Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
jenanek
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 08 čer 2006 10:52

prosím o kontrolu logu

#1 Příspěvek od jenanek »

Dobrý den.Prosím vás už nějaký měsíc trvá několik minut po startu pc,spustit internetový prohlížeč,ale i ostaní aplikace jsou poměrně zpomalené.I když není procesor zatížen(cca.2%),přesto bliká,nebo svítí kontrolka,že HDD načítá.Můžete se mi prosím pokusit poradit?Moc díky

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jenda at 2016-03-02 07:49:19
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 171 GB (36%) free of 477 GB
Total RAM: 4095 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:49:22, on 2.3.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18205)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Jenda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=27368
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: Spyware Terminator 2015 Internet Guard - {82A76710-4F98-4957-92BE-99648A4E2475} - C:\PROGRA~2\SPYWAR~1\STINTE~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2015 Realtime Shield Service (ST2012_Svc) - Crawler Group, LLC - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7274 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\IoctlSvc.exe
"C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6b2e2cc2-9925-444d-b1de-1df839cc57e8 -SystemEventPortName:HostProcess-4a612fdf-e1f8-4f4f-8694-8030fc76b4f3 -IoCancelEventPortName:HostProcess-03c4daa0-df8e-4ad2-a329-21643e13e90e -NonStateChangingEventPortName:HostProcess-8834d6f5-af48-43c2-aed9-372644af7dad -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0eb5a990-68ee-4252-a55d-24ac1544660f
ngservice.exe pipeserver
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe"
"C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe"
"C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe" -Embedding
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"taskhost.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Jenda\Desktop\Stahování NET\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 20.0.0.306 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\extensions\
foxmarks@kei.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82A76710-4F98-4957-92BE-99648A4E2475}]
Spyware Terminator 2015 Internet Guard - C:\PROGRA~2\SPYWAR~1\STINTE~2.DLL [2015-09-03 2013520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-29 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files (x86)\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-26 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82A76710-4F98-4957-92BE-99648A4E2475}]
Spyware Terminator 2015 Internet Guard - C:\PROGRA~2\SPYWAR~1\STINTE~1.DLL [2015-09-03 1255248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-29 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-26 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorShield"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2015-12-17 5318992]
"SpywareTerminatorUpdater"=C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [2015-12-17 5557584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2008-01-22 152872]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-12-17 50378880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SRDownloader]
C:\Users\Jenda\Desktop\Stahování NET\MRDownloader.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\Jenda\AppData\Roaming\uTorrent\uTorrent.exe [2015-10-23 1822048]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-02-24 20:15:28 ----A---- C:\Windows\system32\aswBoot.exe
2016-02-24 14:09:18 ----D---- C:\Users\Jenda\AppData\Roaming\IObit
2016-02-24 14:09:16 ----D---- C:\ProgramData\ProductData
2016-02-24 14:09:07 ----D---- C:\Program Files (x86)\IObit
2016-02-24 14:07:40 ----D---- C:\ProgramData\IObit
2016-02-24 14:07:40 ----D---- C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2016-02-20 19:48:45 ----D---- C:\ProgramData\LogMeIn
2016-02-20 19:47:28 ----D---- C:\Program Files (x86)\Google
2016-02-12 14:14:32 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-02-10 19:35:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerInstaller.exe
2016-02-10 13:52:52 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2016-02-10 13:52:52 ----A---- C:\Windows\system32\jnwmon.dll
2016-02-10 13:52:52 ----A---- C:\Windows\system32\InkEd.dll
2016-02-10 13:52:50 ----A---- C:\Windows\system32\iertutil.dll
2016-02-10 13:52:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-02-10 13:52:49 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-02-10 13:52:48 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-02-10 13:52:48 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-02-10 13:52:48 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-02-10 13:52:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-02-10 13:52:47 ----A---- C:\Windows\system32\urlmon.dll
2016-02-10 13:52:47 ----A---- C:\Windows\system32\ieui.dll
2016-02-10 13:52:47 ----A---- C:\Windows\system32\ieframe.dll
2016-02-10 13:52:46 ----A---- C:\Windows\system32\mshtml.dll
2016-02-10 13:52:46 ----A---- C:\Windows\system32\ieUnatt.exe
2016-02-10 13:52:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-02-10 13:52:36 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-02-10 13:52:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-02-10 13:52:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-02-10 13:52:36 ----A---- C:\Windows\system32\iernonce.dll
2016-02-10 13:52:36 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-02-10 13:52:36 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-02-10 13:52:35 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-02-10 13:52:35 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-02-10 13:52:35 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-02-10 13:52:35 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-02-10 13:52:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-02-10 13:52:35 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-02-10 13:52:35 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 13:52:35 ----A---- C:\Windows\system32\inseng.dll
2016-02-10 13:52:35 ----A---- C:\Windows\system32\ie4uinit.exe
2016-02-10 13:52:34 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-02-10 13:52:34 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-02-10 13:52:34 ----A---- C:\Windows\system32\occache.dll
2016-02-10 13:52:34 ----A---- C:\Windows\system32\iedkcs32.dll
2016-02-10 13:52:33 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-02-10 13:52:33 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-02-10 13:52:33 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-02-10 13:52:33 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-02-10 13:52:33 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 13:52:33 ----A---- C:\Windows\system32\msfeeds.dll
2016-02-10 13:52:33 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 13:52:33 ----A---- C:\Windows\system32\dxtrans.dll
2016-02-10 13:52:32 ----A---- C:\Windows\system32\iesetup.dll
2016-02-10 13:52:32 ----A---- C:\Windows\system32\ieapfltr.dll
2016-02-10 13:52:31 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-02-10 13:52:31 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-02-10 13:52:31 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-02-10 13:52:31 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-02-10 13:52:31 ----A---- C:\Windows\system32\vbscript.dll
2016-02-10 13:52:31 ----A---- C:\Windows\system32\jsproxy.dll
2016-02-10 13:52:30 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-02-10 13:52:30 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-02-10 13:52:30 ----A---- C:\Windows\system32\dxtmsft.dll
2016-02-10 13:52:29 ----A---- C:\Windows\system32\webcheck.dll
2016-02-10 13:52:29 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-02-10 13:52:29 ----A---- C:\Windows\system32\mshtmled.dll
2016-02-10 13:52:29 ----A---- C:\Windows\system32\jscript9diag.dll
2016-02-10 13:52:29 ----A---- C:\Windows\system32\jscript9.dll
2016-02-10 13:52:29 ----A---- C:\Windows\system32\jscript.dll
2016-02-10 13:52:28 ----A---- C:\Windows\system32\wininet.dll
2016-02-10 13:52:28 ----A---- C:\Windows\system32\msrating.dll
2016-02-10 13:52:28 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-02-10 13:52:13 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2016-02-10 13:52:12 ----A---- C:\Windows\system32\win32k.sys
2016-02-10 13:51:55 ----A---- C:\Windows\system32\ole32.dll
2016-02-10 13:51:52 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-02-10 13:51:31 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2016-02-10 13:51:31 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2016-02-10 13:51:31 ----A---- C:\Windows\system32\EncDec.dll
2016-02-10 13:51:31 ----A---- C:\Windows\system32\CPFilters.dll
2016-02-10 13:51:30 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-02-10 13:51:30 ----A---- C:\Windows\system32\ntdll.dll
2016-02-10 13:51:29 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-02-10 13:51:29 ----A---- C:\Windows\system32\mtxoci.dll
2016-02-10 13:51:29 ----A---- C:\Windows\system32\KernelBase.dll
2016-02-10 13:51:29 ----A---- C:\Windows\system32\kerberos.dll
2016-02-10 13:51:28 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-02-10 13:51:27 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-02-10 13:51:27 ----A---- C:\Windows\SYSWOW64\mtxoci.dll
2016-02-10 13:51:27 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-02-10 13:51:27 ----A---- C:\Windows\system32\kernel32.dll
2016-02-10 13:51:27 ----A---- C:\Windows\system32\advapi32.dll
2016-02-10 13:51:26 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2016-02-10 13:51:26 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-02-10 13:51:26 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-02-10 13:51:26 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-02-10 13:51:25 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-02-10 13:51:23 ----A---- C:\Windows\system32\lsasrv.dll
2016-02-10 13:51:22 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-02-10 13:51:22 ----A---- C:\Windows\system32\smss.exe
2016-02-10 13:51:22 ----A---- C:\Windows\system32\schannel.dll
2016-02-10 13:51:22 ----A---- C:\Windows\system32\rpcrt4.dll
2016-02-10 13:51:22 ----A---- C:\Windows\system32\ncrypt.dll
2016-02-10 13:51:22 ----A---- C:\Windows\system32\msv1_0.dll
2016-02-10 13:51:22 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-02-10 13:51:22 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-02-10 13:51:21 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-02-10 13:51:21 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-02-10 13:51:21 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-02-10 13:51:21 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-02-10 13:51:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-02-10 13:51:21 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\wow64win.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\wow64.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\winsrv.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\wdigest.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\TSpkg.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\sspisrv.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\sspicli.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\srcore.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\lsass.exe
2016-02-10 13:51:21 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-02-10 13:51:21 ----A---- C:\Windows\system32\csrsrv.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\cryptbase.dll
2016-02-10 13:51:21 ----A---- C:\Windows\system32\conhost.exe
2016-02-10 13:51:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 13:51:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 13:51:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 13:51:20 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 13:51:20 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 13:51:20 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 13:51:20 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-02-10 13:51:20 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-02-10 13:51:20 ----A---- C:\Windows\system32\wow64cpu.dll
2016-02-10 13:51:20 ----A---- C:\Windows\system32\srclient.dll
2016-02-10 13:51:20 ----A---- C:\Windows\system32\secur32.dll
2016-02-10 13:51:20 ----A---- C:\Windows\system32\rstrui.exe
2016-02-10 13:51:20 ----A---- C:\Windows\system32\ntvdm64.dll
2016-02-10 13:51:20 ----A---- C:\Windows\system32\credssp.dll
2016-02-10 13:51:20 ----A---- C:\Windows\system32\auditpol.exe
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 13:51:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 13:51:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 13:51:18 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-02-10 13:51:18 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-02-10 13:51:18 ----A---- C:\Windows\system32\apisetschema.dll
2016-02-10 13:51:17 ----A---- C:\Windows\SYSWOW64\user.exe
2016-02-10 13:51:17 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-02-10 13:51:17 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-02-10 13:51:17 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-02-10 13:51:17 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-02-10 13:51:17 ----A---- C:\Windows\system32\msobjs.dll
2016-02-10 13:51:17 ----A---- C:\Windows\system32\msaudite.dll
2016-02-10 13:51:17 ----A---- C:\Windows\system32\adtschema.dll
2016-02-09 17:01:31 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2016-02-09 17:01:31 ----A---- C:\Windows\system32\XAudio2_5.dll
2016-02-09 17:01:30 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2016-02-09 17:01:30 ----A---- C:\Windows\system32\xactengine3_5.dll
2016-02-09 17:01:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2016-02-09 17:01:29 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2016-02-09 17:01:27 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2016-02-09 17:01:27 ----A---- C:\Windows\system32\d3dcsx_42.dll
2016-02-09 17:01:26 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2016-02-09 17:01:26 ----A---- C:\Windows\system32\d3dx11_42.dll
2016-02-09 17:01:25 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2016-02-09 17:01:25 ----A---- C:\Windows\system32\d3dx10_42.dll
2016-02-09 17:01:23 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2016-02-09 17:01:23 ----A---- C:\Windows\system32\D3DX9_42.dll
2016-02-09 17:01:21 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2016-02-09 17:01:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2016-02-09 17:01:21 ----A---- C:\Windows\system32\d3dx10_41.dll
2016-02-09 17:01:21 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2016-02-09 17:01:19 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2016-02-09 17:01:19 ----A---- C:\Windows\system32\D3DX9_41.dll
2016-02-09 17:01:18 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2016-02-09 17:01:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2016-02-09 17:01:18 ----A---- C:\Windows\system32\XAudio2_4.dll
2016-02-09 17:01:18 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2016-02-09 17:01:16 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2016-02-09 17:01:16 ----A---- C:\Windows\system32\xactengine3_4.dll
2016-02-09 17:01:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2016-02-09 17:01:15 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2016-02-09 17:01:14 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2016-02-09 17:01:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2016-02-09 17:01:14 ----A---- C:\Windows\system32\d3dx10_40.dll
2016-02-09 17:01:14 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2016-02-09 17:01:12 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2016-02-09 17:01:12 ----A---- C:\Windows\system32\D3DX9_40.dll
2016-02-09 17:01:10 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2016-02-09 17:01:10 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2016-02-09 17:01:10 ----A---- C:\Windows\system32\XAudio2_3.dll
2016-02-09 17:01:10 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2016-02-09 17:01:09 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2016-02-09 17:01:09 ----A---- C:\Windows\system32\xactengine3_3.dll
2016-02-09 17:01:08 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2016-02-09 17:01:08 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2016-02-09 17:01:07 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2016-02-09 17:01:07 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2016-02-09 17:01:07 ----A---- C:\Windows\system32\XAudio2_2.dll
2016-02-09 17:01:07 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2016-02-09 17:01:06 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2016-02-09 17:01:06 ----A---- C:\Windows\system32\xactengine3_2.dll
2016-02-09 17:01:04 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2016-02-09 17:01:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2016-02-09 17:01:04 ----A---- C:\Windows\system32\d3dx10_39.dll
2016-02-09 17:01:04 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2016-02-09 17:01:03 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2016-02-09 17:01:03 ----A---- C:\Windows\system32\D3DX9_39.dll
2016-02-09 17:01:01 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2016-02-09 17:01:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2016-02-09 17:01:01 ----A---- C:\Windows\system32\XAudio2_1.dll
2016-02-09 17:01:01 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2016-02-09 17:01:00 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2016-02-09 17:01:00 ----A---- C:\Windows\system32\xactengine3_1.dll
2016-02-09 17:00:58 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2016-02-09 17:00:58 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2016-02-09 17:00:56 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2016-02-09 17:00:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2016-02-09 17:00:56 ----A---- C:\Windows\system32\d3dx10_38.dll
2016-02-09 17:00:56 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2016-02-09 17:00:54 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2016-02-09 17:00:54 ----A---- C:\Windows\system32\D3DX9_38.dll
2016-02-09 17:00:53 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2016-02-09 17:00:53 ----A---- C:\Windows\system32\XAudio2_0.dll
2016-02-09 17:00:52 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2016-02-09 17:00:52 ----A---- C:\Windows\system32\xactengine3_0.dll
2016-02-09 17:00:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2016-02-09 17:00:51 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2016-02-09 17:00:50 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2016-02-09 17:00:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2016-02-09 17:00:50 ----A---- C:\Windows\system32\d3dx10_37.dll
2016-02-09 17:00:50 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2016-02-09 17:00:46 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2016-02-09 17:00:46 ----A---- C:\Windows\system32\D3DX9_37.dll
2016-02-09 17:00:45 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2016-02-09 17:00:45 ----A---- C:\Windows\system32\xactengine2_10.dll
2016-02-09 17:00:42 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2016-02-09 17:00:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2016-02-09 17:00:42 ----A---- C:\Windows\system32\d3dx10_36.dll
2016-02-09 17:00:42 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2016-02-09 17:00:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2016-02-09 17:00:40 ----A---- C:\Windows\system32\d3dx9_36.dll
2016-02-09 17:00:39 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2016-02-09 17:00:39 ----A---- C:\Windows\system32\xactengine2_9.dll
2016-02-09 17:00:37 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2016-02-09 17:00:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2016-02-09 17:00:37 ----A---- C:\Windows\system32\d3dx10_35.dll
2016-02-09 17:00:37 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2016-02-09 17:00:35 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2016-02-09 17:00:35 ----A---- C:\Windows\system32\d3dx9_35.dll
2016-02-09 17:00:33 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2016-02-09 17:00:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2016-02-09 17:00:33 ----A---- C:\Windows\system32\xactengine2_8.dll
2016-02-09 17:00:33 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2016-02-09 17:00:31 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2016-02-09 17:00:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2016-02-09 17:00:31 ----A---- C:\Windows\system32\d3dx10_34.dll
2016-02-09 17:00:31 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2016-02-09 17:00:28 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2016-02-09 17:00:28 ----A---- C:\Windows\system32\d3dx9_34.dll
2016-02-09 17:00:27 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2016-02-09 17:00:27 ----A---- C:\Windows\system32\xinput1_3.dll
2016-02-09 17:00:26 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2016-02-09 17:00:26 ----A---- C:\Windows\system32\xactengine2_7.dll
2016-02-09 17:00:25 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2016-02-09 17:00:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2016-02-09 17:00:25 ----A---- C:\Windows\system32\d3dx10_33.dll
2016-02-09 17:00:25 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2016-02-09 17:00:23 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2016-02-09 17:00:23 ----A---- C:\Windows\system32\d3dx9_33.dll
2016-02-09 17:00:21 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2016-02-09 17:00:21 ----A---- C:\Windows\system32\xactengine2_6.dll
2016-02-09 17:00:20 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2016-02-09 17:00:20 ----A---- C:\Windows\system32\xactengine2_5.dll
2016-02-09 17:00:18 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2016-02-09 17:00:18 ----A---- C:\Windows\system32\d3dx10.dll
2016-02-09 17:00:17 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2016-02-09 17:00:17 ----A---- C:\Windows\system32\d3dx9_32.dll
2016-02-09 17:00:15 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2016-02-09 17:00:15 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2016-02-09 17:00:15 ----A---- C:\Windows\system32\xactengine2_4.dll
2016-02-09 17:00:15 ----A---- C:\Windows\system32\x3daudio1_1.dll
2016-02-09 17:00:14 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2016-02-09 17:00:14 ----A---- C:\Windows\system32\d3dx9_31.dll
2016-02-09 17:00:13 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2016-02-09 17:00:13 ----A---- C:\Windows\system32\xactengine2_3.dll
2016-02-09 17:00:12 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2016-02-09 17:00:12 ----A---- C:\Windows\system32\xinput1_2.dll
2016-02-09 17:00:11 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2016-02-09 17:00:11 ----A---- C:\Windows\system32\xactengine2_2.dll
2016-02-09 17:00:10 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2016-02-09 17:00:10 ----A---- C:\Windows\system32\xinput1_1.dll
2016-02-09 17:00:09 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2016-02-09 17:00:09 ----A---- C:\Windows\system32\xactengine2_1.dll
2016-02-09 16:59:59 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2016-02-09 16:59:59 ----A---- C:\Windows\system32\d3dx9_30.dll
2016-02-09 16:59:57 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2016-02-09 16:59:57 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2016-02-09 16:59:57 ----A---- C:\Windows\system32\xactengine2_0.dll
2016-02-09 16:59:57 ----A---- C:\Windows\system32\x3daudio1_0.dll
2016-02-09 16:59:56 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2016-02-09 16:59:56 ----A---- C:\Windows\system32\d3dx9_29.dll
2016-02-09 16:59:53 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2016-02-09 16:59:53 ----A---- C:\Windows\system32\d3dx9_28.dll
2016-02-09 16:59:51 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2016-02-09 16:59:51 ----A---- C:\Windows\system32\d3dx9_27.dll
2016-02-09 16:59:44 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2016-02-09 16:59:44 ----A---- C:\Windows\system32\d3dx9_26.dll
2016-02-09 16:59:40 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2016-02-09 16:59:40 ----A---- C:\Windows\system32\d3dx9_25.dll
2016-02-09 16:59:38 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2016-02-09 16:59:38 ----A---- C:\Windows\system32\d3dx9_24.dll
2016-02-08 14:52:23 ----D---- C:\Program Files (x86)\booddanet
2016-02-07 18:11:07 ----D---- C:\Program Files (x86)\Papers, Please
2016-02-03 19:03:16 ----SHD---- C:\$RECYCLE.BIN
2016-02-03 19:03:11 ----A---- C:\ComboFix.txt
2016-02-03 18:53:03 ----A---- C:\Windows\zip.exe
2016-02-03 18:53:03 ----A---- C:\Windows\SWSC.exe
2016-02-03 18:53:03 ----A---- C:\Windows\SWREG.exe
2016-02-03 18:53:03 ----A---- C:\Windows\sed.exe
2016-02-03 18:53:03 ----A---- C:\Windows\PEV.exe
2016-02-03 18:53:03 ----A---- C:\Windows\NIRCMD.exe
2016-02-03 18:53:03 ----A---- C:\Windows\MBR.exe
2016-02-03 18:53:03 ----A---- C:\Windows\grep.exe
2016-02-03 18:52:56 ----D---- C:\Qoobox
2016-02-03 18:52:42 ----D---- C:\Windows\erdnt

======List of files/folders modified in the last 1 month======

2016-03-02 07:49:22 ----D---- C:\Windows\Prefetch
2016-03-02 07:49:21 ----D---- C:\Program Files\trend micro
2016-03-02 07:49:18 ----D---- C:\Windows\Temp
2016-03-02 07:48:41 ----RD---- C:\Program Files (x86)
2016-03-01 19:41:56 ----D---- C:\Windows\system32\config
2016-03-01 19:40:42 ----D---- C:\Users\Jenda\AppData\Roaming\.minecraft
2016-03-01 19:39:57 ----D---- C:\Users\Jenda\AppData\Roaming\Skype
2016-03-01 16:04:56 ----D---- C:\Users\Jenda\AppData\Roaming\vlc
2016-03-01 15:56:02 ----D---- C:\ProgramData\Spyware Terminator
2016-03-01 13:19:38 ----SHD---- C:\System Volume Information
2016-02-27 22:37:40 ----D---- C:\Windows\System32
2016-02-27 22:37:40 ----D---- C:\Windows\inf
2016-02-27 22:37:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-02-27 22:35:14 ----D---- C:\Program Files (x86)\FastShare
2016-02-24 21:02:34 ----D---- C:\Windows\system32\drivers
2016-02-24 20:16:07 ----D---- C:\Windows\system32\Tasks
2016-02-24 20:15:22 ----D---- C:\Windows
2016-02-24 20:11:27 ----D---- C:\Windows\Minidump
2016-02-24 20:09:59 ----D---- C:\Windows\Tasks
2016-02-24 20:09:59 ----D---- C:\Windows\system32\wfp
2016-02-24 20:09:59 ----D---- C:\Windows\system32\wbem
2016-02-24 20:09:59 ----D---- C:\Windows\system32\DriverStore
2016-02-24 20:09:59 ----D---- C:\Windows\system32\catroot2
2016-02-24 20:09:59 ----D---- C:\Windows\AppCompat
2016-02-24 20:09:37 ----D---- C:\Windows\registration
2016-02-24 20:09:25 ----SD---- C:\Users\Jenda\AppData\Roaming\Microsoft
2016-02-24 20:08:42 ----D---- C:\ProgramData
2016-02-24 19:40:52 ----D---- C:\Windows\SoftwareDistribution
2016-02-24 19:37:42 ----D---- C:\Windows\debug
2016-02-24 14:21:13 ----D---- C:\Windows\Panther
2016-02-24 14:21:13 ----D---- C:\Windows\Logs
2016-02-20 21:32:49 ----D---- C:\Users\Jenda\AppData\Roaming\uTorrent
2016-02-20 21:32:37 ----D---- C:\Windows\SysWOW64
2016-02-20 20:49:41 ----D---- C:\Users\Jenda\AppData\Roaming\Ahead
2016-02-11 20:38:57 ----D---- C:\Windows\rescache
2016-02-11 19:38:54 ----D---- C:\Windows\Microsoft.NET
2016-02-11 19:38:03 ----RSD---- C:\Windows\assembly
2016-02-11 09:19:31 ----D---- C:\Windows\winsxs
2016-02-11 09:16:02 ----D---- C:\Windows\SYSWOW64\en-US
2016-02-11 09:16:02 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-02-11 09:16:02 ----D---- C:\Windows\system32\en-US
2016-02-11 09:16:02 ----D---- C:\Windows\system32\cs-CZ
2016-02-11 09:16:02 ----D---- C:\Program Files\Windows Journal
2016-02-11 09:16:02 ----D---- C:\Program Files\Internet Explorer
2016-02-11 09:16:02 ----D---- C:\Program Files (x86)\Internet Explorer
2016-02-11 09:15:50 ----D---- C:\Windows\AppPatch
2016-02-10 20:57:53 ----D---- C:\Windows\system32\MRT
2016-02-10 20:55:01 ----A---- C:\Windows\system32\MRT.exe
2016-02-10 19:35:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-02-09 16:42:40 ----SHD---- C:\Windows\Installer
2016-02-09 16:42:38 ----D---- C:\Config.Msi
2016-02-08 14:44:56 ----SD---- C:\ProgramData\Microsoft
2016-02-03 19:01:23 ----A---- C:\Windows\system.ini
2016-02-03 18:58:58 ----D---- C:\Windows\SYSWOW64\drivers
2016-02-03 18:58:57 ----D---- C:\Program Files (x86)\Common Files
2016-02-03 09:56:54 ----D---- C:\Program Files (x86)\Spyware Terminator

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-04-29 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-04-29 272248]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2015-04-01 834544]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-04-29 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-04-29 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-27 442264]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-04-29 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-04-29 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-04-29 137288]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2015-04-01 314016]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2015-04-01 43680]
R2 sp_rsdrv2;Spyware Terminator Driver Filter; C:\Windows\system32\DRIVERS\stflt.sys [2011-08-24 51496]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-04-29 273824]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-02-10 6368256]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-02-10 188416]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-06 2419176]
R3 lvpepf64;Volume Adapter; C:\Windows\system32\DRIVERS\lv302a64.sys [2008-07-26 15768]
R3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2008-07-26 790424]
R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys [2008-07-26 50072]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2015-03-26 82816]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V64.SYS [2008-07-26 2624408]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
S3 akqd868d;akqd868d; C:\Windows\system32\drivers\akqd868d.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-02-10 202752]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-04-29 343336]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [2007-12-17 163840]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [2006-12-19 81920]
R2 ST2012_Svc;Spyware Terminator 2015 Realtime Shield Service; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2015-12-17 3267408]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-04-29 4034896]
R3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2008-01-22 275752]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-08 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-01-22 114688]
S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2008-04-08 800040]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2015-03-29 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-08 139696]

-----------------EOF-----------------

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: prosím o kontrolu logu

#2 Příspěvek od JaRon »

ahoj,
odinstaluj vsetko od IObit a aj SpyTerminator
vycisti PC s ADWCleanerom
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

jenanek
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 08 čer 2006 10:52

Re: prosím o kontrolu logu

#3 Příspěvek od jenanek »

Provedeno.Přikládám log

# AdwCleaner v5.031 - Logfile created 30/01/2016 at 19:50:45
# Updated 25/01/2016 by Xplode
# Database : 2016-01-25.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Jenda - JENDA-PC
# Running from : C:\Users\Jenda\Desktop\Stahování NET\adwcleaner_5.031.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\PConverter_dz
[-] Folder Deleted : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

***** [ Files ] *****

[-] File Deleted : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\searchplugins\ask-web-search.xml

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
[-] Key Deleted : HKLM\SOFTWARE\dt soft\daemon tools toolbar

***** [ Web browsers ] *****

[-] [C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._dzMembers_.lastActivePing", "1452438596586");
[-] [C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
[-] [C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "freeradiocast@mindspark.com");

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1776 bytes] ##########
# AdwCleaner v5.037 - Logfile created 02/03/2016 at 18:17:43
# Updated 28/02/2016 by Xplode
# Database : 2016-03-02.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Jenda - JENDA-PC
# Running from : C:\Users\Jenda\Desktop\Stahování NET\adwcleaner_5.037.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\PConverter_dz
[-] Folder Deleted : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

***** [ Files ] *****

[-] File Deleted : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\searchplugins\ask-web-search.xml

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [3025 bytes] - [30/01/2016 19:50:45]
C:\AdwCleaner\AdwCleaner[S1].txt - [3070 bytes] - [29/01/2016 16:38:22]
C:\AdwCleaner\AdwCleaner[S2].txt - [3070 bytes] - [30/01/2016 19:46:24]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3244 bytes] ##########

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: prosím o kontrolu logu

#4 Příspěvek od JaRon »

zmenilo sa nieco :???:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

jenanek
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 08 čer 2006 10:52

Re: prosím o kontrolu logu

#5 Příspěvek od jenanek »

Pokud ano,tak nijak výrazně.Bohužel

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: prosím o kontrolu logu

#6 Příspěvek od JaRon »

vloz log FRST
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

jenanek
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 08 čer 2006 10:52

Re: prosím o kontrolu logu

#7 Příspěvek od jenanek »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:02-03-2016
Ran by Jenda (administrator) on JENDA-PC (04-03-2016 07:45:04)
Running from C:\Users\Jenda\Desktop\Stahování NET
Loaded Profiles: Jenda (Available Profiles: Jenda)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2008-01-22] (Nero AG)
HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [369200 2009-10-30] (DT Soft Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-29] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{609F6BFB-B4AE-450D-9C44-0E7527154B4E}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {0AD5ABFE-D7F1-4489-AFC1-1B20AE0063AD} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {176397A6-0F14-4030-9254-04C4D21ADF0D} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {31C31DC8-AD01-498E-9A78-5436C1D37D20} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {368026C1-4E00-4D59-B8A1-62BFECFFF60D} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {4E55B219-BDA7-4041-BBA3-8C7AF55F317C} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {6F2F0F9A-07CF-40B0-95DF-7D2FA2FCEB23} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {826C6254-8D4A-4A63-8BE8-D11D1E8B9497} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {9FE30E8B-26CA-48B4-881D-B731DA1F248A} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_27368
SearchScopes: HKU\S-1-5-21-3503001054-2168356953-1104777385-1001 -> {CB407363-37DF-4953-9D1F-AFF012DEED28} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_27368
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-29] (Avast Software s.r.o.)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-29] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-26] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default
FF SelectedSearchEngine: Google
FF Homepage: hxxps://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-26] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin HKU\S-1-5-21-3503001054-2168356953-1104777385-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jenda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2009-11-30] (Unity Technologies ApS)
FF Extension: Xmarks - C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\41n4rxwu.default\extensions\foxmarks@kei.com [2015-05-30]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-02-24]

Chrome:
=======
CHR Profile: C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-20]
CHR Extension: (Dokumenty Google) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-20]
CHR Extension: (Disk Google) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-20]
CHR Extension: (YouTube) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-20]
CHR Extension: (Vyhledávání Google) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-20]
CHR Extension: (Avast SafePrice) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-02-20]
CHR Extension: (Tabulky Google) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-20]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-20]
CHR Extension: (Avast Online Security) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-02-20]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-20]
CHR Extension: (Gmail) - C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-20]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-03-29]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-29]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-29] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-29] (Avast Software)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (SEIKO EPSON CORPORATION) [File not signed]
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (SEIKO EPSON CORPORATION) [File not signed]
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-29] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-29] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-29] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-29] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-29] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-27] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-29] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-29] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2015-04-01] ()
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2015-04-01] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2015-04-01] () [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-29] (Avast Software)
U3 a244cum9; C:\Windows\System32\Drivers\a244cum9.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-04 07:44 - 2016-03-04 07:45 - 00000000 ____D C:\FRST
2016-02-27 22:25 - 2016-02-27 22:35 - 1467381474 _____ C:\Users\Jenda\Desktop\Hairspray (Hairspray) (2007) CZ.avi
2016-02-24 20:15 - 2015-04-29 12:47 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2016-02-24 20:11 - 2016-02-24 20:11 - 445780155 _____ C:\Windows\MEMORY.DMP
2016-02-24 20:11 - 2016-02-24 20:11 - 00275448 _____ C:\Windows\Minidump\022416-36987-01.dmp
2016-02-24 14:13 - 2016-02-24 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2016-02-24 14:09 - 2016-02-24 20:09 - 00000000 ____D C:\ProgramData\ProductData
2016-02-24 14:09 - 2016-02-24 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2016-02-24 14:09 - 2016-02-24 14:13 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\IObit
2016-02-24 14:09 - 2016-02-24 14:13 - 00000000 ____D C:\Program Files (x86)\IObit
2016-02-24 14:07 - 2016-02-24 14:10 - 00000000 ____D C:\ProgramData\IObit
2016-02-24 14:07 - 2016-02-24 14:07 - 00000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2016-02-20 19:48 - 2016-02-20 19:48 - 00000000 ____D C:\Users\Jenda\AppData\Local\LogMeIn
2016-02-20 19:48 - 2016-02-20 19:48 - 00000000 ____D C:\ProgramData\LogMeIn
2016-02-20 19:47 - 2016-02-20 19:48 - 00000000 ____D C:\Users\Jenda\AppData\Local\Google
2016-02-20 19:47 - 2016-02-20 19:48 - 00000000 ____D C:\Program Files (x86)\Google
2016-02-19 22:58 - 2016-02-19 23:08 - 1507665920 _____ C:\Users\Jenda\Desktop\The Lucky One (2012).avi
2016-02-12 14:14 - 2016-03-03 09:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-12 13:06 - 2016-02-12 13:06 - 00003078 _____ C:\Windows\System32\Tasks\{A9D259D0-E24C-4692-A45B-0D1504F4132D}
2016-02-11 19:15 - 2016-01-31 13:26 - 195104012 _____ C:\Users\Jenda\Desktop\MVI_0108.MOV
2016-02-11 19:15 - 2016-01-31 13:22 - 331201376 _____ C:\Users\Jenda\Desktop\MVI_0107.MOV
2016-02-11 19:15 - 2016-01-31 13:16 - 249275236 _____ C:\Users\Jenda\Desktop\MVI_0106.MOV
2016-02-11 19:02 - 2016-02-11 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastShare
2016-02-10 19:35 - 2016-02-10 19:35 - 08817344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-02-10 13:52 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-10 13:52 - 2016-02-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-02-10 13:52 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-10 13:52 - 2016-02-06 11:11 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-02-10 13:52 - 2016-02-06 11:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-02-10 13:52 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-10 13:52 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-02-10 13:52 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-02-10 13:52 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-02-10 13:52 - 2016-02-06 10:37 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-02-10 13:52 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-10 13:52 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-10 13:52 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-10 13:52 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-10 13:52 - 2016-01-22 21:31 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-10 13:52 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-02-10 13:52 - 2016-01-22 07:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-02-10 13:52 - 2016-01-22 07:41 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-02-10 13:52 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-10 13:52 - 2016-01-22 07:40 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-02-10 13:52 - 2016-01-22 07:40 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-02-10 13:52 - 2016-01-22 07:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-02-10 13:52 - 2016-01-22 07:33 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-02-10 13:52 - 2016-01-22 07:32 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-02-10 13:52 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-10 13:52 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-10 13:52 - 2016-01-22 07:27 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-02-10 13:52 - 2016-01-22 07:27 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-02-10 13:52 - 2016-01-22 07:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-02-10 13:52 - 2016-01-22 07:17 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-02-10 13:52 - 2016-01-22 07:09 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 13:52 - 2016-01-22 07:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-02-10 13:52 - 2016-01-22 07:05 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-02-10 13:52 - 2016-01-22 07:04 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-02-10 13:52 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-02-10 13:52 - 2016-01-22 07:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-02-10 13:52 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-02-10 13:52 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-02-10 13:52 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-02-10 13:52 - 2016-01-22 07:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-02-10 13:52 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-02-10 13:52 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-02-10 13:52 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-02-10 13:52 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-02-10 13:52 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-02-10 13:52 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-10 13:52 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-10 13:52 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-10 13:52 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-10 13:52 - 2016-01-22 06:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-02-10 13:52 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-02-10 13:52 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-02-10 13:52 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-02-10 13:52 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-02-10 13:52 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-10 13:52 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-02-10 13:52 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-02-10 13:52 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-02-10 13:52 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-10 13:52 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-02-10 13:52 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-02-10 13:52 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-02-10 13:52 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-02-10 13:52 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-10 13:52 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-10 13:52 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-02-10 13:52 - 2016-01-07 18:53 - 03211776 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-10 13:52 - 2016-01-07 18:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-10 13:52 - 2016-01-06 20:02 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-02-10 13:52 - 2016-01-06 20:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-02-10 13:52 - 2016-01-06 19:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-02-10 13:51 - 2016-01-22 07:27 - 05573056 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-10 13:51 - 2016-01-22 07:27 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-10 13:51 - 2016-01-22 07:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-02-10 13:51 - 2016-01-22 07:24 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-02-10 13:51 - 2016-01-22 07:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-02-10 13:51 - 2016-01-22 07:19 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-02-10 13:51 - 2016-01-22 07:19 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-02-10 13:51 - 2016-01-22 07:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-02-10 13:51 - 2016-01-22 07:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-10 13:51 - 2016-01-22 07:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-10 13:51 - 2016-01-22 07:18 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-02-10 13:51 - 2016-01-22 07:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-10 13:51 - 2016-01-22 07:17 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-02-10 13:51 - 2016-01-22 07:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-10 13:51 - 2016-01-22 07:16 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-10 13:51 - 2016-01-22 07:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-02-10 13:51 - 2016-01-22 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-02-10 13:51 - 2016-01-22 07:15 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-02-10 13:51 - 2016-01-22 07:15 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-10 13:51 - 2016-01-22 07:15 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-10 13:51 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-02-10 13:51 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-02-10 13:51 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-02-10 13:51 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-02-10 13:51 - 2016-01-22 07:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 07:09 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-02-10 13:51 - 2016-01-22 07:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-02-10 13:51 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-02-10 13:51 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-02-10 13:51 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-02-10 13:51 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-02-10 13:51 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-10 13:51 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-02-10 13:51 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-02-10 13:51 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-10 13:51 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-02-10 13:51 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-10 13:51 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 06:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-02-10 13:51 - 2016-01-22 06:07 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-02-10 13:51 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-02-10 13:51 - 2016-01-22 06:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-02-10 13:51 - 2016-01-22 05:59 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-10 13:51 - 2016-01-22 05:58 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-02-10 13:51 - 2016-01-22 05:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-10 13:51 - 2016-01-22 05:57 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-02-10 13:51 - 2016-01-22 05:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-02-10 13:51 - 2016-01-22 05:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-02-10 13:51 - 2016-01-22 05:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-02-10 13:51 - 2016-01-22 05:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-02-10 13:51 - 2016-01-22 05:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-02-10 13:51 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-02-10 13:51 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 13:51 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 13:51 - 2016-01-16 20:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-02-10 13:51 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-02-09 17:01 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2016-02-09 17:01 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2016-02-09 17:01 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2016-02-09 17:01 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2016-02-09 17:01 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2016-02-09 17:01 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2016-02-09 17:01 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2016-02-09 17:01 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2016-02-09 17:01 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2016-02-09 17:01 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2016-02-09 17:01 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2016-02-09 17:01 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2016-02-09 17:01 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2016-02-09 17:01 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2016-02-09 17:01 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2016-02-09 17:01 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2016-02-09 17:01 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2016-02-09 17:01 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2016-02-09 17:01 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2016-02-09 17:01 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2016-02-09 17:01 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2016-02-09 17:01 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2016-02-09 17:01 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2016-02-09 17:01 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2016-02-09 17:01 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2016-02-09 17:01 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2016-02-09 17:01 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2016-02-09 17:01 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2016-02-09 17:01 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2016-02-09 17:01 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2016-02-09 17:01 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2016-02-09 17:01 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2016-02-09 17:01 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-02-09 17:01 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-02-09 17:01 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-02-09 17:01 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-02-09 17:01 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-02-09 17:01 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-02-09 17:01 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2016-02-09 17:01 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2016-02-09 17:01 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2016-02-09 17:01 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2016-02-09 17:01 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2016-02-09 17:01 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2016-02-09 17:00 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2016-02-09 17:00 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2016-02-09 17:00 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2016-02-09 17:00 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2016-02-09 17:00 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2016-02-09 17:00 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2016-02-09 17:00 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2016-02-09 17:00 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2016-02-09 17:00 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2016-02-09 17:00 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2016-02-09 17:00 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2016-02-09 17:00 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2016-02-09 17:00 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2016-02-09 17:00 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2016-02-09 17:00 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2016-02-09 17:00 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2016-02-09 17:00 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2016-02-09 17:00 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2016-02-09 17:00 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2016-02-09 17:00 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2016-02-09 17:00 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2016-02-09 17:00 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2016-02-09 17:00 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2016-02-09 17:00 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2016-02-09 17:00 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2016-02-09 17:00 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2016-02-09 17:00 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2016-02-09 17:00 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2016-02-09 17:00 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2016-02-09 17:00 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2016-02-09 17:00 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2016-02-09 17:00 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2016-02-09 17:00 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2016-02-09 17:00 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2016-02-09 17:00 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2016-02-09 17:00 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2016-02-09 17:00 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2016-02-09 17:00 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2016-02-09 17:00 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2016-02-09 17:00 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2016-02-09 17:00 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2016-02-09 17:00 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2016-02-09 17:00 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2016-02-09 17:00 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2016-02-09 17:00 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2016-02-09 17:00 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2016-02-09 17:00 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2016-02-09 17:00 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2016-02-09 17:00 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-02-09 17:00 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-02-09 17:00 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2016-02-09 17:00 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2016-02-09 17:00 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2016-02-09 17:00 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-02-09 17:00 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2016-02-09 17:00 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2016-02-09 17:00 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2016-02-09 17:00 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2016-02-09 17:00 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2016-02-09 17:00 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2016-02-09 17:00 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2016-02-09 17:00 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2016-02-09 17:00 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2016-02-09 17:00 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-02-09 17:00 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-02-09 17:00 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-02-09 17:00 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2016-02-09 17:00 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-02-09 17:00 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2016-02-09 17:00 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2016-02-09 17:00 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-02-09 17:00 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2016-02-09 17:00 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2016-02-09 17:00 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-02-09 17:00 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2016-02-09 17:00 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2016-02-09 17:00 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-02-09 17:00 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2016-02-09 17:00 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-02-09 17:00 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-02-09 16:59 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-02-09 16:59 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-02-09 16:59 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2016-02-09 16:59 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-02-09 16:59 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2016-02-09 16:59 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2016-02-09 16:59 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-02-09 16:59 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2016-02-09 16:59 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2016-02-09 16:59 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-02-09 16:59 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2016-02-09 16:59 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-02-09 16:59 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2016-02-09 16:59 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-02-09 16:59 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2016-02-09 16:59 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2016-02-09 16:59 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2016-02-09 16:59 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-02-09 13:07 - 2016-02-09 13:07 - 00000827 _____ C:\Users\Jenda\Desktop\TAPLand – zástupce.lnk
2016-02-08 17:25 - 2016-02-08 17:25 - 00000000 ____D C:\Users\Jenda\Desktop\Malá zvěrol
2016-02-08 17:06 - 2016-02-08 17:07 - 00000000 ____D C:\Users\Jenda\Documents\Tlapky a drápky - Zvěrolékař 2
2016-02-08 15:06 - 2016-02-09 16:44 - 00001139 _____ C:\Users\Jenda\Desktop\Half-Life 2.lnk
2016-02-08 15:06 - 2016-02-08 15:06 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Half-Life 2
2016-02-08 14:52 - 2016-02-08 14:52 - 00000000 ____D C:\Program Files (x86)\booddanet
2016-02-08 14:08 - 2016-02-15 18:00 - 00000000 ____D C:\Users\Jenda\Desktop\Half life
2016-02-06 18:03 - 2016-02-06 18:06 - 00000000 ____D C:\Users\Jenda\AppData\Local\by_dekart811
2016-02-06 17:46 - 2016-02-06 17:46 - 00000000 ____D C:\Users\Jenda\AppData\Local\WhereIsMyHammer
2016-02-05 17:38 - 2016-02-05 17:38 - 00000000 ____D C:\Users\Jenda\AppData\LocalLow\Steel Crate Games
2016-02-05 17:37 - 2016-03-01 18:40 - 00000000 ____D C:\Users\Jenda\Desktop\Petovo slozka nekoukat
2016-02-04 16:27 - 2016-02-04 16:27 - 00000000 ____D C:\Users\Jenda\AppData\Local\Super_Space_Meltdown_v0_9_Demo
2016-02-03 19:03 - 2016-02-03 19:03 - 00011675 _____ C:\ComboFix.txt
2016-02-03 18:53 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2016-02-03 18:53 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2016-02-03 18:53 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-02-03 18:53 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-02-03 18:53 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-02-03 18:53 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2016-02-03 18:53 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2016-02-03 18:53 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2016-02-03 18:52 - 2016-02-03 19:03 - 00000000 ____D C:\Qoobox
2016-02-03 18:52 - 2016-02-03 19:01 - 00000000 ____D C:\Windows\erdnt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-04 07:45 - 2015-03-26 19:48 - 00000000 ____D C:\Users\Jenda\Desktop\Stahování NET
2016-03-04 07:42 - 2009-07-14 05:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-04 07:42 - 2009-07-14 05:45 - 00014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-04 07:38 - 2009-07-14 16:18 - 00671796 _____ C:\Windows\system32\perfh005.dat
2016-03-04 07:38 - 2009-07-14 16:18 - 00142392 _____ C:\Windows\system32\perfc005.dat
2016-03-04 07:38 - 2009-07-14 06:13 - 01591814 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-04 07:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-03-04 07:35 - 2015-04-08 07:30 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-04 07:34 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-03 15:48 - 2015-03-29 10:30 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-03-03 14:48 - 2015-04-04 14:45 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\Skype
2016-03-03 14:41 - 2015-03-26 20:03 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\.minecraft
2016-03-03 12:27 - 2015-03-28 17:58 - 00000000 ____D C:\Users\Jenda\AppData\Local\Unity
2016-03-03 11:03 - 2015-03-26 20:34 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\vlc
2016-03-02 19:12 - 2015-03-26 19:51 - 00000000 ____D C:\Program Files (x86)\FastShare
2016-03-02 18:20 - 2015-03-29 10:26 - 00000000 ___RD C:\Users\Jenda\Desktop\Bezpečnost
2016-03-02 18:17 - 2016-01-29 16:38 - 00000000 ____D C:\AdwCleaner
2016-03-02 07:49 - 2016-01-27 17:23 - 00000000 ____D C:\Program Files\trend micro
2016-03-01 16:14 - 2015-04-02 11:13 - 00000000 ____D C:\Users\Jenda\Desktop\složka 2
2016-02-27 20:46 - 2016-01-08 19:33 - 00000000 ____D C:\Users\Jenda\Desktop\Janička❤
2016-02-24 20:11 - 2015-07-22 17:59 - 00000000 ____D C:\Windows\Minidump
2016-02-24 20:11 - 2015-03-26 19:24 - 00000000 ____D C:\Users\Jenda
2016-02-24 20:10 - 2015-06-28 16:30 - 00000000 ____D C:\Users\Jenánek
2016-02-24 20:09 - 2015-12-03 13:54 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-02-24 20:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2016-02-24 20:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2016-02-24 14:21 - 2015-03-26 19:18 - 00000000 ____D C:\Windows\Panther
2016-02-20 21:32 - 2015-04-05 15:16 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\uTorrent
2016-02-20 20:49 - 2015-11-11 18:44 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\Ahead
2016-02-19 22:57 - 2015-12-03 17:35 - 00000000 ____D C:\Users\Jenda\AppData\LocalLow\uTorrent
2016-02-16 18:25 - 2015-03-26 19:48 - 00000000 ____D C:\Users\Jenda\Desktop\Nepoužívané soubory
2016-02-11 20:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-02-11 09:18 - 2009-07-14 05:45 - 00355968 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-11 09:16 - 2009-07-14 16:37 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-10 20:57 - 2015-03-29 10:51 - 00000000 ____D C:\Windows\system32\MRT
2016-02-10 20:55 - 2015-03-29 10:51 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-10 19:35 - 2015-04-08 07:30 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-10 19:35 - 2015-04-08 07:30 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-10 19:35 - 2015-04-08 07:30 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-09 17:17 - 2015-12-06 13:33 - 00000000 ____D C:\Users\Jenda\Desktop\Nová složka (4)
2016-02-08 15:23 - 2015-10-24 09:30 - 00000000 ____D C:\Users\Jenda\AppData\Local\ElevatedDiagnostics
2016-02-06 18:44 - 2015-05-28 11:45 - 00000000 ____D C:\Users\Jenda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-02-03 19:01 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

==================== Files in the root of some directories =======

2015-03-26 20:07 - 2015-03-26 20:07 - 0099384 _____ () C:\Users\Jenda\AppData\Roaming\inst.exe
2015-03-26 20:07 - 2015-03-26 20:07 - 0007859 _____ () C:\Users\Jenda\AppData\Roaming\pcouffin.cat
2015-03-26 20:07 - 2015-03-26 20:07 - 0001167 _____ () C:\Users\Jenda\AppData\Roaming\pcouffin.inf
2015-03-26 20:08 - 2015-03-26 20:08 - 0000034 _____ () C:\Users\Jenda\AppData\Roaming\pcouffin.log
2015-03-26 20:07 - 2015-03-26 20:07 - 0082816 _____ (VSO Software) C:\Users\Jenda\AppData\Roaming\pcouffin.sys
2015-03-26 20:08 - 2015-11-16 16:22 - 0000671 _____ () C:\Users\Jenda\AppData\Roaming\vso_ts_preview.xml
2015-03-29 10:36 - 2015-07-02 09:05 - 0016222 _____ () C:\Users\Jenda\AppData\Local\MRDownloader.err
2015-03-26 20:17 - 2015-07-02 09:05 - 0001120 _____ () C:\Users\Jenda\AppData\Local\MRDownloader.nast
2015-03-26 19:28 - 2015-04-16 18:42 - 0007615 _____ () C:\Users\Jenda\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
C:\Users\Jenda\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Jenda\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-03-01 13:45

==================== End of FRST.txt ============================

jenanek
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 08 čer 2006 10:52

Re: prosím o kontrolu logu

#8 Příspěvek od jenanek »

Additional scan result of Farbar Recovery Scan Tool (x64) Version:02-03-2016
Ran by Jenda (2016-03-04 07:45:58)
Running from C:\Users\Jenda\Desktop\Stahování NET
Windows 7 Professional Service Pack 1 (X64) (2015-03-26 18:24:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3503001054-2168356953-1104777385-500 - Administrator - Disabled)
Guest (S-1-5-21-3503001054-2168356953-1104777385-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3503001054-2168356953-1104777385-1005 - Limited - Enabled)
Jenda (S-1-5-21-3503001054-2168356953-1104777385-1001 - Administrator - Enabled) => C:\Users\Jenda

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)
Absolute Uninstaller 2.0 (HKLM-x32\...\Absolute Uninstaller_is1) (Version: - GlarySoft.com)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Reader 6.0.1 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A00000000001}) (Version: 006.000.001 - Adobe Systems Incorporated)
ATI Catalyst Install Manager (HKLM\...\{64555D45-1F57-BF1D-1A5E-BFD4C8C0ADB4}) (Version: 3.0.765.0 - ATI Technologies, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
ccc-core-static (x32 Version: 2010.0210.2206.39615 - Název společnosti:) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.04 - Piriform)
ConvertXtoDVD 3.4.7.121 (HKLM-x32\...\{76C24F39-B161-498F-BD8B-C64789812D13}_is1) (Version: 3.4.7.121 - )
Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)
FastShare.cz verze 2.3.1 (HKLM-x32\...\FastShare.cz_is1) (Version: 2.3.1 - )
Half-Life 2 (HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\...\Half-Life 2) (Version: - )
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
LEGO® Harry Potter™: Years 5-7 (HKLM-x32\...\{6E1F38D1-1F37-4E0E-BB08-97BFA65EB139}) (Version: 1.0.0.0 - WB Games)
McPixel version 1.0.4 (HKLM-x32\...\McPixel_is1) (Version: 1.0.4 - Sos)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 CSY Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0.2 (x86 cs) (HKLM-x32\...\Mozilla Firefox 44.0.2 (x86 cs)) (Version: 44.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 7 Premium (HKLM-x32\...\{98EFD8F0-08DE-48DB-B922-A2EBAB711029}) (Version: 7.03.1151 - Nero AG)
Odinstalace tiskárny EPSON SX110 Series (HKLM\...\EPSON SX110 Series) (Version: - SEIKO EPSON Corporation)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.23.623.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6151 - Realtek Semiconductor Corp.)
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
The Sims 4 (HKLM-x32\...\The Sims 4_R.G. Mechanics_is1) (Version: - R.G. Mechanics, ProZorg_tm)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.36.45 - Electronic Arts)
The Sims™ 3 Ambitions (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.10.1 - Electronic Arts)
The Sims™ 3 Diesel Stuff (HKLM-x32\...\{1C9B6173-6DC9-4EEE-9EFC-6BA115CFBE43}) (Version: 14.0.48 - Electronic Arts)
The Sims™ 3 Fast Lane Stuff (HKLM-x32\...\{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}) (Version: 5.8.1 - Electronic Arts)
The Sims™ 3 Generations (HKLM-x32\...\{E6B88BD6-E4B2-4701-A648-B6DAC6E491CC}) (Version: 8.0.152 - Electronic Arts)
The Sims™ 3 High-End Loft Stuff (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.13.1 - Electronic Arts)
The Sims™ 3 Katy Perry Sweet Treats (HKLM-x32\...\{9B2506E3-9A3F-45B5-96BF-509CAD584650}) (Version: 13.0.62 - Electronic Arts)
The Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts)
The Sims™ 3 Master Suite Stuff (HKLM-x32\...\{08A25478-C5DD-4EA7-B168-3D687CA987FF}) (Version: 11.0.84 - Electronic Arts)
The Sims™ 3 Outdoor Living Stuff (HKLM-x32\...\{117B6BF6-82C3-420C-B284-9247C8568E53}) (Version: 7.3.2 - Electronic Arts)
The Sims™ 3 Pets (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
The Sims™ 3 Seasons (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
The Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
The Sims™ 3 Supernatural (HKLM-x32\...\{B37DAFA5-717D-41F8-BDFB-3A4B68C0B3A1}) (Version: 15.0.135 - Electronic Arts)
The Sims™ 3 Town Life Stuff (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
The Sims™ 3 World Adventures (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.17.2 - Electronic Arts)
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
Unity Web Player (HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {08DD2D4A-261F-4777-8B86-3CABD16C0576} - System32\Tasks\{BBEEEA1C-8D43-4987-A9CD-2ACE9F4DC966} => Firefox.exe hxxp://ui.skype.com/ui/0/7.12.80.101/cs/abandoninstall?page=tsMain
Task: {0DDB6810-B691-4C57-B497-C1701BA95A1B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10] (Adobe Systems Incorporated)
Task: {4C7748BF-06CE-4AC9-9F6E-6C70E24D5490} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-02-20] (AVAST Software)
Task: {4CA5C62B-61D5-4AAF-8280-2740BA04D499} - System32\Tasks\{103838B7-4E6F-4D5E-921F-1504B8ECF303} => pcalua.exe -a I:\HRY\minecraft-1-7-2-plna-hra-zdarma-CZ.exe -d I:\HRY
Task: {745F7F56-7FE7-4739-BAA7-A7C6331BA723} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-02-24] (Avast Software s.r.o.)
Task: {FAB5835C-E039-4A36-A37F-9C06224E84F5} - System32\Tasks\{A9D259D0-E24C-4692-A45B-0D1504F4132D} => Firefox.exe hxxp://ui.skype.com/ui/0/7.18.0.111/cs/abandoninstall?page=tsPlugin
Task: {FF9BD18A-6849-4150-8ADE-1AEB4C6024BD} - System32\Tasks\{C09C49E2-6A61-4224-8771-47529E2EFB98} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe -c /M{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC} /l2057

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Jenda\Desktop\Half life\Half Life 2 - Episode One CZ Komplet Hra\Spustit zde.lnk -> C:\Users\Jenda\Desktop\Half life\Half Life 2 - Episode One CZ Komplet Hra\start.bat ()

ShortcutWithArgument: C:\Users\Jenda\Desktop\Petovo slozka nekoukat\YouTube.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxps://www.youtube.com/

==================== Loaded Modules (Whitelisted) ==============

2015-04-29 12:47 - 2015-04-29 12:47 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-29 12:47 - 2015-04-29 12:47 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-03 15:48 - 2016-03-03 15:48 - 02836992 _____ () C:\Program Files\AVAST Software\Avast\defs\16030300\algo.dll
2016-03-04 07:35 - 2016-03-04 07:35 - 02838016 _____ () C:\Program Files\AVAST Software\Avast\defs\16030301\algo.dll
2015-03-29 10:30 - 2015-03-29 10:30 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3503001054-2168356953-1104777385-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jenda\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SRDownloader => C:\Users\Jenda\Desktop\Stahování NET\MRDownloader.exe
MSCONFIG\startupreg: uTorrent => "C:\Users\Jenda\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{7734E5A1-C58E-473A-9A1B-C11F8C5BA4EC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E5AA1F07-2D9F-4DF5-8DBC-8BFDD15052CA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{984E0C5A-AE9D-4DB9-A88B-B6E001B0F4CD}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{BF67776A-BD45-48B7-AD2E-87451FB50413}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{23A43E09-E7CE-4DC1-8448-316867370C24}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{595B1E1B-7927-4DFD-BCA1-A97B240A0EA8}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{9D0743DB-355B-43F2-8017-8D5423674BE3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C39EE43F-0048-4694-9A0E-2467DA1BAD7D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{86F991B6-B1BF-4319-AFDC-3D0531C4EF2D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{519A0B45-96EF-47A5-AA99-AC132233593D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CD153351-CB38-45E4-8C06-463C0CB85B37}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B3C4FB97-2EB0-4877-AC60-332BF1B8C4D0}] => (Allow) C:\Users\Jenda\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4641B9A1-A651-464B-83DD-0A7126CBF3D6}] => (Allow) C:\Users\Jenda\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{64118471-DA3A-4A83-9418-EE981B55C07A}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe] => (Allow) C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe
FirewallRules: [UDP Query User{969B5524-3009-4290-B36D-6C3FFDF5F240}C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe] => (Allow) C:\program files (x86)\spyware terminator\spywareterminatorupdate.exe
FirewallRules: [TCP Query User{C4FA7453-2E62-4367-9180-89D64303F8DB}C:\users\jenda\appdata\local\temp\rar$ex86.436\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex86.436\half-life 2 lost coast\hl2.exe
FirewallRules: [UDP Query User{1E220B51-A9DD-480E-972C-65298220D02E}C:\users\jenda\appdata\local\temp\rar$ex86.436\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex86.436\half-life 2 lost coast\hl2.exe
FirewallRules: [TCP Query User{997E1F98-99B2-405B-973C-A0A35CBA659A}C:\users\jenda\appdata\local\temp\rar$ex14.7189\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex14.7189\half-life 2 lost coast\hl2.exe
FirewallRules: [UDP Query User{1FCAE8F3-9784-4AE6-A1BB-196ED4172820}C:\users\jenda\appdata\local\temp\rar$ex14.7189\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex14.7189\half-life 2 lost coast\hl2.exe
FirewallRules: [TCP Query User{953ABE97-5B4F-4BDA-AECD-1112CE4C8991}C:\users\jenda\appdata\local\temp\rar$ex01.078\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex01.078\half-life 2 lost coast\hl2.exe
FirewallRules: [UDP Query User{FC34D008-2E80-428F-BE43-C6E7B823454A}C:\users\jenda\appdata\local\temp\rar$ex01.078\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex01.078\half-life 2 lost coast\hl2.exe
FirewallRules: [TCP Query User{7DFD304E-2DBD-41F8-B4A6-A8F7F0F0F813}C:\users\jenda\appdata\local\temp\rar$ex01.073\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex01.073\half-life 2 lost coast\hl2.exe
FirewallRules: [UDP Query User{C54256FF-087C-441B-AD3A-5E1535C3F352}C:\users\jenda\appdata\local\temp\rar$ex01.073\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex01.073\half-life 2 lost coast\hl2.exe
FirewallRules: [TCP Query User{4C640778-E5E6-4337-BFDB-50D7EC492A37}C:\users\jenda\appdata\local\temp\rar$ex01.154\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex01.154\half-life 2 lost coast\hl2.exe
FirewallRules: [UDP Query User{CF198DDF-3014-4AC0-BE21-E206656F3090}C:\users\jenda\appdata\local\temp\rar$ex01.154\half-life 2 lost coast\hl2.exe] => (Block) C:\users\jenda\appdata\local\temp\rar$ex01.154\half-life 2 lost coast\hl2.exe

==================== Restore Points =========================

02-03-2016 20:01:43 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/02/2016 12:57:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program HL2.EXE verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: ce8

Čas spuštění: 01d1747a557d6c0a

Čas ukončení: 38

Cesta k aplikaci: C:\PROGRAM FILES (X86)\BOODDANET\HALF-LIFE 2\HL2.EXE

ID hlášení:

Error: (03/02/2016 08:17:13 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x80070013, Médium je chráněno proti zápisu.
]

Error: (03/01/2016 06:37:02 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Index nebyl inicializován.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/01/2016 06:37:02 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Aplikace nebyla inicializována.

Kontext: aplikace Windows

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/01/2016 06:37:02 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Objekt indexování nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/01/2016 06:37:02 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Modul plug-in v <Search.TripoliIndexer> nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Prvek nebyl nalezen. (HRESULT : 0x80070490) (0x80070490)

Error: (03/01/2016 06:36:59 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Modul plug-in v <Search.JetPropStore> nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/01/2016 06:36:59 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Služba Windows Search nenačetla informace o úložišti vlastností.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Databáze indexu obsahu je poškozená. (HRESULT : 0xc0041800) (0xc0041800)

Error: (03/01/2016 06:36:59 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Služba Windows Search byla zastavena, protože došlo k problému s indexovacím modulem The catalog is corrupt.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (03/01/2016 06:36:59 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vyhledávací služby zjistila, že index {id=4700} obsahuje poškozené datové soubory. Služba se pokusí tyto potíže automaticky odstranit vytvořením nového indexu.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (03/03/2016 02:48:24 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (03/02/2016 06:17:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba NMIndexingService byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/02/2016 06:17:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (03/02/2016 06:17:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (03/02/2016 06:17:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Stínová kopie svazku byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/02/2016 06:17:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba PLFlash DeviceIoControl Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/02/2016 06:17:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba EPSON V3 Service4(01) byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/02/2016 06:17:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba EPSON V5 Service4(01) byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (03/02/2016 06:17:41 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba zařazování tisku byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (03/02/2016 06:17:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba AMD External Events Utility byla neočekávaně ukončena. Tento stav nastal již 1krát.


==================== Memory info ===========================

Processor: AMD Athlon(tm) II X4 635 Processor
Percentage of memory in use: 38%
Total physical RAM: 4095.18 MB
Available physical RAM: 2530.56 MB
Total Virtual: 8188.57 MB
Available Virtual: 6496.3 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:235.31 GB) NTFS ==>[drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 39D139D1)
Partition 1: (Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: prosím o kontrolu logu

#9 Příspěvek od JaRon »

V logu nevidim nic zavadne
Skus vypnut indexovanie suborov
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

jenanek
Návštěvník
Návštěvník
Příspěvky: 84
Registrován: 08 čer 2006 10:52

Re: prosím o kontrolu logu

#10 Příspěvek od jenanek »

Pokud se to nastavuje pod názvem ,,indexovat šifrované soubory" ,tak to zaškrtnuté nemám.Ale zaměřil jsem se na spouštění pc a musím uznat,že se zrychlil.

Odpovědět