:50:08 ----D---- C:\Program Files\AMD
2015-03-14 08:48:44 ----D---- C:\AMD
2015-03-14 08:48:07 ----D---- C:\Users\notebook\AppData\Roaming\Skype
2015-03-14 08:47:57 ----RD---- C:\Program Files (x86)\Skype
2015-03-14 08:47:52 ----D---- C:\ProgramData\Skype
2015-03-14 08:21:24 ----D---- C:\Program Files (x86)\Intel
2015-03-14 08:21:24 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2015-03-14 08:21:07 ----D---- C:\Program Files (x86)\Microsoft Security Client
2015-03-14 08:21:04 ----D---- C:\Intel
2015-03-14 08:20:52 ----D---- C:\Program Files\Microsoft Security Client
2015-03-14 08:18:22 ----D---- C:\Program Files\WinRAR
2015-03-14 08:18:09 ----A---- C:\Windows\system32\wups2.dll
2015-03-14 08:18:09 ----A---- C:\Windows\system32\wucltux.dll
2015-03-14 08:18:09 ----A---- C:\Windows\system32\wuaueng.dll
2015-03-14 08:18:09 ----A---- C:\Windows\system32\wuauclt.exe
2015-03-14 08:18:02 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-03-14 08:18:02 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-03-14 08:18:02 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-03-14 08:18:02 ----A---- C:\Windows\system32\wups.dll
2015-03-14 08:18:02 ----A---- C:\Windows\system32\wudriver.dll
2015-03-14 08:18:02 ----A---- C:\Windows\system32\wuapi.dll
2015-03-14 08:17:53 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-03-14 08:17:53 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-03-14 08:17:53 ----A---- C:\Windows\system32\wuwebv.dll
2015-03-14 08:17:53 ----A---- C:\Windows\system32\wuapp.exe
2015-03-14 08:14:57 ----D---- C:\ProgramData\Qualcomm Atheros
2015-03-14 08:14:46 ----D---- C:\SWSetup
2015-03-14 08:04:28 ----D---- C:\Users\notebook\AppData\Roaming\Adobe
2015-03-14 08:04:18 ----D---- C:\Users\notebook\AppData\Roaming\Identities
2015-03-14 07:43:34 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-03-14 07:41:50 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-03-14 07:41:49 ----D---- C:\Windows\Migration
2015-03-14 07:41:25 ----SHD---- C:\Windows\Installer
2015-03-14 07:36:46 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2015-03-14 07:36:46 ----A---- C:\Windows\system32\poqexec.exe
2015-03-14 07:35:55 ----SD---- C:\Users\notebook\AppData\Roaming\Microsoft
2015-03-14 07:35:55 ----D---- C:\Users\notebook\AppData\Roaming\Media Center Programs
2015-03-14 07:35:44 ----SHD---- C:\Recovery
2015-03-14 07:35:43 ----SHD---- C:\ProgramData\Šablony
2015-03-14 07:35:43 ----SHD---- C:\ProgramData\Plocha
2015-03-14 07:35:43 ----SHD---- C:\ProgramData\Oblíbené položky
2015-03-14 07:35:43 ----SHD---- C:\ProgramData\Nabídka Start
2015-03-14 07:35:43 ----SHD---- C:\ProgramData\Dokumenty
2015-03-14 07:35:43 ----SHD---- C:\ProgramData\Data aplikací
2015-03-14 07:26:20 ----D---- C:\Windows\SoftwareDistribution
2015-03-14 07:23:35 ----D---- C:\Windows\Prefetch
2015-03-14 07:23:07 ----ASH---- C:\pagefile.sys
2015-03-14 07:23:04 ----SHD---- C:\System Volume Information
2015-03-14 07:23:04 ----ASH---- C:\hiberfil.sys
2015-03-14 07:21:45 ----D---- C:\Windows\Panther

======List of files/folders modified in the last 1 month======

2015-04-13 08:20:11 ----RD---- C:\Program Files
2015-04-13 08:20:04 ----D---- C:\Windows\Temp
2015-04-13 08:17:00 ----D---- C:\Windows\system32\config
2015-04-13 08:16:04 ----D---- C:\Windows
2015-04-12 21:20:42 ----D---- C:\Windows\inf
2015-04-12 11:05:49 ----RD---- C:\Program Files (x86)
2015-04-10 03:23:30 ----D---- C:\Program Files (x86)\Common Files
2015-04-10 02:02:04 ----HD---- C:\ProgramData
2015-04-09 14:36:15 ----D---- C:\Windows\system32\wdi
2015-04-05 04:02:50 ----D---- C:\Windows\system32\catroot
2015-04-04 23:09:06 ----D---- C:\Windows\Logs
2015-04-04 23:01:33 ----D---- C:\Windows\winsxs
2015-04-04 23:01:15 ----D---- C:\Windows\SysWOW64
2015-04-04 23:01:13 ----D---- C:\Windows\System32
2015-04-04 18:02:02 ----RSD---- C:\Windows\assembly
2015-04-04 17:51:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-04-03 04:50:07 ----D---- C:\Windows\system32\drivers
2015-04-03 04:26:48 ----D---- C:\Windows\system32\DriverStore
2015-04-03 00:08:05 ----D---- C:\Windows\system32\drivers\UMDF
2015-04-02 09:38:59 ----D---- C:\Windows\system32\catroot2
2015-03-27 22:27:25 ----D---- C:\Windows\LiveKernelReports
2015-03-26 16:58:58 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-03-25 16:52:46 ----D---- C:\Windows\system32\wbem
2015-03-25 16:52:46 ----D---- C:\Windows\AppPatch
2015-03-24 18:42:35 ----D---- C:\Windows\Microsoft.NET
2015-03-17 23:39:56 ----D---- C:\Windows\system32\Tasks
2015-03-17 23:39:51 ----D---- C:\Windows\Tasks
2015-03-17 12:29:07 ----D---- C:\Windows\rescache
2015-03-17 12:25:54 ----D---- C:\Program Files\Windows Sidebar
2015-03-17 12:25:54 ----D---- C:\Program Files\Windows Media Player
2015-03-17 12:25:54 ----D---- C:\Program Files\Windows Mail
2015-03-17 12:25:54 ----D---- C:\Program Files\Windows Journal
2015-03-17 12:25:53 ----D---- C:\Windows\servicing
2015-03-17 12:25:53 ----D---- C:\Program Files\Windows Photo Viewer
2015-03-17 12:25:53 ----D---- C:\Program Files\Windows Defender
2015-03-17 12:25:53 ----D---- C:\Program Files\Common Files\System
2015-03-17 12:25:53 ----D---- C:\Program Files (x86)\Windows Sidebar
2015-03-17 12:25:53 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2015-03-17 12:25:53 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-17 12:25:53 ----D---- C:\Program Files (x86)\Windows Mail
2015-03-17 12:25:53 ----D---- C:\Program Files (x86)\Windows Defender
2015-03-17 12:25:52 ----D---- C:\Windows\SYSWOW64\winrm
2015-03-17 12:25:52 ----D---- C:\Windows\SYSWOW64\slmgr
2015-03-17 12:25:52 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-03-17 12:25:52 ----D---- C:\Windows\SYSWOW64\migwiz
2015-03-17 12:25:52 ----D---- C:\Windows\SYSWOW64\en
2015-03-17 12:25:52 ----D---- C:\Windows\ehome
2015-03-17 12:25:49 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-17 12:25:49 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2015-03-17 12:25:49 ----D---- C:\Windows\SYSWOW64\drivers
2015-03-17 12:25:42 ----D---- C:\Windows\SYSWOW64\WCN
2015-03-17 12:25:42 ----D---- C:\Windows\SYSWOW64\wbem
2015-03-17 12:25:42 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2015-03-17 12:25:42 ----D---- C:\Windows\SYSWOW64\DriverStore
2015-03-17 12:25:42 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-17 12:25:41 ----D---- C:\Windows\system32\winrm
2015-03-17 12:25:41 ----D---- C:\Windows\system32\sysprep
2015-03-17 12:25:41 ----D---- C:\Windows\system32\slmgr
2015-03-17 12:25:41 ----D---- C:\Windows\system32\sk-SK
2015-03-17 12:25:41 ----D---- C:\Windows\system32\oobe
2015-03-17 12:25:41 ----D---- C:\Windows\system32\migwiz
2015-03-17 12:25:41 ----D---- C:\Windows\system32\en
2015-03-17 12:25:41 ----D---- C:\Windows\system32\Boot
2015-03-17 12:25:41 ----D---- C:\Windows\PolicyDefinitions
2015-03-17 12:25:41 ----D---- C:\Windows\en-US
2015-03-17 12:25:33 ----D---- C:\Windows\system32\en-US
2015-03-17 12:25:24 ----D---- C:\Windows\system32\drivers\en-US
2015-03-17 12:25:23 ----D---- C:\Windows\system32\WCN
2015-03-17 12:25:23 ----D---- C:\Windows\system32\Dism
2015-03-17 12:25:19 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2015-03-17 03:17:20 ----D---- C:\Windows\debug
2015-03-17 01:30:19 ----RSD---- C:\Windows\Fonts
2015-03-17 01:10:24 ----SD---- C:\ProgramData\Microsoft
2015-03-17 01:10:24 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-03-17 01:10:24 ----D---- C:\Windows\AppCompat
2015-03-17 01:10:23 ----D---- C:\Windows\system32\cs-CZ
2015-03-17 00:49:56 ----D---- C:\Windows\system32\LogFiles
2015-03-17 00:37:37 ----D---- C:\Windows\tracing
2015-03-14 10:00:47 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-14 10:00:35 ----D---- C:\Program Files\Internet Explorer
2015-03-14 10:00:29 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-14 08:51:22 ----D---- C:\Program Files\Common Files
2015-03-14 08:04:15 ----SHD---- C:\$Recycle.Bin
2015-03-14 07:36:28 ----D---- C:\Windows\system32\restore
2015-03-14 07:35:55 ----RD---- C:\Users
2015-03-14 07:35:44 ----D---- C:\Windows\system32\Recovery
2015-03-14 07:35:43 ----D---- C:\Program Files\Windows NT

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-11-15 274696]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2014-06-08 213848]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-03-18 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-06-08 60416]
R2 IntelHaxm;Intel HAXM Service; C:\Windows\system32\DRIVERS\IntelHaxm.sys [2015-01-30 84992]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-11-15 124560]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-11-21 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-11-21 589312]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2014-06-21 94720]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-06-04 4171328]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-06-08 80384]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 k57nd;Broadcom NetLink Gigabit Ethernet; C:\Windows\system32\DRIVERS\k57amd64.sys [2010-05-15 343080]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2014-06-08 552960]
S3 massfilter_hs;HS HandSet Mass Storage Filter Driver; \??\C:\Windows\system32\drivers\massfilter_hs.sys [2012-04-16 18456]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2014-06-08 19456]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2014-06-08 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2014-06-08 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2014-06-08 29696]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-11-21 244736]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-01-30 23784]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-01-30 366512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-17 107848]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-17 107848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-03-24 836288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-03-17 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 13 dub 2015 09:25

Zdravim

Je tam jen par adwaru a pak zakazeme nekolik procesu spoustet se ihned po startu, aby pocitac startoval rychleji.

Doporucuji vymenit Windows Defender (v pripade Win7 Microsoft Security Essentials) za napr. avast! Free. Duvodem je cca 50% detekce oproti konkurenci viz srovnavaci testy antiviru http://forum.viry.cz/viewtopic.php?p=1377913#p1377913

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

RacKastab · #3 Příspěvek od **RacKastab** » 17 kvě 2015 09:29

Zdravim. Prvně bych se chtěl omluvit za tak opožděnou reakci, ale stěhovali jsme se a dosud jsem neměl připojení k internetu. Tímto bych chtěl topic obnovit a pokračovat dle vašich pokynů

.

#4 Příspěvek od **altrok** » 17 kvě 2015 14:33

Dobry den,

nic se nedeje. Jak budete mit cas, vrhnete se do doporucenych kroku, at pocitaci odlehcime

RacKastab · #5 Příspěvek od **RacKastab** » 18 kvě 2015 06:27

Tak jsem začal s tím antivirem. Prdnul jsem tam rovnou avast a ten hned nalezl 5 hrozeb včetně malwaru a začal mi odstraňovat nějaký zástupce.. :/ A zbytek se snaží hodit do truhly tak nevím jak mam pokračovat, nechci aby ty viry nějak zbytečně nespustil! Přidávám screen.

http://www.imagehosting.cz/?v=screenpsp.png

#6 Příspěvek od **altrok** » 18 kvě 2015 08:45

Nalezene polozky vycistete (doporucena akce) a pokracujte AdwCleanerem.

RacKastab · #7 Příspěvek od **RacKastab** » 18 kvě 2015 10:59

Avast po kontrole požadoval restart pc a následnou kontrolu přes boot. Tam nalezl nejspíš všechny hrozby, ale já jsem dal automaticky všechny zavřít do truhly

. Snad to nevadí no. Chtěl jsem se zeptat zda mam také vymazat Windows Deffender jestli je to taky součásti microsoft essential, protože po mě požadoval kontrolu pc. Pokud ano aby se ty dva antiviry nepřely.

Log z Adware:

# AdwCleaner v4.204 - Log vytvořen 18/05/2015 v 10:54:28
# Aktualizováno 12/05/2015 by Xplode
# Databáze : 2015-05-12.2 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : notebook - NOTEBOOK-PC
# Spuštěno z : C:\Users\notebook\Desktop\adwcleaner_4.204.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : PrivoxyService

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Users\notebook\AppData\Local\Updater
Složka Smazáno : C:\Users\notebook\AppData\Roaming\InetStat
Složka Smazáno : C:\Users\notebook\AppData\Roaming\OpenCandy
Složka Smazáno : C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat
Soubor Smazáno : C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_chatango.com_0.localstorage
Soubor Smazáno : C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_chatango.com_0.localstorage-journal
Soubor Smazáno : C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_i3ryok.chatango.com_0.localstorage
Soubor Smazáno : C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_i3ryok.chatango.com_0.localstorage-journal
Soubor Smazáno : C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor Smazáno : C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****

***** [ Zástupci ] *****

***** [ Registry ] *****

Klíč Smazáno : HKCU\Software\Classes\Applications\inetstat.exe
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{D3C24E2B-C820-4492-9B69-11BF7163F998}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3C24E2B-C820-4492-9B69-11BF7163F998}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3C24E2B-C820-4492-9B69-11BF7163F998}
Klíč Smazáno : HKCU\Software\InetStat
Klíč Smazáno : HKLM\SOFTWARE\Uniblue
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\InetStat
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - 127.0.0.1:8118
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17801

-\\ Google Chrome v42.0.2311.152

[C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://dts.search.ask.com/web?q={searchTerms}&v=1.1_711&d=533_257&apn_ptnrs=%5EAG5&o=APN10644A&tpr=4&gct=hp&ts=1431528393667

*************************

AdwCleaner[R0].txt - [3332 bytů] - [18/05/2015 10:51:01]
AdwCleaner[S0].txt - [2973 bytů] - [18/05/2015 10:54:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3031 bytů] ##########

Mam také dodat nový log z RSITU? Předem děkuji

RacKastab · #8 Příspěvek od **RacKastab** » 18 kvě 2015 11:15

Dal jsem ještě úplnou kontrolu přes avast a nic to nenašlo. Přikládám čerstvý log z RSIT.
--------------------------------------------------------------------------------------
Logfile of random's system information tool 1.10 (written by random/random)
Run by notebook at 2015-05-18 12:15:02
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 223 GB (47%) free of 477 GB
Total RAM: 6007 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:15:06, on 18.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17801)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\notebook.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gfe_rd=cr&ei=bNQ ... gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [BitTorrent] "C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Avast Firewall (avast! Firewall) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6657 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 4323856
atieclxx
\??\C:\Windows\system32\conhost.exe "-2125296246-1461943568-2029814905-8548253541981784982028276841-1871286530-683052460
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
ngservice.exe pipeserver
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4668.0.22505863\1368423012" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x1002 --gpu-device-id=0x68e0 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=14.501.1003.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Hivemind_A2_Stable_R7_Postperiod/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4668 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="4668.2.2131825692\386500362" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Hivemind_A2_Stable_R7_Postperiod/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4668 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --enable-gpu-rasterization --enable-threaded-gpu-rasterization --disable-gpu-compositing --channel="4668.3.823058212\650312424" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Hivemind_A2_Stable_R7_Postperiod/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4668 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --enable-gpu-rasterization --enable-threaded-gpu-rasterization --disable-gpu-compositing --channel="4668.5.668369203\1322503188" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="*BackgroundRendererProcesses/AllowBelowNormalFromBrowser/*BrowserBlacklist/Enabled/*CTRequiredForEVTrial/RequirementEnforced/CaptivePortalInterstitial/Enabled/ChromeDashboard/Default/*ChromeSuggestions/Default/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/*EnhancedBookmarks/Manual install/*ExtensionContentVerification/Enforce/*ExtensionInstallVerification/Enforce/*GoogleNow/Enable/*NewProfileManagement/Enabled/*OmniboxBundledExperimentV1/Hivemind_A2_Stable_R7_Postperiod/*PasswordGeneration/Disabled/PasswordLinkInSettings/Disabled/PermissionBubbleRollout/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/*RefreshTokenDeviceId/Enabled/*RememberCertificateErrorDecisions/Default/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*ShowAppLauncherPromo/ShowPromoUntilDismissed/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_24/*UMA-Uniformity-Trial-10-Percent/group_08/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_01/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UseDelayAgnosticAEC/DefaultDisabled/*V8CacheOptions/default/*VoiceTrigger/Install/*WebRTC-IPv6Default/Disabled/*Win32kLockdown/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4668 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --enable-gpu-rasterization --enable-threaded-gpu-rasterization --disable-gpu-compositing --channel="4668.8.1380692474\123505411" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4668.9.322554285\251623447" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Users\notebook\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16 551848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-18 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16 212904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-18 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16 172968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088]
"BitTorrent"=C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe [2015-05-12 1696104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe [2015-05-12 1696104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [2012-10-23 3108480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InetStat]
C:\Users\notebook\AppData\Roaming\InetStat\inetstat.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\Program Files (x86)\Launch Manager\LManager.exe [2010-06-22 968272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-04-17 31282816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\steam.exe [2015-05-12 2888384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-11-20 767176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-18 5515496]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-18 10:44:56 ----D---- C:\AdwCleaner
2015-05-18 07:29:29 ----D---- C:\Users\notebook\AppData\Roaming\Dropbox
2015-05-18 07:21:44 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2015-05-18 07:21:39 ----A---- C:\Windows\system32\aswBoot.exe
2015-05-18 07:21:28 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2015-05-18 07:19:26 ----D---- C:\Users\notebook\AppData\Roaming\AVAST Software
2015-05-18 07:18:57 ----D---- C:\Windows\SYSWOW64\vbox
2015-05-18 07:18:57 ----D---- C:\Windows\system32\vbox
2015-05-18 07:17:51 ----A---- C:\Windows\system32\drivers\aswStm.sys
2015-05-18 07:17:49 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2015-05-18 07:17:44 ----A---- C:\Windows\system32\drivers\aswSP.sys
2015-05-18 07:17:40 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2015-05-18 07:17:34 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2015-05-18 07:17:31 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2015-05-18 07:17:29 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2015-05-18 07:17:20 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2015-05-18 07:17:00 ----A---- C:\Windows\avastSS.scr
2015-05-18 07:15:57 ----D---- C:\Program Files\AVAST Software
2015-05-18 07:15:06 ----D---- C:\ProgramData\AVAST Software
2015-05-18 07:14:36 ----SHD---- C:\Config.Msi
2015-05-17 19:53:07 ----D---- C:\Users\notebook\AppData\Roaming\SYSTEMAX Software Development
2015-05-17 19:53:07 ----D---- C:\ProgramData\SYSTEMAX Software Development
2015-05-17 17:45:39 ----D---- C:\Users\notebook\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2015-05-17 17:22:07 ----D---- C:\Windows\SYSWOW64\Macromed
2015-05-17 10:45:50 ----D---- C:\Program Files (x86)\FinalWire
2015-05-17 10:11:55 ----D---- C:\Program Files (x86)\GameforgeLive
2015-05-16 19:06:25 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2015-05-16 19:06:24 ----D---- C:\Program Files (x86)\ffdshow
2015-05-15 18:43:55 ----D---- C:\ProgramData\GRETECH
2015-05-15 18:41:16 ----D---- C:\Users\notebook\AppData\Roaming\GRETECH
2015-05-15 18:41:09 ----D---- C:\Program Files (x86)\GRETECH
2015-05-13 13:39:59 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 13:39:59 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 10:57:00 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-05-13 10:57:00 ----A---- C:\Windows\system32\schannel.dll
2015-05-13 10:56:52 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-05-13 10:56:52 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-05-13 10:56:52 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-05-13 10:56:52 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-05-13 10:56:52 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-05-13 10:56:51 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-05-13 10:56:51 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-05-13 10:56:51 ----A---- C:\Windows\system32\iernonce.dll
2015-05-13 10:56:51 ----A---- C:\Windows\system32\ie4uinit.exe
2015-05-13 10:56:50 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-05-13 10:56:50 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-05-13 10:56:50 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-05-13 10:56:50 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-05-13 10:56:50 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-05-13 10:56:50 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-05-13 10:56:50 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 10:56:48 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-05-13 10:56:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-05-13 10:56:48 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-05-13 10:56:48 ----A---- C:\Windows\system32\urlmon.dll
2015-05-13 10:56:48 ----A---- C:\Windows\system32\iedkcs32.dll
2015-05-13 10:56:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-05-13 10:56:47 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-05-13 10:56:47 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-05-13 10:56:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-05-13 10:56:47 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 10:56:47 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 10:56:46 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-05-13 10:56:46 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-05-13 10:56:46 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-05-13 10:56:46 ----A---- C:\Windows\system32\msfeeds.dll
2015-05-13 10:56:46 ----A---- C:\Windows\system32\dxtrans.dll
2015-05-13 10:56:45 ----A---- C:\Windows\system32\iesetup.dll
2015-05-13 10:56:45 ----A---- C:\Windows\system32\ieapfltr.dll
2015-05-13 10:56:44 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-05-13 10:56:44 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-05-13 10:56:44 ----A---- C:\Windows\system32\vbscript.dll
2015-05-13 10:56:44 ----A---- C:\Windows\system32\iertutil.dll
2015-05-13 10:56:43 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-05-13 10:56:43 ----A---- C:\Windows\system32\jsproxy.dll
2015-05-13 10:56:43 ----A---- C:\Windows\system32\ieUnatt.exe
2015-05-13 10:56:42 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-05-13 10:56:42 ----A---- C:\Windows\system32\ieui.dll
2015-05-13 10:56:42 ----A---- C:\Windows\system32\dxtmsft.dll
2015-05-13 10:56:41 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-05-13 10:56:41 ----A---- C:\Windows\system32\mshtmled.dll
2015-05-13 10:56:41 ----A---- C:\Windows\system32\ieframe.dll
2015-05-13 10:56:40 ----A---- C:\Windows\system32\wininet.dll
2015-05-13 10:56:40 ----A---- C:\Windows\system32\jscript9diag.dll
2015-05-13 10:56:40 ----A---- C:\Windows\system32\jscript9.dll
2015-05-13 10:56:40 ----A---- C:\Windows\system32\jscript.dll
2015-05-13 10:56:39 ----A---- C:\Windows\system32\msrating.dll
2015-05-13 10:56:39 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-05-13 10:56:38 ----A---- C:\Windows\system32\mshtml.dll
2015-05-13 10:56:36 ----A---- C:\Windows\system32\services.exe
2015-05-13 10:56:30 ----A---- C:\Windows\system32\UtcResources.dll
2015-05-13 10:56:30 ----A---- C:\Windows\system32\diagtrack.dll
2015-05-13 10:56:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-05-13 10:56:28 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-05-13 10:56:28 ----A---- C:\Windows\system32\ntdll.dll
2015-05-13 10:56:27 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-05-13 10:56:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-05-13 10:56:27 ----A---- C:\Windows\system32\tdh.dll
2015-05-13 10:56:27 ----A---- C:\Windows\system32\kernel32.dll
2015-05-13 10:56:27 ----A---- C:\Windows\system32\advapi32.dll
2015-05-13 10:56:26 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-05-13 10:56:26 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-05-13 10:56:26 ----A---- C:\Windows\system32\winresume.exe
2015-05-13 10:56:26 ----A---- C:\Windows\system32\winload.exe
2015-05-13 10:56:26 ----A---- C:\Windows\system32\msv1_0.dll
2015-05-13 10:56:26 ----A---- C:\Windows\system32\lsasrv.dll
2015-05-13 10:56:25 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-05-13 10:56:25 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-05-13 10:56:25 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-05-13 10:56:25 ----A---- C:\Windows\system32\wow64.dll
2015-05-13 10:56:25 ----A---- C:\Windows\system32\tracerpt.exe
2015-05-13 10:56:25 ----A---- C:\Windows\system32\srcore.dll
2015-05-13 10:56:25 ----A---- C:\Windows\system32\sechost.dll
2015-05-13 10:56:25 ----A---- C:\Windows\system32\logman.exe
2015-05-13 10:56:25 ----A---- C:\Windows\system32\KernelBase.dll
2015-05-13 10:56:25 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-05-13 10:56:25 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-05-13 10:56:25 ----A---- C:\Windows\system32\certcli.dll
2015-05-13 10:56:24 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-05-13 10:56:24 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-05-13 10:56:24 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-05-13 10:56:24 ----A---- C:\Windows\SYSWOW64\logman.exe
2015-05-13 10:56:24 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-05-13 10:56:24 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-05-13 10:56:24 ----A---- C:\Windows\system32\winsrv.dll
2015-05-13 10:56:24 ----A---- C:\Windows\system32\wdigest.dll
2015-05-13 10:56:24 ----A---- C:\Windows\system32\typeperf.exe
2015-05-13 10:56:24 ----A---- C:\Windows\system32\smss.exe
2015-05-13 10:56:24 ----A---- C:\Windows\system32\rstrui.exe
2015-05-13 10:56:24 ----A---- C:\Windows\system32\kerberos.dll
2015-05-13 10:56:24 ----A---- C:\Windows\system32\conhost.exe
2015-05-13 10:56:23 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2015-05-13 10:56:23 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-05-13 10:56:23 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-05-13 10:56:23 ----A---- C:\Windows\SYSWOW64\relog.exe
2015-05-13 10:56:23 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-05-13 10:56:23 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-05-13 10:56:23 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-05-13 10:56:23 ----A---- C:\Windows\system32\TSpkg.dll
2015-05-13 10:56:23 ----A---- C:\Windows\system32\sspicli.dll
2015-05-13 10:56:23 ----A---- C:\Windows\system32\relog.exe
2015-05-13 10:56:23 ----A---- C:\Windows\system32\ncrypt.dll
2015-05-13 10:56:23 ----A---- C:\Windows\system32\lsass.exe
2015-05-13 10:56:23 ----A---- C:\Windows\system32\csrsrv.dll
2015-05-13 10:56:23 ----A---- C:\Windows\system32\auditpol.exe
2015-05-13 10:56:23 ----A---- C:\Windows\system32\appidapi.dll
2015-05-13 10:56:22 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-05-13 10:56:22 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-05-13 10:56:22 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-05-13 10:56:22 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2015-05-13 10:56:22 ----A---- C:\Windows\system32\wow64win.dll
2015-05-13 10:56:22 ----A---- C:\Windows\system32\srclient.dll
2015-05-13 10:56:22 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-05-13 10:56:22 ----A---- C:\Windows\system32\secur32.dll
2015-05-13 10:56:22 ----A---- C:\Windows\system32\ntvdm64.dll
2015-05-13 10:56:22 ----A---- C:\Windows\system32\diskperf.exe
2015-05-13 10:56:22 ----A---- C:\Windows\system32\appidsvc.dll
2015-05-13 10:56:22 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-05-13 10:56:22 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 10:56:21 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-13 10:56:21 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-05-13 10:56:21 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-05-13 10:56:21 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-05-13 10:56:21 ----A---- C:\Windows\system32\wow64cpu.dll
2015-05-13 10:56:21 ----A---- C:\Windows\system32\sspisrv.dll
2015-05-13 10:56:21 ----A---- C:\Windows\system32\drivers\appid.sys
2015-05-13 10:56:21 ----A---- C:\Windows\system32\credssp.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 10:56:20 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 10:56:19 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-13 10:56:19 ----A---- C:\Windows\SYSWOW64\user.exe
2015-05-13 10:56:19 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-05-13 10:56:19 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-05-13 10:56:19 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-05-13 10:56:19 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-05-13 10:56:19 ----A---- C:\Windows\system32\msaudite.dll
2015-05-13 10:56:19 ----A---- C:\Windows\system32\apisetschema.dll
2015-05-13 10:56:19 ----A---- C:\Windows\system32\adtschema.dll
2015-05-13 10:56:18 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-05-13 10:56:18 ----A---- C:\Windows\system32\msobjs.dll
2015-05-13 10:56:03 ----A---- C:\Windows\system32\FntCache.dll
2015-05-13 10:56:03 ----A---- C:\Windows\system32\DWrite.dll
2015-05-13 10:56:01 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-05-13 10:56:01 ----A---- C:\Windows\system32\win32k.sys
2015-05-13 10:55:55 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-05-13 10:55:55 ----A---- C:\Windows\system32\InkEd.dll
2015-05-13 10:55:54 ----A---- C:\Windows\system32\jnwmon.dll
2015-05-13 10:55:52 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2015-05-13 10:55:52 ----A---- C:\Windows\system32\wpdshext.dll
2015-05-13 10:55:48 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2015-05-13 10:55:48 ----A---- C:\Windows\system32\poqexec.exe
2015-05-13 10:55:42 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-05-13 10:55:42 ----A---- C:\Windows\system32\sdbinst.exe
2015-05-13 10:55:42 ----A---- C:\Windows\system32\apphelp.dll
2015-05-13 10:55:42 ----A---- C:\Windows\system32\aelupsvc.dll
2015-05-13 10:55:41 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-05-13 10:55:41 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-05-13 10:55:41 ----A---- C:\Windows\system32\shimeng.dll
2015-05-12 12:10:21 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-05-01 10:56:58 ----D---- C:\Program Files (x86)\Personal Computer Security
2015-04-28 08:53:11 ----A---- C:\Windows\SYSWOW64\tasks.dll
2015-04-27 13:04:12 ----D---- C:\Users\notebook\AppData\Roaming\PunkBuster
2015-04-27 10:58:36 ----D---- C:\Program Files (x86)\Ubisoft
2015-04-27 10:55:21 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-04-27 10:55:20 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2015-04-27 10:29:25 ----D---- C:\Program Files (x86)\Assassin's Creed Brotherhood
2015-04-27 10:26:37 ----D---- C:\Users\notebook\AppData\Roaming\TeamViewer
2015-04-27 08:45:51 ----D---- C:\Program Files (x86)\Safesoft Protector
2015-04-27 08:45:48 ----A---- C:\Users\notebook\AppData\Roaming\D417.tmp

======List of files/folders modified in the last 1 month======

2015-05-18 12:15:06 ----D---- C:\Windows\Prefetch
2015-05-18 12:15:05 ----D---- C:\Program Files\trend micro
2015-05-18 12:15:04 ----D---- C:\Windows\Temp
2015-05-18 11:20:18 ----D---- C:\Windows\system32\config
2015-05-18 11:00:00 ----D---- C:\Users\notebook\AppData\Roaming\BitTorrent
2015-05-18 10:56:41 ----A---- C:\HaxLogs.txt
2015-05-18 10:56:16 ----D---- C:\Windows
2015-05-18 10:39:14 ----RD---- C:\Program Files
2015-05-18 10:39:13 ----D---- C:\Windows\system32\drivers
2015-05-18 10:39:12 ----D---- C:\Windows\system32\DriverStore
2015-05-18 10:39:12 ----D---- C:\Windows\inf
2015-05-18 10:33:22 ----D---- C:\Windows\Logs
2015-05-18 09:56:24 ----SHD---- C:\System Volume Information
2015-05-18 07:35:42 ----D---- C:\Windows\system32\Tasks
2015-05-18 07:21:39 ----D---- C:\Windows\System32
2015-05-18 07:18:57 ----D---- C:\Windows\SysWOW64
2015-05-18 07:17:16 ----D---- C:\Windows\winsxs
2015-05-18 07:15:06 ----HD---- C:\ProgramData
2015-05-18 07:14:54 ----SHD---- C:\Windows\Installer
2015-05-18 07:14:48 ----RD---- C:\Program Files (x86)
2015-05-17 17:22:13 ----D---- C:\Gamesy
2015-05-17 11:36:00 ----RSD---- C:\Windows\assembly
2015-05-17 11:15:47 ----D---- C:\Hry
2015-05-17 10:30:30 ----D---- C:\Program Files (x86)\Steam
2015-05-16 10:11:20 ----D---- C:\Windows\debug
2015-05-15 08:50:49 ----D---- C:\Windows\Tasks
2015-05-14 14:04:01 ----D---- C:\Windows\rescache
2015-05-14 10:17:13 ----D---- C:\Windows\Microsoft.NET
2015-05-14 09:49:39 ----D---- C:\Users\notebook\AppData\Roaming\Skype
2015-05-14 09:40:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-14 01:21:04 ----D---- C:\Windows\system32\catroot
2015-05-14 01:20:37 ----D---- C:\Windows\SYSWOW64\en-US
2015-05-14 01:20:37 ----D---- C:\Windows\system32\en-US
2015-05-14 01:20:37 ----D---- C:\Program Files\Internet Explorer
2015-05-14 01:20:36 ----D---- C:\Program Files (x86)\Internet Explorer
2015-05-14 01:20:33 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-05-14 01:20:33 ----D---- C:\Windows\system32\cs-CZ
2015-05-14 01:20:32 ----D---- C:\Windows\system32\Boot
2015-05-14 01:20:32 ----D---- C:\Windows\AppPatch
2015-05-14 01:20:32 ----D---- C:\Program Files\Windows Journal
2015-05-14 01:20:31 ----D---- C:\Windows\system32\AdvancedInstallers
2015-05-14 01:20:29 ----D---- C:\Windows\system32\drivers\UMDF
2015-05-13 13:54:14 ----D---- C:\Windows\system32\MRT
2015-05-13 13:45:54 ----A---- C:\Windows\system32\MRT.exe
2015-05-13 13:00:38 ----D---- C:\Users\notebook\AppData\Roaming\DAEMON Tools Pro
2015-05-13 10:54:55 ----D---- C:\Windows\system32\catroot2
2015-05-12 11:00:19 ----D---- C:\Program Files (x86)\Battle.net
2015-05-12 10:52:38 ----D---- C:\Program Files (x86)\Heroes of the Storm
2015-05-08 21:58:21 ----D---- C:\Windows\SoftwareDistribution
2015-05-02 10:26:54 ----SD---- C:\Users\notebook\AppData\Roaming\Microsoft
2015-05-01 19:16:15 ----D---- C:\Windows\system32\NDF
2015-05-01 19:14:37 ----D---- C:\Windows\system32\drivers\etc
2015-05-01 18:43:04 ----D---- C:\ProgramData\Skype
2015-04-27 14:19:58 ----D---- C:\ProgramData\Ubisoft
2015-04-27 12:46:25 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-04-27 10:54:57 ----D---- C:\Windows\system32\LogFiles

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2015-05-18 449896]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-05-18 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-05-18 272248]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2014-06-08 213848]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2015-05-18 28144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-05-18 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-05-18 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-05-18 442264]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2015-03-18 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-06-08 60416]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-05-18 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-05-18 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-05-18 137288]
R2 IntelHaxm;Intel HAXM Service; C:\Windows\system32\DRIVERS\IntelHaxm.sys [2015-01-30 84992]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-05-18 273824]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-11-21 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-11-21 589312]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2014-06-21 94720]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-06-04 4171328]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2014-06-08 80384]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 k57nd;Broadcom NetLink Gigabit Ethernet; C:\Windows\system32\DRIVERS\k57amd64.sys [2010-05-15 343080]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2014-06-08 552960]
S3 massfilter_hs;HS HandSet Mass Storage Filter Driver; \??\C:\Windows\system32\drivers\massfilter_hs.sys [2012-04-16 18456]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2014-06-08 19456]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2014-06-08 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2014-06-08 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2014-06-08 29696]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-21 41984]
S3 xhunter1;xhunter1; \??\C:\Windows\xhunter1.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-11-21 244736]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-18 343336]
R2 avast! Firewall;Avast Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2015-05-18 107448]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-06-08 27136]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2015-04-27 75136]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-05-18 4034896]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-04-21 114688]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-03-17 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-17 107848]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-17 107848]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S4 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-05-12 837824]

-----------------EOF-----------------

#9 Příspěvek od **altrok** » 18 kvě 2015 11:24

Vylecene nebo v karantene je jedno. Hlavne, ze jsou neskodne. Na Defender se podivame v nasledujicim kroku.

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Pred zacatkem skenu zatrhnete moznost 90 Days Files. Log bude pravdepodobne dlouhy, takze jej kdyztak rozdelte do vice prispevku.

RacKastab · #10 Příspěvek od **RacKastab** » 18 kvě 2015 11:40

Nahlásilo mi to škodlivý software, vím že to je blbost, ale nepustí mě to stáhnout soubor. Mohl by jste ho někam upnout prosím vás?

Na stránku http://vyosek.ic.cz/pro_usery/FRSTLauncher.exe se nemůžu vůbec dostat..

(Nebyla přijata žádná data ERR_EMPTY_RESPONSE)

#11 Příspěvek od **altrok** » 18 kvě 2015 11:42

Pokracujte tedy jen samotnym FRST (bez FRSTLauncheru) z http://www.bleepingcomputer.com/downloa ... scan-tool/

RacKastab · #12 Příspěvek od **RacKastab** » 18 kvě 2015 11:52

FRST:
-------------------
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05-2015 02
Ran by notebook (administrator) on NOTEBOOK-PC on 18-05-2015 12:43:54
Running from C:\Users\notebook\Desktop
Loaded Profiles: notebook (Available profiles: notebook)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Gretech Corp.) C:\Program Files (x86)\GRETECH\GomPlayer\GOM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Acresso Software Inc.) C:\Users\notebook\AppData\Local\Temp\{4953D15D-DC82-480A-8F36-E5DD99F02621}\setup.exe
(Acresso Software Inc.) C:\Users\notebook\AppData\Local\Temp\{BAA05214-1167-40F7-9DE4-015D4288FA04}\ISBEW64.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-18] (Avast Software s.r.o.)
HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\Run: [BitTorrent] => C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe [1696104 2015-05-12] (BitTorrent Inc.)
HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3108480 2012-10-23] (DT Soft Ltd)
HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\MountPoints2: {627f2a0e-cced-11e4-a6b8-70f395aae471} - E:\autorun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-18] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4054755293-3890498329-465695249-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gfe_rd=cr&ei=bNQ ... gws_rd=ssl
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4054755293-3890498329-465695249-1000 -> {099367EB-1912-45E9-9492-9C52AF1DBFEF} URL = https://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-18] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-18] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 172.16.1.1 172.16.1.254

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-18]

Chrome:
=======
CHR Profile: C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-17]
CHR Extension: (Bookmark Manager) - C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-17]
CHR Extension: (Avast Online Security) - C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-18]
CHR Extension: (Google Wallet) - C:\Users\notebook\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-17]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-18]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-18] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-05-18] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-18] (Avast Software)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2015-04-27] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-06-08] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-18] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-05-18] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-18] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-05-18] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-18] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-18] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-18] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-18] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-18] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-18] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2015-03-18] (DT Soft Ltd)
R2 IntelHaxm; C:\Windows\System32\DRIVERS\IntelHaxm.sys [84992 2015-01-30] (Intel Corporation)
R3 k57nd; C:\Windows\System32\DRIVERS\k57amd64.sys [343080 2010-05-15] (Broadcom Corporation)
S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [18456 2012-04-16] (HandSet Incorporated)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-18] (Avast Software)
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== Three Months Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 12:44 - 2015-05-18 12:45 - 00015560 _____ () C:\Windows\DirectX.log
2015-05-18 12:43 - 2015-05-18 12:46 - 00010806 _____ () C:\Users\notebook\Desktop\FRST.txt
2015-05-18 12:43 - 2015-05-18 12:43 - 00000000 ____D () C:\FRST
2015-05-18 12:42 - 2015-05-18 12:43 - 02107392 _____ (Farbar) C:\Users\notebook\Desktop\FRST64.exe
2015-05-18 12:38 - 2015-05-18 12:38 - 00009213 _____ () C:\Users\notebook\Desktop\Nepotvrzeno 188167.crdownload
2015-05-18 10:58 - 2015-05-18 10:58 - 00003110 _____ () C:\Users\notebook\Desktop\AdwCleaner[S0].txt
2015-05-18 10:56 - 2015-05-18 10:56 - 00000056 _____ () C:\Windows\setupact.log
2015-05-18 10:56 - 2015-05-18 10:56 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-18 10:44 - 2015-05-18 10:54 - 00000000 ____D () C:\AdwCleaner
2015-05-18 07:34 - 2015-05-18 09:53 - 00001790 _____ () C:\Users\notebook\Desktop\chrome – zástupce.lnk
2015-05-18 07:29 - 2015-05-18 07:30 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Dropbox
2015-05-18 07:22 - 2015-05-18 07:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-05-18 07:21 - 2015-05-18 07:21 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-05-18 07:21 - 2015-05-18 07:21 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
2015-05-18 07:21 - 2015-05-18 07:17 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-05-18 07:19 - 2015-05-18 07:19 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\AVAST Software
2015-05-18 07:18 - 2015-05-18 07:22 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-18 07:18 - 2015-05-18 07:19 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2015-05-18 07:18 - 2015-05-18 07:19 - 00000000 ____D () C:\Windows\system32\vbox
2015-05-18 07:17 - 2015-05-18 07:17 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-05-18 07:17 - 2015-05-18 07:17 - 00272248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-05-18 07:17 - 2015-05-18 07:17 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-05-18 07:17 - 2015-05-18 07:17 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-05-18 07:17 - 2015-05-18 07:17 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-05-18 07:17 - 2015-05-18 07:17 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-05-18 07:17 - 2015-05-18 07:17 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-05-18 07:17 - 2015-05-18 07:17 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-05-18 07:17 - 2015-05-18 07:16 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-05-18 07:15 - 2015-05-18 07:15 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-05-18 07:15 - 2015-05-18 07:15 - 00000000 ____D () C:\Program Files\AVAST Software
2015-05-17 19:53 - 2015-05-17 19:53 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\SYSTEMAX Software Development
2015-05-17 19:53 - 2015-05-17 19:53 - 00000000 ____D () C:\ProgramData\SYSTEMAX Software Development
2015-05-17 17:54 - 2015-05-17 17:54 - 00070840 _____ () C:\Users\notebook\Desktop\Misfits_S05E04_cz.zip
2015-05-17 17:45 - 2015-05-17 17:49 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2015-05-17 17:44 - 2015-05-17 17:44 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-05-17 17:31 - 2015-05-17 17:31 - 00002033 _____ () C:\Users\Public\Desktop\The Battle for Middle-earth (tm) II.lnk
2015-05-17 17:31 - 2015-05-17 17:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2015-05-17 17:22 - 2015-05-17 17:22 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-05-17 16:59 - 2015-05-17 17:00 - 00000000 ____D () C:\Users\notebook\Documents\Assassin's Creed IV Black Flag
2015-05-17 11:34 - 2015-05-17 11:34 - 00001775 _____ () C:\Users\Public\Desktop\Assassins Creed IV - Black Flag.lnk
2015-05-17 10:45 - 2015-05-17 10:45 - 00001175 _____ () C:\Users\notebook\Desktop\AIDA64 Extreme.lnk
2015-05-17 10:45 - 2015-05-17 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2015-05-17 10:45 - 2015-05-17 10:45 - 00000000 ____D () C:\Program Files (x86)\FinalWire
2015-05-17 10:21 - 2015-05-17 10:21 - 02209792 _____ () C:\Users\notebook\Desktop\adwcleaner_4.204.exe
2015-05-17 10:15 - 2015-05-17 10:15 - 00000000 _____ () C:\dfu.log
2015-05-17 10:13 - 2015-05-17 10:13 - 00001950 _____ () C:\Users\Public\Desktop\S.K.I.L.L. - Special Force 2.lnk
2015-05-17 10:12 - 2015-05-17 17:33 - 00000000 ____D () C:\Users\notebook\Downloads\Gameforge Live
2015-05-17 10:12 - 2015-05-17 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-05-17 10:12 - 2015-05-17 10:12 - 00001067 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2015-05-17 10:12 - 2015-05-17 10:12 - 00000000 ____D () C:\Users\notebook\AppData\Local\Gameforge4d
2015-05-17 10:11 - 2015-05-17 10:12 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2015-05-16 20:15 - 2015-05-16 21:11 - 00000000 ____D () C:\Users\notebook\Downloads\[ www.Torrenting.com ] - Misfits.S05E04.720p.HDTV.x264-TLA
2015-05-16 20:09 - 2015-05-16 20:10 - 00035841 _____ () C:\Users\notebook\Desktop\Misfits_S05E02_cz.zip
2015-05-16 19:09 - 2015-05-16 19:09 - 00000000 ____D () C:\Users\notebook\Downloads\Misfits S05E03 HDTV XviD-FUM[ettv]
2015-05-16 19:06 - 2015-05-16 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
2015-05-16 19:06 - 2015-05-16 19:06 - 00000000 ____D () C:\Program Files (x86)\ffdshow
2015-05-16 19:06 - 2014-07-17 19:31 - 00112640 _____ () C:\Windows\SysWOW64\ff_vfw.dll
2015-05-16 18:54 - 2015-05-16 18:56 - 00000000 ____D () C:\Users\notebook\Downloads\[ www.Torrenting.com ] - Misfits.5x02.720p_HDTV_x264-FoV
2015-05-16 11:57 - 2015-05-16 13:24 - 00000000 ____D () C:\Users\notebook\Downloads\Assassins.Creed.III-SKIDROW
2015-05-16 10:28 - 2015-05-16 12:05 - 00000000 ____D () C:\Users\notebook\Downloads\Adobe Photoshop CS6 13.0 Final CZ
2015-05-16 10:15 - 2015-05-16 12:30 - 00000000 ____D () C:\Users\notebook\Downloads\Lord of the Rings The Battle for Middle-Earth 2
2015-05-16 09:57 - 2015-05-16 12:02 - 00000000 ____D () C:\Users\notebook\Downloads\Assassins Creed IV - Black Flag (CZ)
2015-05-16 09:53 - 2015-05-16 13:14 - 00000000 ____D () C:\Users\notebook\Downloads\World of Warcraft 3.3.5a
2015-05-15 18:43 - 2015-05-15 18:43 - 00000000 ____D () C:\ProgramData\GRETECH
2015-05-15 18:41 - 2015-05-15 18:41 - 00001209 _____ () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2015-05-15 18:41 - 2015-05-15 18:41 - 00001185 _____ () C:\Users\Public\Desktop\GOM Player.lnk
2015-05-15 18:41 - 2015-05-15 18:41 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\GRETECH
2015-05-15 18:41 - 2015-05-15 18:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
2015-05-15 18:41 - 2015-05-15 18:41 - 00000000 ____D () C:\Program Files (x86)\GRETECH
2015-05-15 17:45 - 2015-05-15 23:17 - 00000000 ____D () C:\Users\notebook\Downloads\Misfits Season 4 (Complete 1-8)[Luke1382]
2015-05-15 17:45 - 2015-05-15 17:45 - 00037378 _____ () C:\Users\notebook\Desktop\misfits-s04e02-cz.zip
2015-05-15 17:45 - 2015-05-15 17:45 - 00034595 _____ () C:\Users\notebook\Desktop\misfits-s04e03-cz.zip
2015-05-15 17:45 - 2015-05-15 17:45 - 00018937 _____ () C:\Users\notebook\Desktop\Misfits.S04E08.HDTV.x264-FoV.zip
2015-05-15 17:45 - 2015-05-15 17:45 - 00018395 _____ () C:\Users\notebook\Desktop\Misfits.S04E06.HDTV.x264-FoV.zip
2015-05-15 17:45 - 2015-05-15 17:45 - 00017248 _____ () C:\Users\notebook\Desktop\misfits-s04e04-cz.zip
2015-05-15 17:38 - 2015-05-15 17:38 - 00035172 _____ () C:\Users\notebook\Desktop\misfits-s04e01-cz.zip
2015-05-14 22:03 - 2015-05-14 22:17 - 00000000 ____D () C:\Users\notebook\Downloads\Dead.Island-RELOADED
2015-05-13 13:40 - 2015-05-13 13:41 - 00000000 ____D () C:\Users\notebook\Downloads\Misfits
2015-05-13 13:39 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 13:39 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 10:57 - 2015-05-05 05:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 10:57 - 2015-05-05 05:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 10:56 - 2015-04-27 21:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 10:56 - 2015-04-27 21:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-13 10:56 - 2015-04-27 21:22 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-13 10:56 - 2015-04-27 21:22 - 00706496 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-05-13 10:56 - 2015-04-27 21:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-13 10:56 - 2015-04-27 21:22 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-13 10:56 - 2015-04-27 21:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-13 10:56 - 2015-04-27 21:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 10:56 - 2015-04-27 21:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-13 10:56 - 2015-04-27 21:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-13 10:56 - 2015-04-27 21:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-13 10:56 - 2015-04-27 21:20 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-13 10:56 - 2015-04-27 21:20 - 00631384 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-05-13 10:56 - 2015-04-27 21:18 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-13 10:56 - 2015-04-27 21:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-13 10:56 - 2015-04-27 21:18 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-13 10:56 - 2015-04-27 21:17 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-13 10:56 - 2015-04-27 21:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-13 10:56 - 2015-04-27 21:17 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-13 10:56 - 2015-04-27 21:16 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-13 10:56 - 2015-04-27 21:16 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-05-13 10:56 - 2015-04-27 21:16 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-13 10:56 - 2015-04-27 21:16 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-13 10:56 - 2015-04-27 21:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-05-13 10:56 - 2015-04-27 21:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-13 10:56 - 2015-04-27 21:12 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:10 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-13 10:56 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-13 10:56 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-13 10:56 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-13 10:56 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-13 10:56 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-13 10:56 - 2015-04-27 21:01 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-13 10:56 - 2015-04-27 21:01 - 03939264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-13 10:56 - 2015-04-27 20:58 - 01311256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-13 10:56 - 2015-04-27 20:56 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-13 10:56 - 2015-04-27 20:55 - 00643072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-13 10:56 - 2015-04-27 20:55 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-13 10:56 - 2015-04-27 20:55 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 10:56 - 2015-04-27 20:55 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-05-13 10:56 - 2015-04-27 20:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-13 10:56 - 2015-04-27 20:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-13 10:56 - 2015-04-27 20:55 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-13 10:56 - 2015-04-27 20:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-13 10:56 - 2015-04-27 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-13 10:56 - 2015-04-27 20:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-13 10:56 - 2015-04-27 20:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-13 10:56 - 2015-04-27 20:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-13 10:56 - 2015-04-27 20:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 20:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-05-13 10:56 - 2015-04-27 20:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-13 10:56 - 2015-04-27 19:54 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-13 10:56 - 2015-04-27 19:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-13 10:56 - 2015-04-27 19:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 19:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 19:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 10:56 - 2015-04-27 19:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-13 10:56 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 10:56 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 10:56 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 10:56 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 10:56 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 10:56 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 10:56 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 10:56 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 10:56 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 10:56 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 10:56 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 10:56 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 10:56 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 10:56 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 10:56 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 10:56 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 10:56 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 10:56 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 10:56 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 10:56 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 10:56 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-13 10:56 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 10:56 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 10:56 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 10:56 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 10:56 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-13 10:56 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-13 10:56 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 10:56 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 10:56 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 10:56 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-13 10:56 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 10:56 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 10:56 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-13 10:56 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-13 10:56 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-13 10:56 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 10:56 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-13 10:56 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-13 10:56 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 10:56 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 10:56 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-13 10:56 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 10:56 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 10:56 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-13 10:56 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 10:56 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-13 10:56 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 10:56 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 10:56 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 10:56 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 10:56 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 10:56 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 10:56 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-13 10:56 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 10:56 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 10:56 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 10:56 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 10:56 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 10:56 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-13 10:56 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 10:56 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 10:56 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 10:56 - 2015-04-20 04:07 - 03208704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 10:56 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 10:56 - 2015-03-19 01:39 - 00632984 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-05-13 10:56 - 2015-03-19 01:39 - 00546656 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-05-13 10:55 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 10:55 - 2015-04-08 05:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 10:55 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-13 10:55 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-13 10:55 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-13 10:55 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 10:55 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-13 10:55 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-13 10:55 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-13 10:55 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-13 10:55 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-13 10:55 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 10:55 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 10:55 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-12 12:10 - 2015-05-12 12:10 - 00000000 ____D () C:\Users\notebook\AppData\Local\SKIDROW
2015-05-12 12:10 - 2015-05-12 12:10 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-05-12 12:07 - 2015-05-12 12:07 - 00000000 ____D () C:\Users\notebook\AppData\Local\2K Games
2015-05-12 12:04 - 2015-05-12 12:04 - 00001597 _____ () C:\Users\notebook\Desktop\MAFIA II .lnk
2015-05-12 12:01 - 2015-05-12 12:02 - 00000000 ____D () C:\Users\notebook\Desktop\skladby
2015-05-12 11:39 - 2015-05-12 11:42 - 00000000 ____D () C:\Users\notebook\Downloads\Morčata na útěku - diskografie 2004 - 2013
2015-05-12 10:59 - 2015-05-12 10:59 - 00000000 ____D () C:\Users\notebook\Downloads\Mafia 2 - Special Extended Edition CZ
2015-05-10 14:21 - 2015-05-10 14:21 - 00000903 _____ () C:\Users\notebook\Desktop\Sniper3Launcher – zástupce.lnk
2015-05-08 21:57 - 2015-05-18 11:09 - 01167012 _____ () C:\Windows\WindowsUpdate.log
2015-05-01 19:14 - 2015-05-18 10:57 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-05-01 18:44 - 2015-05-01 18:44 - 00000000 ___RD () C:\Users\notebook\Documents\Notes
2015-05-01 10:57 - 2015-05-01 10:57 - 00003674 _____ () C:\Windows\System32\Tasks\Personal Computer Security Service
2015-05-01 10:56 - 2015-05-01 10:56 - 00000000 ____D () C:\Program Files (x86)\Personal Computer Security
2015-04-28 08:53 - 2015-05-17 08:46 - 00070144 _____ () C:\Windows\SysWOW64\tasks.dll
2015-04-27 14:19 - 2015-04-27 14:19 - 00000000 ____D () C:\Users\notebook\Documents\Assassin's Creed Revelations
2015-04-27 13:04 - 2015-04-27 13:04 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\PunkBuster
2015-04-27 10:58 - 2015-04-27 12:46 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2015-04-27 10:56 - 2015-04-27 12:37 - 106864640 _____ () C:\Users\notebook\Downloads\Assassins.Creed.Revelations-SKIDROW.iso
2015-04-27 10:55 - 2015-04-27 13:04 - 00189248 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2015-04-27 10:55 - 2015-04-27 13:04 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-04-27 10:32 - 2015-04-27 10:32 - 00001232 _____ () C:\Users\Public\Desktop\Assassin's Creed Brotherhood.lnk
2015-04-27 10:32 - 2015-04-27 10:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assassin's Creed Brotherhood
2015-04-27 10:29 - 2015-04-28 09:33 - 00000000 ____D () C:\Program Files (x86)\Assassin's Creed Brotherhood
2015-04-27 10:26 - 2015-04-27 10:26 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\TeamViewer
2015-04-27 09:30 - 2015-04-27 10:03 - 00000000 ____D () C:\Users\notebook\Downloads\Assasin's Creed BrotherHood
2015-04-27 08:45 - 2015-05-18 07:43 - 00000000 ____D () C:\Program Files (x86)\Safesoft Protector
2015-04-27 08:45 - 2015-04-27 08:45 - 00000000 _____ () C:\Users\notebook\AppData\Roaming\D417.tmp
2015-04-16 23:16 - 2015-04-16 23:16 - 00000000 _____ () C:\Windows\SysWOW64\RENA36F.tmp
2015-04-15 10:02 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 10:02 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 10:02 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 10:02 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 10:02 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 10:02 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 10:02 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 10:02 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 10:02 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 10:02 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 10:02 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 10:02 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 10:02 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 10:02 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 10:02 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 10:02 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 10:02 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 10:02 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 10:02 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 10:02 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 10:02 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 10:02 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 10:02 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 10:02 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 10:02 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 10:02 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 10:02 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 10:02 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 10:02 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 10:02 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 10:02 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 09:57 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 09:57 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 09:57 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-13 08:20 - 2015-05-18 12:15 - 00000000 ____D () C:\Program Files\trend micro
2015-04-13 08:20 - 2015-04-13 08:20 - 00000000 ____D () C:\rsit
2015-04-12 21:22 - 2015-04-12 21:24 - 01222144 _____ () C:\Users\notebook\Desktop\RSITx64.exe
2015-04-12 12:52 - 2015-04-12 12:53 - 00000000 ____D () C:\Users\notebook\Documents\Heroes of the Storm
2015-04-12 12:15 - 2015-04-12 12:15 - 00001189 _____ () C:\Users\Public\Desktop\Heroes of the Storm.lnk
2015-04-12 12:15 - 2015-04-12 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm
2015-04-12 11:05 - 2015-05-12 10:52 - 00000000 ____D () C:\Program Files (x86)\Heroes of the Storm
2015-04-10 18:09 - 2015-04-10 18:09 - 00000000 ____D () C:\Users\notebook\AppData\Local\Blizzard
2015-04-10 02:02 - 2015-05-12 11:20 - 00000000 ____D () C:\Users\notebook\AppData\Local\Battle.net
2015-04-10 02:02 - 2015-04-10 02:43 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Battle.net
2015-04-10 02:02 - 2015-04-10 02:02 - 00001144 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2015-04-10 02:02 - 2015-04-10 02:02 - 00000000 ____D () C:\Users\notebook\AppData\Local\Blizzard Entertainment
2015-04-10 02:01 - 2015-05-12 11:00 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2015-04-10 02:01 - 2015-04-12 12:52 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2015-04-10 02:01 - 2015-04-10 02:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-04-10 01:48 - 2015-04-10 01:48 - 00000000 ____D () C:\ProgramData\Battle.net
2015-04-09 19:49 - 2015-05-11 10:52 - 00000000 ____D () C:\Users\notebook\AppData\Local\Microsoft Games
2015-04-09 19:48 - 2015-04-09 19:48 - 00000588 _____ () C:\Users\notebook\Desktop\Zaklínač rozšířená edice – zástupce.lnk
2015-04-05 02:32 - 2015-05-17 12:13 - 00000000 ____D () C:\Users\notebook\Downloads\call of duty 2 cz
2015-04-04 23:01 - 2015-04-04 23:01 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-04 23:01 - 2015-04-04 23:01 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-04 18:56 - 2015-04-27 14:19 - 00000000 ____D () C:\ProgramData\Ubisoft
2015-04-04 18:56 - 2015-04-04 18:56 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Ubisoft
2015-04-04 18:00 - 2015-05-17 11:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hry
2015-04-04 18:00 - 2015-04-04 18:00 - 00000826 _____ () C:\Users\Public\Desktop\Assassins Creed II.lnk
2015-04-04 17:52 - 2015-05-17 11:15 - 00000000 ____D () C:\Hry
2015-04-03 23:23 - 2015-04-03 23:23 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2015-04-03 04:53 - 2015-04-03 04:53 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\JetBrains
2015-04-03 04:53 - 2015-04-03 04:53 - 00000000 ____D () C:\Users\notebook\.AndroidStudio
2015-04-03 04:50 - 2015-04-03 04:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
2015-04-03 04:50 - 2015-04-03 04:50 - 00000000 ____D () C:\Program Files\Intel
2015-04-03 04:50 - 2015-01-30 10:02 - 00084992 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelHaxm.sys
2015-04-03 04:41 - 2015-04-03 04:41 - 00000000 ____D () C:\Users\notebook\AppData\Local\Android
2015-04-03 04:39 - 2015-04-03 04:39 - 00000000 ____D () C:\Program Files\Android
2015-04-03 04:38 - 2015-04-16 23:15 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-04-03 04:38 - 2015-04-03 04:37 - 00320424 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-04-03 04:38 - 2015-04-03 04:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-04-03 04:38 - 2015-04-03 04:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-04-03 04:37 - 2015-04-03 04:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2015-04-03 04:36 - 2015-04-16 23:15 - 00000000 ____D () C:\Program Files\Java
2015-04-03 04:29 - 2015-04-03 04:29 - 00000000 ____D () C:\ProgramData\Sun
2015-04-03 04:29 - 2015-04-03 04:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-03 04:28 - 2015-04-16 23:58 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-03 04:28 - 2015-04-16 23:16 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-03 04:26 - 2015-04-03 04:58 - 00000000 ____D () C:\Users\notebook\.android
2015-04-03 04:26 - 2012-04-16 15:56 - 00018456 _____ (HandSet Incorporated) C:\Windows\system32\Drivers\massfilter_hs.sys
2015-04-03 04:26 - 2011-10-26 15:31 - 00067608 _____ (Google, inc) C:\Windows\AdbWinUsbApi.dll
2015-04-03 04:26 - 2011-08-15 16:43 - 00584584 _____ () C:\Windows\adb.exe
2015-04-03 04:26 - 2011-08-15 16:43 - 00102936 _____ (Google, inc) C:\Windows\AdbWinApi.dll
2015-04-03 00:08 - 2015-04-03 00:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-04-02 09:33 - 2015-04-02 09:33 - 00000000 ____D () C:\Program Files\DIFX
2015-04-02 09:32 - 2015-04-02 09:32 - 00000000 ____D () C:\Users\notebook\adb
2015-03-29 00:05 - 2015-03-29 00:05 - 00001568 _____ () C:\Users\notebook\Desktop\OLGame – zástupce.lnk
2015-03-28 11:44 - 2015-03-28 11:44 - 00000000 ____D () C:\Users\notebook\Documents\My Games
2015-03-28 11:44 - 2015-03-28 11:44 - 00000000 ____D () C:\ProgramData\Steam
2015-03-26 17:04 - 2015-03-26 17:04 - 00000000 ____D () C:\Users\notebook\AppData\Local\Sniper3
2015-03-26 17:04 - 2015-03-26 17:04 - 00000000 ____D () C:\ProgramData\ALI213
2015-03-26 16:58 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2015-03-26 16:58 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2015-03-26 16:58 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2015-03-26 16:58 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2015-03-26 16:58 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2015-03-26 16:58 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2015-03-26 16:56 - 2015-03-26 16:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gamesy
2015-03-26 16:31 - 2015-03-26 16:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlast + DLC Whistleblower
2015-03-26 16:13 - 2015-04-21 23:21 - 00000000 ____D () C:\Users\notebook\AppData\Local\The Witcher
2015-03-26 16:13 - 2015-03-30 14:23 - 00000000 ____D () C:\Users\notebook\Documents\The Witcher
2015-03-26 15:51 - 2015-04-27 12:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-26 15:50 - 2015-03-26 16:08 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2015-03-24 18:43 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-03-24 18:43 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-03-24 18:43 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2015-03-24 18:43 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2015-03-24 18:43 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-03-24 18:43 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-03-24 18:43 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2015-03-24 18:43 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2015-03-24 18:43 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2015-03-24 18:43 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2015-03-24 18:43 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2015-03-24 18:43 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2015-03-24 18:43 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2015-03-24 18:43 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2015-03-24 18:43 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2015-03-24 18:43 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2015-03-24 18:43 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2015-03-24 18:43 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2015-03-24 18:43 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2015-03-24 18:43 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2015-03-24 18:43 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2015-03-24 18:43 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2015-03-24 18:43 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2015-03-24 18:43 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2015-03-24 18:43 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2015-03-24 18:43 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2015-03-24 18:43 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-03-24 18:43 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-03-24 18:43 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-03-24 18:43 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-03-24 18:43 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-03-24 18:43 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-03-24 18:43 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2015-03-24 18:43 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2015-03-24 18:43 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2015-03-24 18:43 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2015-03-24 18:43 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2015-03-24 18:43 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2015-03-24 18:43 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2015-03-24 18:43 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2015-03-24 18:43 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2015-03-24 18:43 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2015-03-24 18:43 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2015-03-24 18:43 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2015-03-24 18:43 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2015-03-24 18:43 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2015-03-24 18:43 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2015-03-24 18:43 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2015-03-24 18:43 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2015-03-24 18:43 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2015-03-24 18:43 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2015-03-24 18:43 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2015-03-24 18:43 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2015-03-24 18:43 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2015-03-24 18:43 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2015-03-24 18:43 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2015-03-24 18:43 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2015-03-24 18:43 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2015-03-24 18:43 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2015-03-24 18:43 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2015-03-24 18:43 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2015-03-24 18:43 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2015-03-24 18:43 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2015-03-24 18:43 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2015-03-24 18:43 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2015-03-24 18:43 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2015-03-24 18:43 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2015-03-24 18:43 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2015-03-24 18:43 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2015-03-24 18:43 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2015-03-24 18:43 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2015-03-24 18:43 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2015-03-24 18:43 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2015-03-24 18:43 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2015-03-24 18:43 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2015-03-24 18:43 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2015-03-24 18:43 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2015-03-24 18:43 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2015-03-24 18:43 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2015-03-24 18:43 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2015-03-24 18:43 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2015-03-24 18:43 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2015-03-24 18:43 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2015-03-24 18:43 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2015-03-24 18:43 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2015-03-24 18:43 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2015-03-24 18:43 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2015-03-24 18:43 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2015-03-24 18:43 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2015-03-24 18:43 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-03-24 18:43 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-03-24 18:43 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2015-03-24 18:43 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2015-03-24 18:43 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2015-03-24 18:43 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2015-03-24 18:43 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2015-03-24 18:43 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2015-03-24 18:43 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2015-03-24 18:43 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2015-03-24 18:43 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2015-03-24 18:43 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2015-03-24 18:43 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2015-03-24 18:43 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2015-03-24 18:43 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2015-03-24 18:43 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2015-03-24 18:43 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2015-03-24 18:43 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2015-03-24 18:43 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2015-03-24 18:43 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2015-03-24 18:43 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2015-03-24 18:43 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2015-03-24 18:43 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2015-03-24 18:43 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2015-03-24 18:43 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2015-03-24 18:43 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2015-03-24 18:43 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2015-03-24 18:43 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2015-03-24 18:43 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2015-03-24 18:43 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2015-03-24 18:42 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2015-03-24 18:42 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2015-03-24 18:42 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2015-03-24 18:42 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2015-03-24 18:42 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2015-03-24 18:42 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2015-03-24 18:42 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2015-03-24 18:42 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2015-03-24 18:42 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2015-03-24 18:42 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2015-03-24 18:42 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2015-03-24 18:42 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2015-03-24 18:42 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2015-03-24 18:42 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2015-03-24 18:42 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2015-03-24 18:42 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2015-03-24 18:42 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2015-03-24 18:42 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2015-03-24 18:42 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2015-03-24 18:42 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2015-03-24 17:51 - 2015-03-24 18:43 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-03-24 17:51 - 2015-03-24 18:41 - 00000000 ___HD () C:\Windows\msdownld.tmp
2015-03-24 15:39 - 2015-03-24 15:39 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Macromedia
2015-03-24 15:39 - 2015-03-24 15:39 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\LolClient
2015-03-23 16:57 - 2015-03-26 02:23 - 00000000 ____D () C:\Users\notebook\Downloads\Outlast + DLC Whistleblower (2013-2014)(Cz)
2015-03-22 18:21 - 2015-03-22 18:22 - 3447160832 _____ () C:\Users\notebook\Downloads\Sniper Elite V2 CZ (2012).iso
2015-03-22 17:07 - 2015-03-22 18:33 - 00000000 ____D () C:\Users\notebook\Downloads\Counter-Strike Global Offensive [RePack] [Tolyak26]
2015-03-22 17:06 - 2015-03-26 01:45 - 00000000 ____D () C:\Users\notebook\Downloads\Sniper Elite III
2015-03-22 12:24 - 2015-03-22 12:24 - 00000220 _____ () C:\Users\notebook\Desktop\Killing Floor.url
2015-03-22 12:24 - 2015-03-22 12:24 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-22 12:20 - 2015-03-22 12:20 - 00000000 ____D () C:\Users\notebook\AppData\Local\Steam
2015-03-22 12:10 - 2015-05-17 10:30 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-03-22 12:10 - 2015-03-22 12:10 - 00000963 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-03-22 12:10 - 2015-03-22 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-18 01:58 - 2015-03-25 21:40 - 00000000 ____D () C:\Users\notebook\Documents\Baldur's Gate - Enhanced Edition
2015-03-18 01:58 - 2015-03-18 01:58 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2015-03-18 01:58 - 2015-03-18 01:58 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2015-03-18 01:58 - 2015-03-18 01:58 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2015-03-18 01:58 - 2015-03-18 01:58 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
------------------------------------------------------------------------------------------------------------

RacKastab · #13 Příspěvek od **RacKastab** » 18 kvě 2015 11:52

FRST 02:
-----------------------
2015-03-18 01:58 - 2015-03-18 01:58 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2015-03-18 01:57 - 2015-03-18 01:57 - 00000999 _____ () C:\Users\Public\Desktop\Baldur's Gate Enhanced Edition.lnk
2015-03-18 01:57 - 2015-03-18 01:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beamdog
2015-03-18 01:52 - 2015-05-17 17:22 - 00000000 ____D () C:\Gamesy
2015-03-18 01:44 - 2015-03-18 01:44 - 00001932 _____ () C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
2015-03-18 01:44 - 2015-03-18 01:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2015-03-18 01:43 - 2015-05-18 12:41 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\DAEMON Tools Pro
2015-03-18 01:43 - 2015-03-18 01:45 - 00000000 ____D () C:\ProgramData\DAEMON Tools Pro
2015-03-18 01:43 - 2015-03-18 01:43 - 00283200 _____ (DT Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2015-03-18 01:43 - 2015-03-18 01:43 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Pro
2015-03-18 01:40 - 2015-03-18 01:40 - 00000000 ____D () C:\Users\notebook\Downloads\Daemon Tools Pro. 5.2.0.0348.0 MULTI CRACK + SPTD 1.83.0.0
2015-03-18 01:37 - 2015-03-18 01:37 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-03-17 13:38 - 2015-03-17 23:59 - 00000000 ____D () C:\Users\notebook\Downloads\Baldurs.Gate.Enhanced.Edition.MULTi14-PROPHET
2015-03-17 13:36 - 2015-03-17 13:36 - 00000877 _____ () C:\Users\notebook\Desktop\BitTorrent.lnk
2015-03-17 13:36 - 2015-03-17 13:36 - 00000857 _____ () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2015-03-17 13:13 - 2015-05-18 11:00 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\BitTorrent
2015-03-17 03:43 - 2015-03-17 03:43 - 00000000 ____D () C:\ProgramData\Riot Games
2015-03-17 03:39 - 2015-03-17 03:39 - 00001613 _____ () C:\Users\Public\Desktop\League of Legends.lnk
2015-03-17 03:39 - 2015-03-17 03:39 - 00000000 ____D () C:\Riot Games
2015-03-17 03:39 - 2015-03-17 03:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-03-17 03:33 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-03-17 03:33 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-03-17 03:33 - 2008-07-12 09:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-03-17 03:33 - 2008-07-12 09:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-03-17 03:33 - 2008-07-12 09:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-03-17 03:16 - 2015-03-17 03:16 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-03-17 03:16 - 2015-03-17 03:16 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-03-17 03:16 - 2015-03-17 03:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-03-17 03:16 - 2015-03-17 03:16 - 00000000 ____D () C:\Program Files\CCleaner
2015-03-17 03:15 - 2015-03-17 03:41 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Riot Games
2015-03-17 01:27 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-03-17 01:27 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-03-17 01:27 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-03-17 01:27 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-03-17 01:27 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-03-17 01:27 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-03-17 01:27 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-03-17 01:27 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-03-17 01:27 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-03-17 01:27 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-03-17 01:10 - 2015-04-15 22:42 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-17 01:10 - 2015-04-15 22:42 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-17 00:59 - 2015-01-09 01:44 - 00419936 _____ () C:\Windows\SysWOW64\locale.nls
2015-03-17 00:59 - 2015-01-09 01:43 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-03-17 00:48 - 2015-03-17 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-03-17 00:46 - 2015-03-17 00:46 - 00000930 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-03-17 00:46 - 2015-03-17 00:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-03-17 00:46 - 2015-03-17 00:46 - 00000000 ____D () C:\Program Files\CPUID
2015-03-17 00:45 - 2015-05-18 12:05 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-17 00:45 - 2015-05-15 08:50 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-03-17 00:45 - 2015-05-15 08:50 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-03-17 00:45 - 2015-05-15 08:50 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-17 00:45 - 2015-03-17 00:48 - 00000000 ____D () C:\Users\notebook\AppData\Local\Google
2015-03-17 00:45 - 2015-03-17 00:47 - 00000000 ____D () C:\Program Files (x86)\Google
2015-03-17 00:44 - 2015-03-17 00:45 - 00000000 ____D () C:\Users\notebook\AppData\Local\Deployment
2015-03-17 00:44 - 2015-03-17 00:44 - 00000000 ____D () C:\Users\notebook\AppData\Local\Apps\2.0
2015-03-14 12:25 - 2015-03-14 12:25 - 00000000 __SHD () C:\Users\notebook\AppData\Local\EmieBrowserModeList
2015-03-14 09:55 - 2015-05-13 13:54 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-14 09:55 - 2015-05-13 13:45 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-14 09:53 - 2015-03-14 09:53 - 00000000 ____D () C:\Users\notebook\Documents\AIDA64 Reports
2015-03-14 09:48 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-03-14 09:48 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-03-14 09:42 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-14 09:42 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-14 09:42 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-14 09:42 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-14 09:42 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-14 09:42 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-14 09:42 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-14 09:42 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-14 09:42 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-14 09:42 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-14 09:42 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-14 09:42 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-14 09:42 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-14 09:42 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-14 09:42 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-14 09:42 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-14 09:42 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-14 09:42 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-14 09:42 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-14 09:42 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-14 09:42 - 2014-10-14 04:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-03-14 09:41 - 2014-11-11 05:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-03-14 09:41 - 2014-11-11 04:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-03-14 09:41 - 2014-10-14 04:16 - 03243008 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-03-14 09:41 - 2014-10-14 03:49 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-03-14 09:41 - 2014-09-18 23:32 - 00112568 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-03-14 09:41 - 2014-09-18 23:29 - 01942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-03-14 09:41 - 2014-09-18 03:43 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-03-14 09:41 - 2014-09-18 03:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-03-14 09:41 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-03-14 09:41 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-03-14 09:41 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-03-14 09:41 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-03-14 09:41 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-03-14 09:41 - 2014-07-16 04:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-03-14 09:41 - 2014-06-03 04:42 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-03-14 09:40 - 2015-01-31 01:58 - 00459344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-14 09:40 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-03-14 09:40 - 2014-11-07 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-03-14 09:40 - 2014-11-07 05:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-03-14 09:40 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-14 09:40 - 2014-04-05 04:37 - 01897408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-03-14 09:40 - 2014-04-05 04:37 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-03-14 09:40 - 2014-04-05 04:37 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-03-14 09:40 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-03-14 09:40 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-03-14 09:40 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-03-14 09:40 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-03-14 09:39 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-14 09:39 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-14 09:39 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-14 09:39 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-14 09:39 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-14 09:39 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-14 09:39 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-14 09:39 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-14 09:39 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-14 09:39 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-14 09:39 - 2015-02-13 07:13 - 14182912 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-14 09:39 - 2015-02-13 07:01 - 12878336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-14 09:39 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-14 09:39 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-14 09:39 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-14 09:39 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-14 09:39 - 2015-01-31 05:48 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-14 09:39 - 2015-01-31 05:48 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-03-14 09:39 - 2015-01-31 01:56 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-14 09:39 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-14 09:39 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-14 09:39 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-14 09:39 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-14 09:39 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-14 09:39 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-14 09:39 - 2014-12-19 05:30 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-03-14 09:39 - 2014-12-19 05:30 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-03-14 09:39 - 2014-12-19 05:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-03-14 09:39 - 2014-12-19 05:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2015-03-14 09:39 - 2014-12-19 05:03 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-03-14 09:39 - 2014-12-19 05:03 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-03-14 09:39 - 2014-12-19 03:53 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-03-14 09:39 - 2014-12-11 19:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-03-14 09:39 - 2014-12-08 05:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-03-14 09:39 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-03-14 09:39 - 2014-12-06 06:31 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-03-14 09:39 - 2014-12-06 06:31 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-03-14 09:39 - 2014-12-06 06:18 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-03-14 09:39 - 2014-12-06 06:18 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-03-14 09:39 - 2014-11-26 05:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-03-14 09:39 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-03-14 09:39 - 2014-11-11 03:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-03-14 09:39 - 2014-10-30 04:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-03-14 09:39 - 2014-10-30 03:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-03-14 09:39 - 2014-10-25 03:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-03-14 09:39 - 2014-10-25 03:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-03-14 09:39 - 2014-10-03 04:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-03-14 09:39 - 2014-10-03 04:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-03-14 09:39 - 2014-10-03 04:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-03-14 09:39 - 2014-10-03 04:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-03-14 09:39 - 2014-10-03 04:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-03-14 09:39 - 2014-10-03 03:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-03-14 09:39 - 2014-10-03 03:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-03-14 09:39 - 2014-10-03 03:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-03-14 09:39 - 2014-10-03 03:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-03-14 09:39 - 2014-10-03 03:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-03-14 09:39 - 2014-09-05 04:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-03-14 09:39 - 2014-09-05 03:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-03-14 09:39 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-03-14 09:39 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-03-14 09:39 - 2014-08-12 04:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-03-14 09:39 - 2014-08-12 03:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-03-14 09:39 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-03-14 09:39 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-03-14 09:39 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-03-14 09:39 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-03-14 09:39 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-03-14 09:39 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-03-14 09:39 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-03-14 09:39 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-03-14 09:39 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-03-14 09:39 - 2014-05-30 08:41 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-03-14 09:39 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-03-14 09:39 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-03-14 09:33 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-14 09:33 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-14 09:25 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-03-14 09:25 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-03-14 09:24 - 2015-03-14 09:24 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\AMD
2015-03-14 09:15 - 2015-03-14 09:15 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\ATI
2015-03-14 09:15 - 2015-03-14 09:15 - 00000000 ____D () C:\Users\notebook\AppData\Local\ATI
2015-03-14 09:15 - 2015-03-14 09:15 - 00000000 ____D () C:\ProgramData\ATI
2015-03-14 09:13 - 2015-03-14 09:13 - 00000000 _____ () C:\Windows\ativpsrm.bin
2015-03-14 09:02 - 2010-05-15 06:43 - 00343080 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57amd64.sys
2015-03-14 09:00 - 2015-03-14 09:00 - 00000000 ____D () C:\Users\notebook\Tracing
2015-03-14 08:55 - 2015-03-14 08:55 - 00000184 _____ () C:\Windows\LMv4.UNI
2015-03-14 08:55 - 2015-03-14 08:55 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\WinRAR
2015-03-14 08:55 - 2015-03-14 08:55 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\library_dir
2015-03-14 08:55 - 2015-03-14 08:55 - 00000000 ____D () C:\Program Files (x86)\Launch Manager
2015-03-14 08:55 - 2015-03-14 08:55 - 00000000 _____ () C:\Windows\Setup.INI
2015-03-14 08:55 - 2010-01-25 16:09 - 00349776 _____ (Dritek System Inc.) C:\Windows\UNINSTLMv4.EXE
2015-03-14 08:54 - 2015-03-14 09:07 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-03-14 08:54 - 2015-03-14 08:54 - 00053564 _____ () C:\Windows\SysWOW64\CCCInstall_201503140754116418.log
2015-03-14 08:54 - 2015-03-14 08:54 - 00000000 ____D () C:\ProgramData\AMD
2015-03-14 08:54 - 2015-03-14 08:54 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-03-14 08:53 - 2015-03-14 08:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-03-14 08:52 - 2015-03-14 08:52 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-03-14 08:51 - 2015-03-14 08:51 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2015-03-14 08:50 - 2015-03-14 08:52 - 00000000 ____D () C:\Program Files\AMD
2015-03-14 08:50 - 2015-03-14 08:51 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-14 08:49 - 2015-03-14 09:02 - 00000000 ____D () C:\Users\notebook\Desktop\ovladače
2015-03-14 08:48 - 2015-05-14 09:49 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Skype
2015-03-14 08:48 - 2015-03-14 08:48 - 00000000 ____D () C:\Users\notebook\AppData\Local\Skype
2015-03-14 08:48 - 2015-03-14 08:48 - 00000000 ____D () C:\AMD
2015-03-14 08:47 - 2015-05-01 18:43 - 00000000 ____D () C:\ProgramData\Skype
2015-03-14 08:47 - 2015-03-14 08:47 - 00002731 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-03-14 08:47 - 2015-03-14 08:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-03-14 08:47 - 2015-03-14 08:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-03-14 08:25 - 2015-03-14 08:25 - 00000000 __SHD () C:\Users\notebook\AppData\Local\EmieUserList
2015-03-14 08:25 - 2015-03-14 08:25 - 00000000 __SHD () C:\Users\notebook\AppData\Local\EmieSiteList
2015-03-14 08:23 - 2015-05-18 07:14 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-03-14 08:21 - 2015-03-14 08:21 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-03-14 08:21 - 2015-03-14 08:21 - 00000000 ____D () C:\Intel
2015-03-14 08:21 - 2013-02-27 16:37 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2015-03-14 08:20 - 2015-03-14 08:20 - 00057654 _____ () C:\Windows\OEMLogo.bmp
2015-03-14 08:18 - 2015-03-14 08:18 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-14 08:18 - 2015-03-14 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-03-14 08:18 - 2015-03-14 08:18 - 00000000 ____D () C:\Program Files\WinRAR
2015-03-14 08:14 - 2015-03-14 08:14 - 00000000 ____D () C:\SWSetup
2015-03-14 08:14 - 2015-03-14 08:14 - 00000000 ____D () C:\ProgramData\Qualcomm Atheros
2015-03-14 08:12 - 2015-03-14 08:12 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-03-14 08:04 - 2015-05-17 08:47 - 00001315 _____ () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-14 08:04 - 2015-03-14 08:04 - 00000000 ____D () C:\Users\notebook\AppData\Roaming\Adobe
2015-03-14 08:04 - 2015-03-14 08:04 - 00000000 ____D () C:\Users\notebook\AppData\Local\VirtualStore
2015-03-14 07:43 - 2015-04-15 12:02 - 01558096 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-03-14 07:36 - 2015-03-14 07:36 - 00058016 _____ () C:\Users\notebook\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-14 07:35 - 2015-05-12 12:10 - 00000000 ____D () C:\Users\notebook
2015-03-14 07:35 - 2015-03-14 07:35 - 00000020 ___SH () C:\Users\notebook\ntuser.ini
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Public\Documents\Obrázky
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Public\Documents\Hudba
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Public\Documents\Filmy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Šablony
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Soubory cookie
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Poslední
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Okolní tiskárny
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Okolní síť
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Nabídka Start
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Dokumenty
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Documents\Obrázky
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Documents\Hudba
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Documents\Filmy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\Data aplikací
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\notebook\AppData\Local\Data aplikací
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Šablony
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Soubory cookie
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Poslední
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Okolní tiskárny
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Okolní síť
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Nabídka Start
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Dokumenty
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Documents\Obrázky
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Documents\Hudba
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Documents\Filmy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\Data aplikací
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Data aplikací
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default User\Documents\Obrázky
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default User\Documents\Hudba
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default User\Documents\Filmy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Data aplikací
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\ProgramData\Šablony
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\ProgramData\Plocha
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\ProgramData\Oblíbené položky
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\ProgramData\Nabídka Start
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\ProgramData\Dokumenty
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 _SHDL () C:\ProgramData\Data aplikací
2015-03-14 07:35 - 2015-03-14 07:35 - 00000000 __SHD () C:\Recovery
2015-03-14 07:35 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-14 07:35 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-14 07:28 - 2015-03-14 07:37 - 00004484 _____ () C:\Windows\system32\WinToolkit_RunOnce_Log.log
2015-03-14 07:28 - 2015-03-14 07:28 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-03-14 07:28 - 2015-03-14 07:28 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-03-14 07:21 - 2015-03-17 03:17 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 11:11 - 2009-07-14 06:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-18 11:11 - 2009-07-14 06:45 - 00021472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-18 10:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-14 14:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-05-14 09:40 - 2010-11-21 11:27 - 00668376 _____ () C:\Windows\system32\perfh005.dat
2015-05-14 09:40 - 2010-11-21 11:27 - 00141004 _____ () C:\Windows\system32\perfc005.dat
2015-05-14 09:40 - 2009-07-14 07:13 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-14 09:34 - 2009-07-14 06:45 - 00267368 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-14 01:20 - 2010-11-21 11:38 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-14 01:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-02 10:27 - 2010-11-21 11:38 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-05-01 19:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-27 13:00 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

==================== Files in the root of some directories =======

2015-04-27 08:45 - 2015-04-27 08:45 - 0000000 _____ () C:\Users\notebook\AppData\Roaming\D417.tmp
2015-04-28 08:55 - 2015-04-28 08:55 - 0009662 _____ () C:\Users\notebook\AppData\Roaming\em_64x64.ico

Some content of TEMP:
====================
C:\Users\notebook\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\notebook\AppData\Local\Temp\ed6e8e8c4b588010c8f64663407c6196.dll
C:\Users\notebook\AppData\Local\Temp\fd7675ba8f6b75ed07f0b65f2f866960.dll
C:\Users\notebook\AppData\Local\Temp\Quarantine.exe
C:\Users\notebook\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-05-14 13:56

==================== End Of Log ============================

RacKastab · #14 Příspěvek od **RacKastab** » 18 kvě 2015 11:53

Audition:
------------------------------------------
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-05-2015 02
Ran by notebook at 2015-05-18 12:46:59
Running from C:\Users\notebook\Desktop
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-4054755293-3890498329-465695249-500 - Administrator - Disabled)
Guest (S-1-5-21-4054755293-3890498329-465695249-501 - Limited - Disabled)
notebook (S-1-5-21-4054755293-3890498329-465695249-1000 - Administrator - Enabled) => C:\Users\notebook

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
AIDA64 Extreme v5.00 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.00 - FinalWire Ltd.)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
Assassin's Creed Brotherhood 1.0 (HKLM-x32\...\Assassin's Creed Brotherhood_is1) (Version: - Ubisoft)
Assassins Creed II 1.01 (HKLM-x32\...\Assassins Creed II_is1) (Version: - )
Assassins Creed IV - Black Flag 1.01 (HKLM-x32\...\{9DF5E81T-0C6U-4FZ7-ABG5-3E5KE3F1BG2Z}_is1) (Version: - )
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Baldur's Gate - Enhanced Edition (HKLM-x32\...\Baldur's Gate - Enhanced Edition_is1) (Version: - )
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BitTorrent (HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\BitTorrent) (Version: 7.9.3.40299 - BitTorrent Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
CPUID HWMonitor 1.27 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 5.2.0.0348 - DT Soft Ltd)
ffdshow v1.3.4532 [2014-07-17] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4532.0 - )
Gameforge Live 2.0.6 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.6 - Gameforge)
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.2.69.5227 - Gretech Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{ECCB31F5-435D-4F37-A98D-5854D3C62718}) (Version: 1.1.1 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)
Killing Floor (HKLM-x32\...\Steam App 1250) (Version: - Tripwire Interactive)
Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.12 - Acer Inc.)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Outlast + DLC Whistleblower verze 1.0 (HKLM-x32\...\Outlast + DLC Whistleblower_is1) (Version: 1.0 - Danik1B9)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
S.K.I.L.L. - Special Force 2 (HKLM-x32\...\Special Force 2 Beta_is1) (Version: - )
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
Sniper Elite III (HKLM-x32\...\Sniper Elite III_is1) (Version: 1.01 - Codemasters)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Battle for Middle-earth (tm) II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
WinRAR 5.01 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.1 - win.rar GmbH)
Zaklínač rozšířená edice (HKLM-x32\...\{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}) (Version: 1.4.5.1280 - CD Projekt Red)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points =========================

18-05-2015 12:42:38 Nainstalováno rozhraní DirectX

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {2195A97F-1860-43D1-BB8C-FEDC7FF3D9D9} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {338A42C7-5FDB-4589-9F4B-846E07BBE7A2} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {4FF6736D-BB50-4B4A-8B4B-2A2D1176071E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-17] (Google Inc.)
Task: {65B13665-BBA4-4BAF-BF3A-C37034C6C47A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-05-18] (Avast Software s.r.o.)
Task: {77A3E9FE-B9F1-463E-B65B-FC1A93996057} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-17] (Google Inc.)
Task: {7EC3A347-E51E-44BD-80F9-8705AA760C0C} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {99D40215-D9C4-428B-9D38-17F3FB4CE5FF} - System32\Tasks\Personal Computer Security Service => C:\Program Files (x86)\Personal Computer Security\Personal ComputerSecurity.exe [2015-05-01] (Secure Updater)
Task: {BB6D6213-05F6-4B4B-B697-8906BA57D29D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {FA46D445-F997-475C-9B91-1E68F2A9B39F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-04-27 10:55 - 2015-05-18 12:47 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-05-18 07:17 - 2015-05-18 07:17 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-05-18 07:17 - 2015-05-18 07:17 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-05-18 09:54 - 2015-05-18 09:54 - 02929664 _____ () C:\Program Files\AVAST Software\Avast\defs\15051800\algo.dll
2015-05-18 07:17 - 2015-05-18 07:17 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-05-15 13:56 - 2015-05-05 06:06 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libglesv2.dll
2015-05-15 13:56 - 2015-05-05 06:06 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libegl.dll
2015-05-15 13:56 - 2015-05-05 06:06 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\PepperFlash\pepflashplayer.dll
2014-01-31 05:28 - 2014-01-31 05:28 - 00421520 _____ () C:\Program Files (x86)\GRETECH\GomPlayer\GomTVStrm.dll
2015-05-16 19:06 - 2014-07-17 19:31 - 03502080 _____ () C:\Program Files (x86)\ffdshow\ffdshow.ax
2014-12-19 03:08 - 2014-12-19 03:08 - 01193984 _____ () C:\Program Files (x86)\GRETECH\GomPlayer\libass.dll
2015-05-18 12:42 - 2012-11-16 14:19 - 00016384 _____ () C:\Users\notebook\AppData\Local\Temp\{BAA05214-1167-40F7-9DE4-015D4288FA04}\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}\_isuser.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4054755293-3890498329-465695249-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 172.16.1.1 - 172.16.1.254

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\startupreg: BitTorrent => "C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: InetStat => C:\Users\notebook\AppData\Roaming\InetStat\inetstat.exe
MSCONFIG\startupreg: LManager => C:\Program Files (x86)\Launch Manager\LManager.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{3A0CA42B-9C38-4282-8406-00B1DE677A77}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C5567876-ECD5-4B50-B026-41F1C8EE2B46}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{C71069B5-63C4-4C76-B81D-2B4764660CBE}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{D474179D-F8B2-45FA-9EBD-D81E881F3934}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{006E14D9-53D7-4659-9B24-D608A5BA9D2D}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{22F00446-29F4-4241-9F51-C4539BACE555}] => (Allow) C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{E29EE2E1-2D09-4122-BFA2-E1B59FE9603E}] => (Allow) C:\Users\notebook\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{7FB1132F-C4E4-4250-B52A-DF41D4FD353E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D4BBCC1C-B489-4FAE-B7DE-615C73CE52AD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C09E892E-D075-4050-9BD1-182D15878333}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C46B1481-C374-4F8C-B52E-06EAE59EEDB7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{AA441FC2-E96C-4976-BEDE-09D4E793D318}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [{9822B8C9-045F-43A6-AE83-CBACB33E4A15}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KillingFloor\System\KillingFloor.exe
FirewallRules: [TCP Query User{73F3664D-BE44-4488-8198-CFCE3F9F730C}C:\games\counter-strike global offensive\csgo.exe] => (Allow) C:\games\counter-strike global offensive\csgo.exe
FirewallRules: [UDP Query User{8918DE34-A664-45FA-8132-AEB1D9526E72}C:\games\counter-strike global offensive\csgo.exe] => (Allow) C:\games\counter-strike global offensive\csgo.exe
FirewallRules: [TCP Query User{A22CA958-5D55-4054-B666-3EAB3836F4EB}C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe] => (Allow) C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{B9AD5ACE-43E1-4CDF-9B4E-2630A29B11AC}C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe] => (Allow) C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe
FirewallRules: [TCP Query User{E18EE245-7F86-4E42-A1BF-FF6C8D48ED45}C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe] => (Allow) C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe
FirewallRules: [UDP Query User{364D6D02-AD06-4E9D-B071-D88D7959EAAB}C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe] => (Allow) C:\gamesy\outlast + dlc whistleblower\binaries\win64\olgame.exe
FirewallRules: [TCP Query User{70B03FF7-E36B-49AB-905C-668B7A253D84}C:\hry\assassins creed ii\assassinscreediigame.exe] => (Allow) C:\hry\assassins creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{FD360409-4B2A-4F30-B6AD-40609B3121BA}C:\hry\assassins creed ii\assassinscreediigame.exe] => (Allow) C:\hry\assassins creed ii\assassinscreediigame.exe
FirewallRules: [{0619DBC2-D2FE-47E8-A8C0-C6813A9576E0}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{8A2D6F2A-6A5F-44E4-BCDF-BF1448351486}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{7B533A13-0AB1-401C-86C3-2D2FDCD81C83}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{17E2CA2E-63AA-4F20-BFC0-5BCF542C30E4}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{D40456F3-0ED2-4365-BEEE-7D7CF5A14B96}C:\program files (x86)\hearthstone\hearthstone.exe] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{E3342AB7-CD40-41C4-A4CD-69A20C182C96}C:\program files (x86)\hearthstone\hearthstone.exe] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{39B1562A-AF87-4152-BC18-2BAAAEBFB134}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{139076AC-7649-4FFF-AC39-A21EEE16FF2C}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{B01C1B65-FED4-4396-AD3A-4F35C8B18445}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{140852AF-C84D-48AF-B10C-60E411D590A4}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{E6553FCF-D72F-478C-9C70-D4192C0843D4}C:\hry\assassins creed ii\assassinscreediigame.exe] => (Allow) C:\hry\assassins creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{2EB92FE3-60F7-4AA7-84D7-FD2918158404}C:\hry\assassins creed ii\assassinscreediigame.exe] => (Allow) C:\hry\assassins creed ii\assassinscreediigame.exe
FirewallRules: [TCP Query User{B7786941-51F1-44F4-8FEC-5AF168029BEF}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe] => (Block) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe
FirewallRules: [UDP Query User{FF2FC85C-B274-4EB1-B593-F3DB194DD196}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe] => (Block) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe
FirewallRules: [{73461B65-2DE2-45F5-AAC1-427F95A072B6}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\ACBSP.exe
FirewallRules: [{DDD43C3E-8114-4E9F-9914-D27CF19385F7}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\ACBSP.exe
FirewallRules: [{47171709-F2DE-4593-88FE-49C217C798DB}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\ACBMP.exe
FirewallRules: [{500E5658-51C9-4C16-93EB-47950B778845}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\ACBMP.exe
FirewallRules: [{79944DD6-F949-49F5-BF89-DCB4FE09397D}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\AssassinsCreedBrotherhood.exe
FirewallRules: [{E4B56F8D-086C-45EF-9EA4-32966396E5E6}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\AssassinsCreedBrotherhood.exe
FirewallRules: [{FF8F3643-F175-4A3E-961D-49940FBF2C95}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\UPlayBrowser.exe
FirewallRules: [{38DD7CCF-0916-4D0B-8C0E-7656E651A2FB}] => (Allow) K:\\Juegos\\Assassin's Creed Brotherhood\\UPlayBrowser.exe
FirewallRules: [TCP Query User{4E644A78-C993-4B80-B2DA-66C1BEFF4C76}C:\program files (x86)\assassin's creed brotherhood\acbsp.exe] => (Allow) C:\program files (x86)\assassin's creed brotherhood\acbsp.exe
FirewallRules: [UDP Query User{E8BDF201-9AA5-48C7-953E-74D64E0D92B8}C:\program files (x86)\assassin's creed brotherhood\acbsp.exe] => (Allow) C:\program files (x86)\assassin's creed brotherhood\acbsp.exe
FirewallRules: [{824F1D93-A797-4E4F-9A66-495DEDCDB365}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{55EA3447-BFBE-4DC4-9531-41BD791B902F}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{B1258A2C-6548-4F81-A92D-BA9BF552FABB}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe
FirewallRules: [{CD9B759E-96B9-4CE5-BDE3-7CB71784F740}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe
FirewallRules: [{BA0DD11A-4CC8-4F87-967B-A2C51D49F22C}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe
FirewallRules: [{D6EA3C6C-5241-4463-8B65-223DE17CE5E1}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe
FirewallRules: [{B93E77D8-158C-4E57-81D4-7DACA00F12E3}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe
FirewallRules: [{D08ECCF6-684A-4F55-A731-3CE9A5640B13}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe
FirewallRules: [{0A464479-FE52-4C6D-8A09-9ECE3CA092B8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{35F3D06D-A99D-4936-AE5B-E653799876F7}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [{48A044B7-67E1-4A4B-B904-0123DFD63245}] => (Allow) C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat
FirewallRules: [{80AB41A1-589B-49C4-971D-0457CB3624DC}] => (Allow) C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat
FirewallRules: [{F364D450-92ED-4C24-ACF0-4F2C5655F6F5}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\CZE_ces\S.K.I.L.L\Binaries\Win32\sf2.exe
FirewallRules: [{5B19CEE2-D794-4A45-9B48-9E79A9F09D86}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\CZE_ces\S.K.I.L.L\Binaries\Win32\sf2.exe
FirewallRules: [{42416C8B-26F2-4365-8A0C-42964E080003}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{282FBD1F-2F3D-42BA-B410-DD52209DB01A}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{15CC0620-DE29-44FE-ADE8-1942E8236F71}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{7C803AD4-9AF8-4DC7-8D6F-9035710FA078}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6B4C126B-954A-4C1A-A864-BBDCE1FE5D15}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2D407615-DF51-4DCB-A0CF-87117814D251}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (05/18/2015 10:57:41 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/18/2015 10:56:34 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (1892) WebCacheLocal: Při otevírání souboru protokolu C:\Users\notebook\AppData\Local\Microsoft\Windows\WebCache\V0100187.log došlo k chybě -1811.

Error: (05/18/2015 09:50:51 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 11:58:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Setup.tmp, verze: 51.1052.0.0, časové razítko: 0x51092c85
Název chybujícího modulu: isskinex.dll_unloaded, verze: 0.0.0.0, časové razítko: 0x4af171f4
Kód výjimky: 0xc0000005
Posun chyby: 0x1001f4f3
ID chybujícího procesu: 0x25d4
Čas spuštění chybující aplikace: 0xSetup.tmp0
Cesta k chybující aplikaci: Setup.tmp1
Cesta k chybujícímu modulu: Setup.tmp2
ID zprávy: Setup.tmp3

Error: (05/14/2015 09:35:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 01:04:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 10:42:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 00:08:50 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Systém Windows nemůže získat přístup k souboru z jednoho z těchto důvodů:
došlo k problému s připojením k síti, s diskem, na kterém je soubor uložen, nebo
s ovladači ukládání nainstalovanými v tomto počítači; nebo disk chybí.
Systém Windows kvůli této chybě ukončil program autorun.exe.

Program: autorun.exe
Soubor:

Hodnota chyby je uvedena v části Další údaje.
Akce uživatele
1. Otevřete soubor znovu.
Může se jednat o dočasný problém, který se při novém spuštění programu nebude opakovat.
2.
Pokud k souboru stále nelze získat přístup a:
- Nachází se v síti,
měl by správce sítě ověřit, zda nedošlo k problému se sítí a zda lze server kontaktovat.
- Je na vyměnitelném disku (například disketě nebo disku CD-ROM), ověřte, zda je disk správně vložen do počítače.
3. Zkontrolujte a opravte systém souborů pomocí nástroje CHKDSK. Ten lze spustit tak, že kliknete na tlačítko Start a příkaz Spustit, zadáte příkaz CMD a kliknete na tlačítko OK. Do příkazového řádku zadejte příkaz CHKDSK /F a stiskněte klávesu ENTER.
4. Pokud potíže potrvají, obnovte soubor ze záložní kopie.
5. Zjistěte, zda lze otevřít jiné soubory na stejném disku. Pokud ne, může být disk poškozen. Jedná-li se o pevný disk, obraťte se na správce nebo na dodavatele počítačového hardwaru
se žádostí o pomoc.

Další údaje
Hodnota chyby: C0000102
Typ disku: 0

Error: (05/12/2015 00:08:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: autorun.exe_unknown, verze: 0.0.0.0, časové razítko: 0x4c04de0e
Název chybujícího modulu: wxmsw28u_vc_ash.dll, verze: 2.8.7.0, časové razítko: 0x4be11f3a
Kód výjimky: 0xc0000006
Posun chyby: 0x0031e660
ID chybujícího procesu: 0x1550
Čas spuštění chybující aplikace: 0xautorun.exe_unknown0
Cesta k chybující aplikaci: autorun.exe_unknown1
Cesta k chybujícímu modulu: autorun.exe_unknown2
ID zprávy: autorun.exe_unknown3

Error: (05/12/2015 00:07:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: mafia2.exe, verze: 1.0.0.1, časové razítko: 0x4cc182e0
Název chybujícího modulu: mafia2.exe, verze: 1.0.0.1, časové razítko: 0x4cc182e0
Kód výjimky: 0xc0000005
Posun chyby: 0x0122bc23
ID chybujícího procesu: 0x1524
Čas spuštění chybující aplikace: 0xmafia2.exe0
Cesta k chybující aplikaci: mafia2.exe1
Cesta k chybujícímu modulu: mafia2.exe2
ID zprávy: mafia2.exe3

System errors:
=============
Error: (05/18/2015 11:03:17 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Update přestala během spouštění reagovat.

Error: (05/18/2015 10:55:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Windows Search neuspěla při spuštění v důsledku následující chyby:
%%1069

Error: (05/18/2015 10:55:02 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba WSearch se nemohla přihlásit jako NT AUTHORITY\SYSTEM s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%50

Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (05/18/2015 10:54:58 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Windows Media Player Network Sharing neuspěla při spuštění v důsledku následující chyby:
%%1069

Error: (05/18/2015 10:54:58 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba WMPNetworkSvc se nemohla přihlásit jako NT AUTHORITY\NetworkService s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%50

Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (05/18/2015 10:54:58 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Windows Search neuspěla při spuštění v důsledku následující chyby:
%%1069

Error: (05/18/2015 10:54:58 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba WSearch se nemohla přihlásit jako NT AUTHORITY\SYSTEM s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%50

Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (05/18/2015 10:54:53 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\System32\bcmihvsrv64.dll

Error: (05/18/2015 10:54:53 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\System32\bcmihvsrv64.dll

Error: (05/18/2015 10:54:49 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: Rozšiřující modul sítě WLAN byl neočekávaně ukončen.

Cesta k modulu: C:\Windows\System32\bcmihvsrv64.dll

Microsoft Office Sessions:
=========================
Error: (05/18/2015 10:57:41 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/18/2015 10:56:34 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost1892WebCacheLocal: C:\Users\notebook\AppData\Local\Microsoft\Windows\WebCache\V0100187.log-1811

Error: (05/18/2015 09:50:51 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/17/2015 11:58:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Setup.tmp51.1052.0.051092c85isskinex.dll_unloaded0.0.0.04af171f4c00000051001f4f325d401d09081fa174f64C:\Users\notebook\AppData\Local\Temp\is-HU5G9.tmp\Setup.tmpisskinex.dll4b98b72f-fc7b-11e4-91af-70f395aae471

Error: (05/14/2015 09:35:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 01:04:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 10:42:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 00:08:50 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: autorun.exeC00001020

Error: (05/12/2015 00:08:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: autorun.exe_unknown0.0.0.04c04de0ewxmsw28u_vc_ash.dll2.8.7.04be11f3ac00000060031e660155001d08c9b83c6d3fbE:\Autorun\autorun.exeE:\Autorun\wxmsw28u_vc_ash.dlle219c096-f88e-11e4-9192-70f395aae471

Error: (05/12/2015 00:07:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mafia2.exe1.0.0.14cc182e0mafia2.exe1.0.0.14cc182e0c00000050122bc23152401d08c9b7ba5c509C:\Gamesy\Mafia II\pc\mafia2.exeC:\Gamesy\Mafia II\pc\mafia2.exebd05daa7-f88e-11e4-9192-70f395aae471

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Percentage of memory in use: 33%
Total physical RAM: 6006.76 MB
Available physical RAM: 3977.46 MB
Total Pagefile: 12011.7 MB
Available Pagefile: 9739.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:216.81 GB) NTFS
Drive e: (ACIII) (CDROM) (Total:15.35 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 0005FABC)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================

// Popravdě nechápu jak se v tom můžete vyznat..

#15 Příspěvek od **altrok** » 18 kvě 2015 12:51

Vsechno jsou to velice zajimave informace

Otestujte na virustotal.com C:\Program Files (x86)\Personal Computer Security\Personal ComputerSecurity.exe - pokud uz byl soubor otestovany, zvolte Reanalyse. Do pristiho prispevku dejte link (odkaz) s vysledky analyzy.

Vypnete trvale Windows Defender - http://windows.microsoft.com/cs-cz/wind ... =windows-7

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
Folder: C:\Program Files (x86)\Safesoft Protector
HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3108480 2012-10-23] (DT Soft Ltd)
HKU\S-1-5-21-4054755293-3890498329-465695249-1000\...\MountPoints2: {627f2a0e-cced-11e4-a6b8-70f395aae471} - E:\autorun.exe

HKU\S-1-5-21-4054755293-3890498329-465695249-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gfe_rd=cr&ei=bNQ ... gws_rd=ssl
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

2015-05-18 12:38 - 2015-05-18 12:38 - 00009213 _____ () C:\Users\notebook\Desktop\Nepotvrzeno 188167.crdownload
2015-05-18 10:58 - 2015-05-18 10:58 - 00003110 _____ () C:\Users\notebook\Desktop\AdwCleaner[S0].txt
2015-05-18 10:56 - 2015-05-18 10:56 - 00000056 _____ () C:\Windows\setupact.log
2015-05-18 10:56 - 2015-05-18 10:56 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-18 10:44 - 2015-05-18 10:54 - 00000000 ____D () C:\AdwCleaner
CMD: dir "C:\Users\notebook\AppData\Roaming\*.tmp"
CMD: dir "C:\Windows\SysWOW64\*.tmp"
2015-04-27 08:45 - 2015-04-27 08:45 - 00000000 _____ () C:\Users\notebook\AppData\Roaming\D417.tmp
2015-04-16 23:16 - 2015-04-16 23:16 - 00000000 _____ () C:\Windows\SysWOW64\RENA36F.tmp
CMD: del "C:\Users\notebook\AppData\Roaming\*.tmp"
CMD: del "C:\Windows\SysWOW64\*.tmp"
2015-04-13 08:20 - 2015-05-18 12:15 - 00000000 ____D () C:\Program Files\trend micro
2015-04-13 08:20 - 2015-04-13 08:20 - 00000000 ____D () C:\rsit
2015-04-12 21:22 - 2015-04-12 21:24 - 01222144 _____ () C:\Users\notebook\Desktop\RSITx64.exe
Hosts:
EmptyTemp:
End

VIRY.CZ

Prosím o preventivku.

Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.

Re: Prosím o preventivku.