Počítač jsem už předtím projel ComboFixem, následně LOG z HijackThis
Logfile of random's system information tool 1.10 (written by random/random)
Run by Miroslav at 2016-03-29 19:15:44
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 48 GB (24%) free of 200 GB
Total RAM: 8092 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:15:53, on 29.3.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18231)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\BOINC\boinctray.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Miroslav.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.2345.com/?34838
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [ QQPCTray] "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe" /regrun
O4 - HKLM\..\Run: [boinctray] "C:\Program Files (x86)\BOINC\boinctray.exe"
O4 - HKLM\..\Run: [boincmgr] "C:\Program Files (x86)\BOINC\charityengine.exe" /a /s
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\ProgramData\Ronzap\Xxx-find.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ronzap - Unknown owner - C:\ProgramData\\Ronzap\\Ronzap.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7476 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 2852
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\system32\GWX\GWX.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
"C:\Program Files (x86)\BOINC\boinctray.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "-1353323518-7850156013357768111567288301307385741-14434575036946895621163449627
C:\Windows\explorer.exe
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=49.0.2623.87 --handshake-handle=0xcc
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3352.0.1339688373\1660794341" --supports-dual-gpus=false --gpu-driver-bug-workarounds=3,11,25,54,64 --gpu-vendor-id=0x10de --gpu-device-id=0x1200 --gpu-driver-vendor=NVIDIA --gpu-driver-version=10.18.13.6143 --ignored=" --type=renderer " /prefetch:2
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_06/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Default/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3352.2.1417968837\641344354" /prefetch:1
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_06/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Default/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3352.3.991606464\1217240444" /prefetch:1
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_06/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Default/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3352.9.490652673\335903959" /prefetch:1
taskhost.exe $(Arg0)
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_06/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Default/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3352.17.1644743541\1642589081" /prefetch:1
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_06/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Default/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3352.20.1291379357\1690916475" /prefetch:1
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_06/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Default/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3352.23.2123577529\244924407" /prefetch:1
"C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding --disable-features=UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --lang=cs --force-fieldtrials=AppBannerTriggering/Aggressive/AutofillProfileOrderByFrecency/Enabled/*AutomaticTabDiscarding/Enabled_Once_5/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ChromeSuggestions/Default/*ClientSideDetectionModel/Model0/*CrossDevicePromo/7DaySingleProfile/*DataReductionProxyConfigService/Enabled/*DirectWriteFontProxy/UseDirectWriteFontProxy/*ExtensionActionRedesign/Enabled/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*GFE/Default/InstanceID/Enabled/IntelligentSessionRestore/Enabled2/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/Unused_2/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PreRead/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*SpdyEnableDependencies/Default/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_06/*UMA-Uniformity-Trial-10-Percent/group_01/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_04/*UMA-Uniformity-Trial-5-Percent/default/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/WebFontsIntervention/Default/WebRTC-LocalIPPermissionCheck/Enabled/WebRTC-PeerConnectionDTLS1.2/Enabled/ --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553 --channel="3352.25.1258883917\782338752" /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540
"C:\Users\Miroslav\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job - C:\Users\Miroslav\AppData\Local\Google\Update\GoogleUpdate.exe /c
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2016-01-29 1340192]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-04 7200984]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-12-16 2771576]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-12-16 1846016]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-18 1085656]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
" QQPCTray"=C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe /regrun []
"boinctray"=C:\Program Files (x86)\BOINC\boinctray.exe [2014-03-07 71312]
"boincmgr"=C:\Program Files (x86)\BOINC\charityengine.exe [2014-03-07 3757712]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\ProgramData\Ronzap\Rankex.dll"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=221
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.XVID"=xvidvfw.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"vidc.x264"=x264vfw64.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2016-03-29 19:15:44 ----D---- C:\rsit
2016-03-29 19:15:44 ----D---- C:\Program Files\trend micro
2016-03-29 19:11:41 ----SHD---- C:\$RECYCLE.BIN
2016-03-29 19:11:25 ----D---- C:\Windows\temp
2016-03-29 19:11:06 ----A---- C:\ComboFix.txt
2016-03-29 18:49:52 ----A---- C:\Windows\zip.exe
2016-03-29 18:49:52 ----A---- C:\Windows\SWSC.exe
2016-03-29 18:49:52 ----A---- C:\Windows\SWREG.exe
2016-03-29 18:49:52 ----A---- C:\Windows\sed.exe
2016-03-29 18:49:52 ----A---- C:\Windows\PEV.exe
2016-03-29 18:49:52 ----A---- C:\Windows\NIRCMD.exe
2016-03-29 18:49:52 ----A---- C:\Windows\MBR.exe
2016-03-29 18:49:52 ----A---- C:\Windows\grep.exe
2016-03-29 18:49:21 ----D---- C:\Qoobox
2016-03-29 18:49:11 ----D---- C:\Windows\erdnt
2016-03-29 18:45:43 ----D---- C:\zoek_backup
2016-03-29 18:38:20 ----D---- C:\ProgramData\BOINC
2016-03-29 18:38:20 ----D---- C:\Program Files (x86)\BOINC
2016-03-29 18:37:33 ----D---- C:\ProgramData\Ronzaps
2016-03-29 18:37:23 ----D---- C:\ProgramData\Ronzap
2016-03-29 18:37:22 ----A---- C:\Users\Miroslav\AppData\Roaming\noah.dat
2016-03-29 18:37:22 ----A---- C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37:22 ----A---- C:\Users\Miroslav\AppData\Roaming\agent.dat
2016-03-29 18:37:09 ----A---- C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37:09 ----A---- C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:36:30 ----A---- C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:25:53 ----D---- C:\Program Files (x86)\AdwCleaner
2016-03-29 18:25:07 ----D---- C:\Windows\SYSWOW64\tab
2016-03-29 18:25:07 ----D---- C:\Windows\SYSWOW64\hover
2016-03-29 18:21:36 ----A---- C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:18:48 ----D---- C:\ProgramData\Thunder Network
2016-03-29 18:17:18 ----A---- C:\Windows\chromebrowser.exe
2016-03-28 23:32:12 ----D---- C:\Users\Miroslav\AppData\Roaming\Google
2016-03-28 23:24:04 ----D---- C:\ProgramData\Google
2016-03-28 23:24:01 ----D---- C:\Program Files\Google
2016-03-24 14:08:12 ----D---- C:\Program Files (x86)\Windows Phone
2016-03-24 14:07:46 ----D---- C:\ProgramData\Applications
2016-03-24 09:44:38 ----D---- C:\Users\Miroslav\AppData\Roaming\Apple Computer
2016-03-23 19:52:43 ----D---- C:\ProgramData\Apple Computer
2016-03-23 19:52:43 ----D---- C:\Program Files (x86)\QuickTime
2016-03-23 19:52:07 ----D---- C:\Program Files (x86)\Apple Software Update
2016-03-23 19:52:00 ----D---- C:\ProgramData\Apple
2016-03-22 19:46:37 ----A---- C:\Windows\unvise32.exe
2016-03-22 19:46:33 ----D---- C:\Program Files (x86)\LooksBuilder
2016-03-22 19:46:32 ----D---- C:\Program Files (x86)\MBL
2016-03-16 00:39:18 ----AD---- C:\ProgramData\MTA San Andreas All
2016-03-13 10:57:01 ----D---- C:\Program Files (x86)\x264vfw
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\system32\ucrtbase.dll
2016-03-09 16:27:19 ----A---- C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27:19 ----A---- C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27:18 ----A---- C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:27:17 ----A---- C:\Windows\system32\win32k.sys
2016-03-09 16:27:16 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2016-03-09 16:27:16 ----A---- C:\Windows\SYSWOW64\wups.dll
2016-03-09 16:27:16 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2016-03-09 16:27:16 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wuwebv.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wups2.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wups.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wudriver.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wucltux.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wuaueng.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wuauclt.exe
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wuapp.exe
2016-03-09 16:27:16 ----A---- C:\Windows\system32\wuapi.dll
2016-03-09 16:27:16 ----A---- C:\Windows\system32\WinSetupUI.dll
2016-03-09 16:27:15 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2016-03-09 16:27:15 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2016-03-09 16:27:13 ----A---- C:\Windows\system32\oleaut32.dll
2016-03-09 16:27:13 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2016-03-09 16:27:13 ----A---- C:\Windows\system32\drivers\ntfs.sys
2016-03-09 16:27:12 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2016-03-09 16:27:12 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2016-03-09 16:27:12 ----A---- C:\Windows\system32\asycfilt.dll
2016-03-09 16:27:08 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2016-03-09 16:27:08 ----A---- C:\Windows\SYSWOW64\inseng.dll
2016-03-09 16:27:08 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-03-09 16:27:08 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2016-03-09 16:27:08 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2016-03-09 16:27:08 ----A---- C:\Windows\system32\iertutil.dll
2016-03-09 16:27:08 ----A---- C:\Windows\system32\iernonce.dll
2016-03-09 16:27:08 ----A---- C:\Windows\system32\ieetwproxystub.dll
2016-03-09 16:27:08 ----A---- C:\Windows\system32\ieetwcollector.exe
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\occache.dll
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-03-09 16:27:07 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2016-03-09 16:27:07 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 16:27:07 ----A---- C:\Windows\system32\inseng.dll
2016-03-09 16:27:07 ----A---- C:\Windows\system32\ie4uinit.exe
2016-03-09 16:27:06 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2016-03-09 16:27:06 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-03-09 16:27:05 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2016-03-09 16:27:05 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2016-03-09 16:27:05 ----A---- C:\Windows\SYSWOW64\jscript.dll
2016-03-09 16:27:05 ----A---- C:\Windows\SYSWOW64\ieui.dll
2016-03-09 16:27:05 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2016-03-09 16:27:05 ----A---- C:\Windows\system32\urlmon.dll
2016-03-09 16:27:05 ----A---- C:\Windows\system32\occache.dll
2016-03-09 16:27:05 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-09 16:27:05 ----A---- C:\Windows\system32\msfeeds.dll
2016-03-09 16:27:05 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2016-03-09 16:27:05 ----A---- C:\Windows\system32\iedkcs32.dll
2016-03-09 16:27:05 ----A---- C:\Windows\system32\dxtrans.dll
2016-03-09 16:27:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-03-09 16:27:04 ----A---- C:\Windows\system32\iesetup.dll
2016-03-09 16:27:04 ----A---- C:\Windows\system32\ieapfltr.dll
2016-03-09 16:27:03 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2016-03-09 16:27:03 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2016-03-09 16:27:03 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-03-09 16:27:03 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2016-03-09 16:27:03 ----A---- C:\Windows\system32\vbscript.dll
2016-03-09 16:27:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-03-09 16:27:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2016-03-09 16:27:02 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2016-03-09 16:27:02 ----A---- C:\Windows\system32\jsproxy.dll
2016-03-09 16:27:02 ----A---- C:\Windows\system32\ieui.dll
2016-03-09 16:27:02 ----A---- C:\Windows\system32\dxtmsft.dll
2016-03-09 16:27:01 ----A---- C:\Windows\system32\mshtmlmedia.dll
2016-03-09 16:27:01 ----A---- C:\Windows\system32\mshtmled.dll
2016-03-09 16:27:01 ----A---- C:\Windows\system32\ieUnatt.exe
2016-03-09 16:27:01 ----A---- C:\Windows\system32\ieframe.dll
2016-03-09 16:27:00 ----A---- C:\Windows\system32\wininet.dll
2016-03-09 16:27:00 ----A---- C:\Windows\system32\webcheck.dll
2016-03-09 16:27:00 ----A---- C:\Windows\system32\jscript9diag.dll
2016-03-09 16:27:00 ----A---- C:\Windows\system32\jscript9.dll
2016-03-09 16:27:00 ----A---- C:\Windows\system32\jscript.dll
2016-03-09 16:26:59 ----A---- C:\Windows\system32\msrating.dll
2016-03-09 16:26:59 ----A---- C:\Windows\system32\MshtmlDac.dll
2016-03-09 16:26:59 ----A---- C:\Windows\system32\mshtml.dll
2016-03-09 16:24:02 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-03-09 16:24:02 ----A---- C:\Windows\system32\ntdll.dll
2016-03-09 16:24:01 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2016-03-09 16:24:01 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2016-03-09 16:24:01 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2016-03-09 16:24:01 ----A---- C:\Windows\system32\KernelBase.dll
2016-03-09 16:24:01 ----A---- C:\Windows\system32\kerberos.dll
2016-03-09 16:24:00 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2016-03-09 16:24:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-03-09 16:24:00 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2016-03-09 16:24:00 ----A---- C:\Windows\system32\kernel32.dll
2016-03-09 16:24:00 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-03-09 16:24:00 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2016-03-09 16:24:00 ----A---- C:\Windows\system32\advapi32.dll
2016-03-09 16:23:59 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2016-03-09 16:23:59 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\wow64win.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\wow64.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\winsrv.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\wdigest.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\TSpkg.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\sspicli.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\srcore.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\smss.exe
2016-03-09 16:23:59 ----A---- C:\Windows\system32\schannel.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\rpcrt4.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\ncrypt.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\msv1_0.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\lsasrv.dll
2016-03-09 16:23:59 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2016-03-09 16:23:59 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2016-03-09 16:23:59 ----A---- C:\Windows\system32\conhost.exe
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\wow32.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\srclient.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\schannel.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\secur32.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\credssp.dll
2016-03-09 16:23:58 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2016-03-09 16:23:58 ----A---- C:\Windows\system32\wow64cpu.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\sspisrv.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\srclient.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\secur32.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\rstrui.exe
2016-03-09 16:23:58 ----A---- C:\Windows\system32\ntvdm64.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\lsass.exe
2016-03-09 16:23:58 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2016-03-09 16:23:58 ----A---- C:\Windows\system32\csrsrv.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\cryptbase.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\credssp.dll
2016-03-09 16:23:58 ----A---- C:\Windows\system32\auditpol.exe
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23:57 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23:56 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23:56 ----A---- C:\Windows\SYSWOW64\user.exe
2016-03-09 16:23:56 ----A---- C:\Windows\SYSWOW64\setup16.exe
2016-03-09 16:23:56 ----A---- C:\Windows\SYSWOW64\instnm.exe
2016-03-09 16:23:56 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2016-03-09 16:23:56 ----A---- C:\Windows\system32\apisetschema.dll
2016-03-09 16:23:55 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2016-03-09 16:23:55 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2016-03-09 16:23:55 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2016-03-09 16:23:55 ----A---- C:\Windows\system32\msobjs.dll
2016-03-09 16:23:55 ----A---- C:\Windows\system32\msaudite.dll
2016-03-09 16:23:55 ----A---- C:\Windows\system32\adtschema.dll
2016-03-09 16:23:47 ----A---- C:\Windows\SYSWOW64\mfds.dll
2016-03-09 16:23:47 ----A---- C:\Windows\system32\mfds.dll
2016-03-09 16:23:47 ----A---- C:\Windows\system32\atmfd.dll
2016-03-09 16:23:46 ----A---- C:\Windows\SYSWOW64\lpk.dll
2016-03-09 16:23:46 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2016-03-09 16:23:46 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2016-03-09 16:23:46 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2016-03-09 16:23:46 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2016-03-09 16:23:46 ----A---- C:\Windows\system32\seclogon.dll
2016-03-09 16:23:46 ----A---- C:\Windows\system32\lpk.dll
2016-03-09 16:23:46 ----A---- C:\Windows\system32\fontsub.dll
2016-03-09 16:23:46 ----A---- C:\Windows\system32\dciman32.dll
2016-03-09 16:23:46 ----A---- C:\Windows\system32\atmlib.dll
2016-03-09 16:23:45 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-03-09 16:23:45 ----A---- C:\Windows\system32\wmp.dll
2016-03-09 16:23:44 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2016-03-09 16:23:44 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2016-03-09 16:23:44 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2016-03-09 16:23:44 ----A---- C:\Windows\system32\wmploc.DLL
2016-03-09 16:23:44 ----A---- C:\Windows\system32\spwmp.dll
2016-03-09 16:23:44 ----A---- C:\Windows\system32\dxmasf.dll
2016-03-09 16:23:43 ----A---- C:\Windows\system32\generaltel.dll
2016-03-09 16:23:43 ----A---- C:\Windows\system32\appraiser.dll
2016-03-09 16:23:43 ----A---- C:\Windows\system32\aeinv.dll
2016-03-09 16:23:42 ----A---- C:\Windows\system32\invagent.dll
2016-03-09 16:23:42 ----A---- C:\Windows\system32\devinv.dll
2016-03-09 16:23:42 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-03-09 16:23:42 ----A---- C:\Windows\system32\acmigration.dll
======List of files/folders modified in the last 1 month======
2016-03-29 19:15:44 ----RD---- C:\Program Files
2016-03-29 19:12:14 ----D---- C:\Windows\SysWOW64
2016-03-29 19:11:25 ----D---- C:\Windows
2016-03-29 19:01:06 ----A---- C:\Windows\system.ini
2016-03-29 19:00:47 ----D---- C:\Windows\system32\drivers\etc
2016-03-29 18:57:57 ----AD---- C:\ProgramData
2016-03-29 18:54:32 ----D---- C:\Windows\SYSWOW64\drivers
2016-03-29 18:54:32 ----D---- C:\Windows\AppPatch
2016-03-29 18:54:31 ----D---- C:\Program Files (x86)\Common Files
2016-03-29 18:49:22 ----D---- C:\Windows\system32\drivers
2016-03-29 18:48:13 ----D---- C:\Windows\System32
2016-03-29 18:48:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-03-29 18:44:35 ----D---- C:\Windows\system32\config
2016-03-29 18:42:36 ----D---- C:\Windows\Prefetch
2016-03-29 18:42:11 ----D---- C:\Windows\system32\Tasks
2016-03-29 18:41:20 ----D---- C:\ProgramData\NVIDIA
2016-03-29 18:40:21 ----D---- C:\Program Files (x86)\VideoLAN
2016-03-29 18:39:57 ----D---- C:\Program Files (x86)
2016-03-29 18:38:21 ----SHD---- C:\Windows\Installer
2016-03-29 18:38:20 ----D---- C:\Config.Msi
2016-03-29 18:38:17 ----D---- C:\Windows\Downloaded Installations
2016-03-29 18:28:52 ----D---- C:\Program Files\Common Files
2016-03-29 18:24:28 ----D---- C:\Windows\Tasks
2016-03-29 18:20:30 ----RSD---- C:\Windows\Fonts
2016-03-29 18:16:03 ----D---- C:\Users\Miroslav\AppData\Roaming\uTorrent
2016-03-29 13:34:05 ----SHD---- C:\System Volume Information
2016-03-29 11:30:00 ----D---- C:\Program Files (x86)\SpeedFan
2016-03-28 23:25:08 ----D---- C:\Users\Miroslav\AppData\Roaming\Adobe
2016-03-28 23:24:00 ----D---- C:\Program Files (x86)\Google
2016-03-28 23:23:33 ----D---- C:\ProgramData\Package Cache
2016-03-24 18:02:36 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2016-03-24 02:34:40 ----D---- C:\Windows\winsxs
2016-03-24 02:34:39 ----SD---- C:\Windows\SYSWOW64\GWX
2016-03-24 02:34:39 ----SD---- C:\Windows\system32\GWX
2016-03-23 22:34:10 ----D---- C:\ProgramData\NVIDIA Corporation
2016-03-21 14:21:03 ----D---- C:\Program Files (x86)\MSI Afterburner
2016-03-16 00:31:45 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2016-03-13 18:56:27 ----D---- C:\Windows\rescache
2016-03-12 12:15:51 ----SD---- C:\Users\Miroslav\AppData\Roaming\Microsoft
2016-03-11 12:00:53 ----D---- C:\Program Files (x86)\Steam
2016-03-09 21:12:10 ----D---- C:\Windows\Microsoft.NET
2016-03-09 21:09:27 ----RSD---- C:\Windows\assembly
2016-03-09 20:31:39 ----D---- C:\Windows\SYSWOW64\sk-SK
2016-03-09 20:31:39 ----D---- C:\Windows\SYSWOW64\pl-PL
2016-03-09 20:31:39 ----D---- C:\Windows\SYSWOW64\en-US
2016-03-09 20:31:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-03-09 20:31:39 ----D---- C:\Windows\system32\sk-SK
2016-03-09 20:31:39 ----D---- C:\Windows\system32\pl-PL
2016-03-09 20:31:39 ----D---- C:\Windows\system32\en-US
2016-03-09 20:31:39 ----D---- C:\Windows\system32\cs-CZ
2016-03-09 20:31:36 ----D---- C:\Program Files\Internet Explorer
2016-03-09 20:31:35 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-09 20:31:30 ----D---- C:\Program Files\Windows Media Player
2016-03-09 20:31:30 ----D---- C:\Program Files (x86)\Windows Media Player
2016-03-09 20:31:26 ----D---- C:\Windows\system32\DriverStore
2016-03-09 16:38:56 ----D---- C:\Windows\system32\catroot2
2016-03-09 16:38:28 ----D---- C:\Windows\system32\MRT
2016-03-09 16:35:39 ----A---- C:\Windows\system32\MRT.exe
2016-03-09 16:35:33 ----D---- C:\Windows\system32\appraiser
2016-03-06 14:14:49 ----D---- C:\ProgramData\tmp
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2013-06-27 82240]
R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2013-06-27 42304]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-11-13 289120]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-09-29 283064]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2014-04-10 138456]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2014-04-10 425176]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-07 3680728]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-11-13 133816]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-12-16 205456]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-12-16 19576]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-12-16 50472]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-07-16 941784]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2011-12-14 56448]
S2 tsnethlpx64;TsNetHlpX64.sys; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TsNetHlpX64.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-12-18 82128]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-12-16 1156216]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-01-29 23808]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-12-16 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-12-16 6477432]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-12-16 1256240]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-12-16 417400]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2016-01-29 374344]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-12-16 8185464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2015-11-05 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2015-11-05 125112]
S2 Ronzap;Ronzap; C:\ProgramData\\Ronzap\\Ronzap.exe [2016-03-29 1069568]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-24 269504]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2015-01-01 654848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-02-08 114688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2016-02-07 2104840]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-11-10 836176]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-11-05 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2015-11-05 51376]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2015-11-05 135848]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu logu - nechtěné instalace
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - nechtěné instalace
To jste nám pomohl. Spuštěním této utility, která je určena jen profesionálům jste riskoval pád systému, případně poškození některých aplikací. A za druhé je po skenu CF log RSIT zcela k ničemu, neboť CF všechny stopy smaže. CF, pokud ho ještě máte v PC, přejmenujte na uninstall a spusťte. CF se regulérně odinstaluje. Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 . Snad nám něco ukáže.Mion píše:Počítač jsem už předtím projel ComboFixem, následně LOG z HijackThis
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - nechtěné instalace
Taky je log:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Miroslav (administrator) on MIROSLAV-PC (29-03-2016 20:30:42)
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available Profiles: Miroslav)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\ProgramData\Ronzap\Ronzap.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Windows\DAODx.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7200984 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [ QQPCTray] => "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe" /regrun
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [AdobeBridge] => [X]
AppInit_DLLs: C:\ProgramData\Ronzap\Rankex.dll => C:\ProgramData\Ronzap\Rankex.dll [363520 2016-03-29] ()
AppInit_DLLs-x32: C:\ProgramData\Ronzap\Xxx-find.dll => C:\ProgramData\Ronzap\Xxx-find.dll [257536 2016-03-29] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22A83F5D-89A7-4424-8E9D-7C4188E282D9}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{34F7103D-2C11-4FAA-BD34-9E150A07D54D}: [DhcpNameServer] 10.0.0.138
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130900044436600023&GUID=F7389CC1-0968-4DEC-9BC8-B7E1DC0240E0
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.2345.com/?34838
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {2FD913F6-1D65-4972-AC6C-69F7D2BBFA13} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {4C162509-EABC-463D-B383-678452377450} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {67D28C64-38CA-4B26-A464-21DEE6D6A304} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {9236224F-9CED-490E-AB70-62FFFF49846B} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {C4C881B9-7E38-4D78-8353-054AACA4A03E} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC2FC6EA-40FD-4A15-AEC2-7D86FA971D3F} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC45EB59-5AFF-428A-B188-C3B764401882} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DE252F16-4D9A-4008-B001-3895ACDCC888} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {FD73DCA4-747F-4F78-9352-CE13E883B0AB} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
FireFox:
========
FF ProfilePath: C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF Homepage: C:\ProgramData\Ronzaps\ff.HP
FF NewTab: C:\ProgramData\Ronzaps\ff.NT
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-24] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-24] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF SearchPlugin: C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\DD1B66D4.xml [2016-03-29]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack [not found]
FF Extension: GsearchFinder - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi [2016-03-24]
Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRkqhqJHajANi0B_XuyZ3_pwFz2OOITqPlkx50uriDqJrPXHGbr74xRo4SY32JdYnpQLrkqPG21S0J2R4Z6QSUakfrS
CHR StartupUrls: Default -> "hxxp://www.google.cz/","hxxp://www.mystartsear ... CH8qC38qBE.."
CHR Profile: C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-09]
CHR Extension: (Dokumenty Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-09]
CHR Extension: (Disk Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Adblock Plus) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Tabulky Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-18]
CHR Extension: (Chromium Wheel Smooth Scroller) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\khpcanbeojalbkpgpmjpdkjnkfcgfkhb [2016-01-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-05]
CHR Extension: (Gmail) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-09]
StartMenuInternet: Google Chrome.5X2A3Y3GEIUSIKNCBIPNMMJBGQ - C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-01-01] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-16] (NVIDIA Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-16] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-16] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-07] (Electronic Arts)
R2 Ronzap; C:\ProgramData\\Ronzap\\Ronzap.exe [1069568 2016-03-29] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-29] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-12-16] (NVIDIA Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S2 tsnethlpx64; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TsNetHlpX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-29 20:30 - 2016-03-29 20:31 - 00017401 _____ C:\Users\Miroslav\Desktop\FRST.txt
2016-03-29 20:29 - 2016-03-29 20:29 - 02374144 _____ (Farbar) C:\Users\Miroslav\Desktop\FRST64.exe
2016-03-29 20:23 - 2016-03-29 20:20 - 00112640 _____ (forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
2016-03-29 20:22 - 2016-03-29 20:22 - 00000000 ___SD C:\Uinstall
2016-03-29 20:13 - 2016-03-29 20:13 - 00001389 _____ C:\Users\Miroslav\Desktop\Photoshop – zástupce (2).lnk
2016-03-29 20:10 - 2016-03-29 20:10 - 00003596 _____ C:\Windows\System32\Tasks\{76F719DE-E0AF-4275-B4D0-CE4F197A4567}
2016-03-29 19:43 - 2016-03-29 19:43 - 00003514 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Miroslav-PC-Miroslav
2016-03-29 19:40 - 2016-03-29 20:28 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-29 19:40 - 2016-03-29 20:08 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-29 19:40 - 2016-03-29 19:46 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-29 19:40 - 2016-03-29 19:46 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-29 19:36 - 2016-03-29 19:36 - 00000898 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2016-03-29 19:36 - 2016-03-29 19:36 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-03-29 19:35 - 2016-03-29 19:35 - 00000853 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2016-03-29 19:34 - 2016-03-29 19:34 - 00000827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2016-03-29 19:33 - 2016-03-29 19:33 - 00000947 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-03-29 19:15 - 2016-03-29 19:15 - 01222144 _____ C:\Users\Miroslav\Downloads\RSITx64.exe
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\rsit
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\Program Files\trend micro
2016-03-29 18:49 - 2016-03-29 20:22 - 00000000 ____D C:\Qoobox
2016-03-29 18:49 - 2016-03-29 19:08 - 00000000 ____D C:\Windows\erdnt
2016-03-29 18:49 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-03-29 18:49 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-03-29 18:49 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-03-29 18:48 - 2016-03-29 18:48 - 05658151 ____R (Swearware) C:\Users\Miroslav\Downloads\Uinstall.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 01309184 _____ C:\Users\Miroslav\Downloads\zoek.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 00000000 ____D C:\zoek_backup
2016-03-29 18:38 - 2016-03-29 19:26 - 00000000 ____D C:\ProgramData\BOINC
2016-03-29 18:37 - 2016-03-29 20:28 - 00000000 ____D C:\ProgramData\Ronzap
2016-03-29 18:37 - 2016-03-29 18:38 - 00000000 ____D C:\ProgramData\Ronzaps
2016-03-29 18:37 - 2016-03-29 18:37 - 06504960 _____ C:\Users\Miroslav\AppData\Roaming\agent.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 01626416 _____ C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\noah.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00072699 _____ C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00065424 _____ C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 00054272 _____ C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00018432 _____ C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00005568 _____ C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 00166534 _____ C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 00127488 _____ C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:36 - 2016-03-29 18:36 - 00016992 _____ C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:25 - 2016-03-29 18:39 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\tab
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\hover
2016-03-29 18:21 - 2016-03-29 18:21 - 00005120 _____ C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\Users\Public\Thunder Network
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\ProgramData\Thunder Network
2016-03-29 18:17 - 2016-03-29 18:26 - 00000000 ____D C:\Users\Miroslav\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-03-29 18:17 - 2016-03-29 18:17 - 02803251 _____ C:\Windows\chromebrowser.exe
2016-03-29 18:17 - 2016-03-29 18:17 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-03-29 17:31 - 2016-03-29 18:16 - 00000000 ____D C:\Users\Miroslav\Downloads\Adobe Photoshop CS6 13.0.1 Final Multilanguage (cracked dll)
2016-03-28 23:32 - 2016-03-29 09:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Google
2016-03-28 23:24 - 2016-03-29 19:41 - 00000000 ____D C:\ProgramData\Google
2016-03-28 23:24 - 2016-03-28 23:24 - 00000000 ____D C:\Program Files\Google
2016-03-28 23:15 - 2016-03-28 23:22 - 450071920 _____ C:\Users\Miroslav\Downloads\nikcollection-full-1.2.11.exe
2016-03-28 23:12 - 2016-03-28 23:46 - 00000000 ____D C:\Users\Miroslav\Downloads\[ www.torrenting.com ] - Marvels.Daredevil.S02E05.WEBRip.x264-NF69
2016-03-28 12:37 - 2016-03-28 12:38 - 00360896 _____ C:\Users\Miroslav\Downloads\Major_Lazer_-_Be_Together_(feat._Wild_Belle)_(Vanic_Remix).mp3.sfk
2016-03-28 10:04 - 2016-03-28 10:25 - 388792825 _____ C:\Users\Miroslav\Downloads\ENTPACKEN!!!UNZIP!!!!.zip
2016-03-28 06:28 - 2016-03-28 06:29 - 55705599 _____ C:\Users\Miroslav\Downloads\JohnDeere7930_Final_BITTE_ENTPACKEN.zip
2016-03-27 23:21 - 2016-03-27 23:21 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik (1).zip
2016-03-27 22:58 - 2016-03-27 23:11 - 332715399 _____ C:\Users\Miroslav\Downloads\Asshole Fever - Veronica Morre - Veronicas Anal in Lacy Fishnets_540p.mp4
2016-03-27 22:57 - 2016-03-28 23:54 - 413627686 _____ C:\Users\Miroslav\Downloads\AssHole Fever - Amirah Adara - Scoring a Deuce.mp4
2016-03-27 22:57 - 2016-03-27 23:18 - 204761420 _____ C:\Users\Miroslav\Downloads\ahf_minnie_manga.mp4
2016-03-27 11:14 - 2016-03-27 11:15 - 00000000 ____D C:\Users\Miroslav\Downloads\Limitless.S01E19.HDTV.x264-LOL[ettv]
2016-03-27 11:13 - 2016-03-27 11:13 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik.zip
2016-03-26 21:48 - 2016-03-26 22:39 - 901975014 _____ C:\Users\Miroslav\Downloads\Fuck-you-pane-učiteli-2-CZ.avi
2016-03-25 20:37 - 2016-03-25 20:37 - 01409455 _____ C:\Users\Miroslav\Downloads\Grass-Textur.zip
2016-03-24 21:32 - 2016-03-24 21:32 - 00000000 ____D C:\Users\Miroslav\Documents\Adobe
2016-03-24 19:46 - 2016-03-24 19:58 - 00202240 _____ C:\Users\Miroslav\Downloads\Pendulum do videa.mp3.sfk
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\Program Files (x86)\Windows Phone
2016-03-24 14:07 - 2016-03-24 14:07 - 00000000 ____D C:\ProgramData\Applications
2016-03-24 13:21 - 2016-03-28 12:33 - 00000000 ____D C:\Users\Miroslav\Desktop\Hudba
2016-03-24 09:44 - 2016-03-24 09:44 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Apple Computer
2016-03-24 01:22 - 2016-03-24 01:22 - 00045695 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E04.WEBRip.x264-NF69.srt
2016-03-23 19:53 - 2016-03-23 20:08 - 00223344 _____ C:\Users\Miroslav\Downloads\Dustsucker (Royalty Free Music) [CC - BY].mp3.sfk
2016-03-23 19:52 - 2016-03-23 19:52 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple Computer
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-03-23 19:51 - 2016-03-23 19:51 - 00000000 ____D C:\Users\Miroslav\AppData\LocalLow\Apple Computer
2016-03-22 20:09 - 2016-03-22 20:10 - 16503296 _____ C:\Users\Miroslav\Desktop\Test Fabka.avi
2016-03-22 20:02 - 2016-03-22 20:06 - 2799419806 _____ C:\Users\Miroslav\Desktop\loseless.avi
2016-03-22 19:46 - 2016-03-22 19:49 - 00000000 ____D C:\Program Files (x86)\MBL
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic Bullet Looks
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\Program Files (x86)\LooksBuilder
2016-03-22 19:46 - 2004-03-29 16:23 - 00090112 _____ (MindVision Software) C:\Windows\unvise32.exe
2016-03-22 16:33 - 2016-03-22 16:33 - 00110616 _____ C:\Users\Miroslav\Downloads\daredevil-subtitles-cz-2.zip
2016-03-22 08:03 - 2016-03-22 08:03 - 00038781 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E03.WEBRip.x264-SKGTV.srt
2016-03-21 14:08 - 2016-03-21 14:08 - 29261108 _____ C:\Users\Miroslav\Downloads\Entpacken_Fliegl_Trailer_Set_2.rar
2016-03-20 13:09 - 2014-06-03 05:16 - 00000285 _____ C:\Users\Miroslav\Desktop\shadows_pixel.fx
2016-03-20 00:29 - 2016-03-20 00:29 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET (1).srt
2016-03-19 23:39 - 2016-03-19 23:39 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET.srt
2016-03-19 11:59 - 2016-03-19 11:59 - 00052075 _____ C:\Users\Miroslav\Downloads\Limitless-S01E17(0000268389).srt
2016-03-16 21:09 - 2016-03-16 21:09 - 00148453 _____ C:\Users\Miroslav\Downloads\Citizenfour(0000257743) (1).srt
2016-03-16 00:40 - 2016-03-21 15:10 - 00000000 ____D C:\Users\Miroslav\Documents\GTA San Andreas User Files
2016-03-16 00:40 - 2016-03-16 00:40 - 00000786 _____ C:\Users\Public\Desktop\MTA San Andreas 1.5.lnk
2016-03-16 00:40 - 2016-03-16 00:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.5
2016-03-16 00:39 - 2016-03-16 00:41 - 00000000 ____D C:\ProgramData\MTA San Andreas All
2016-03-16 00:31 - 2016-03-16 00:31 - 00000637 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk
2016-03-16 00:31 - 2016-03-16 00:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2016-03-13 21:13 - 2016-03-24 19:58 - 00785872 _____ C:\Users\Miroslav\Downloads\Pendulum_-_The_Island.mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00401800 _____ C:\Users\Miroslav\Downloads\American Authors - Best Day Of My Life (Just A Gent Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00291560 _____ C:\Users\Miroslav\Downloads\Milky_Chance_-_Stolen_Dance_(Embody_Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00257392 _____ C:\Users\Miroslav\Downloads\Avenir_-_Louane_(Best_Remix_right_now)_-Djadler_Musics.mp3.sfk
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\x264vfw
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\Program Files (x86)\x264vfw
2016-03-09 16:27 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-09 16:27 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 16:27 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-09 16:27 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-09 16:27 - 2016-02-09 08:53 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 16:27 - 2016-02-09 08:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-09 16:27 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 16:27 - 2016-02-08 22:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 16:27 - 2016-02-08 22:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-03-09 16:27 - 2016-02-08 22:38 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-09 16:27 - 2016-02-08 22:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 22:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-03-09 16:27 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 16:27 - 2016-02-08 22:32 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 22:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-03-09 16:27 - 2016-02-08 22:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 22:20 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 22:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 22:15 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-03-09 16:27 - 2016-02-08 22:13 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-09 16:27 - 2016-02-08 22:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 22:11 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-09 16:27 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 22:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 16:27 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 16:27 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 16:27 - 2016-02-08 20:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 20:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 20:19 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 20:18 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-03-09 16:27 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 16:27 - 2016-02-08 20:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-09 16:27 - 2016-02-08 20:14 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 20:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-03-09 16:27 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 16:27 - 2016-02-08 20:13 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 20:06 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-09 16:27 - 2016-02-08 20:03 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 19:55 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 19:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-09 16:27 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 19:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 19:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-09 16:27 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 16:27 - 2016-02-08 19:35 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 16:27 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 19:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 16:27 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 16:27 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 16:27 - 2016-02-04 19:52 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 16:27 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 16:27 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 16:27 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:26 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 16:26 - 2016-02-08 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-09 16:26 - 2016-02-08 20:26 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-03-09 16:26 - 2016-02-08 19:52 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-09 16:24 - 2016-02-11 20:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:56 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-09 16:24 - 2016-02-11 20:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-09 16:24 - 2016-02-11 20:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-09 16:24 - 2016-02-11 20:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-09 16:23 - 2016-02-19 21:02 - 00038336 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 16:23 - 2016-02-19 20:54 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 16:23 - 2016-02-19 16:07 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:44 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-09 16:23 - 2016-02-11 19:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-09 16:23 - 2016-02-11 19:34 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-09 16:23 - 2016-02-11 19:34 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-09 16:23 - 2016-02-11 19:33 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-09 16:23 - 2016-02-11 19:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 19:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-03-09 16:23 - 2016-02-11 19:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 16:07 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-09 16:23 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 16:23 - 2016-02-09 11:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-09 16:23 - 2016-02-05 20:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-03-09 16:23 - 2016-02-05 19:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 16:23 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 16:23 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-08 18:17 - 2016-03-24 19:04 - 00000000 ____D C:\Users\Miroslav\Desktop\TechAgro vstupenky
2016-03-08 00:39 - 2008-04-07 18:38 - 64142841 _____ C:\Users\Miroslav\Desktop\Stop and Stare.wmv
2016-03-06 12:30 - 2016-03-06 12:30 - 00001030 _____ C:\Users\Public\Desktop\Fotolab Fotosvet.lnk
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-29 20:30 - 2015-07-08 09:33 - 00000000 ____D C:\FRST
2016-03-29 20:28 - 2016-01-08 00:05 - 00003034 _____ C:\Windows\System32\Tasks\MSIAfterburner
2016-03-29 20:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-29 20:27 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-29 20:27 - 2009-07-14 06:45 - 05174288 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-29 20:24 - 2015-05-15 14:00 - 00000000 ____D C:\Users\Miroslav\AppData\Local\ElevatedDiagnostics
2016-03-29 20:13 - 2016-01-01 23:47 - 00000000 ____D C:\Users\Miroslav\AppData\Local\CrashDumps
2016-03-29 20:13 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-29 20:13 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-29 20:08 - 2015-07-15 09:02 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-29 20:08 - 2014-11-05 15:21 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-03-29 19:42 - 2014-09-29 11:55 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Adobe
2016-03-29 19:41 - 2014-09-29 09:36 - 00064800 _____ C:\Users\Miroslav\AppData\Local\GDIPFONTCACHEV1.DAT
2016-03-29 19:40 - 2014-09-29 09:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-29 19:36 - 2015-01-29 11:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-03-29 19:35 - 2015-01-29 11:13 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2016-03-29 19:35 - 2014-09-29 11:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Adobe
2016-03-29 19:33 - 2015-01-29 11:13 - 00001483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-03-29 19:33 - 2014-11-20 19:36 - 00000000 ____D C:\ProgramData\Adobe
2016-03-29 19:32 - 2011-03-04 11:41 - 02300940 _____ C:\Windows\system32\perfh015.dat
2016-03-29 19:32 - 2011-03-04 11:41 - 01653670 _____ C:\Windows\system32\perfc015.dat
2016-03-29 19:32 - 2011-03-04 11:18 - 05229382 _____ C:\Windows\system32\perfh005.dat
2016-03-29 19:32 - 2011-03-04 11:18 - 01682884 _____ C:\Windows\system32\perfc005.dat
2016-03-29 19:32 - 2009-07-14 07:13 - 00006266 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-29 19:28 - 2014-12-03 10:54 - 00000000 ____D C:\Windows\system32\appmgmt
2016-03-29 19:01 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-03-29 18:40 - 2014-11-12 18:08 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-29 18:39 - 2015-07-09 18:26 - 00001199 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-29 18:39 - 2015-07-09 18:26 - 00001191 _____ C:\Users\Miroslav\Desktop\Google Chrome.lnk
2016-03-29 18:39 - 2014-09-26 16:42 - 00000975 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-29 18:38 - 2014-09-29 09:14 - 00000000 ____D C:\Windows\Downloaded Installations
2016-03-29 18:20 - 2014-09-26 16:42 - 00000000 ____D C:\Users\Miroslav\AppData\Local\VirtualStore
2016-03-29 18:16 - 2014-11-09 12:23 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\uTorrent
2016-03-29 07:42 - 2015-09-17 23:24 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job
2016-03-28 23:25 - 2014-09-29 09:37 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Google
2016-03-28 23:23 - 2015-12-25 20:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-24 21:32 - 2015-07-09 17:49 - 349534735 _____ C:\Users\Miroslav\Desktop\Dovolená 2015.wmv
2016-03-24 20:35 - 2016-02-09 08:28 - 00000000 ____D C:\Users\Miroslav\Desktop\FARMWEB
2016-03-24 19:09 - 2016-01-28 19:33 - 00000000 ____D C:\Users\Miroslav\Desktop\Test video
2016-03-24 18:02 - 2014-09-29 11:56 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-24 18:02 - 2014-09-29 11:56 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-24 18:02 - 2014-09-29 11:56 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-24 13:23 - 2014-12-03 10:50 - 00000000 ____D C:\Users\Miroslav\Desktop\Playlist
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-23 22:34 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-03-21 14:21 - 2015-04-07 19:22 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-03-16 00:40 - 2015-02-12 22:41 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-16 00:31 - 2014-09-29 09:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-15 07:41 - 2009-07-14 07:08 - 00032580 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-13 21:13 - 2015-01-28 12:47 - 00010256 _____ C:\Users\Miroslav\Documents\unajz.veg
2016-03-13 18:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-03-13 10:57 - 2015-01-28 12:47 - 00015208 _____ C:\Users\Miroslav\Documents\unajz.veg.bak
2016-03-12 12:09 - 2016-02-21 18:12 - 00013712 _____ C:\Users\Miroslav\Documents\Techagro 2016.veg
2016-03-11 12:00 - 2014-11-06 20:24 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-09 16:38 - 2014-11-05 16:44 - 00000000 ____D C:\Windows\system32\MRT
2016-03-09 16:35 - 2014-12-11 10:15 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-09 16:35 - 2014-11-05 16:44 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-06 14:14 - 2015-01-16 20:50 - 00000000 ____D C:\ProgramData\tmp
==================== Files in the root of some directories =======
2016-03-29 18:37 - 2016-03-29 18:37 - 6504960 _____ () C:\Users\Miroslav\AppData\Roaming\agent.dat
2015-06-18 13:36 - 2015-07-07 23:06 - 0000024 _____ () C:\Users\Miroslav\AppData\Roaming\appdataFr25.bin
2016-03-29 18:37 - 2016-03-29 18:37 - 0054272 _____ () C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0065424 _____ () C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 1626416 _____ () C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:21 - 2016-03-29 18:21 - 0005120 _____ () C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:36 - 2016-03-29 18:36 - 0166534 _____ () C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 0016992 _____ () C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 0127488 _____ () C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0072699 _____ () C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0018432 _____ () C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0005568 _____ () C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\noah.dat
2015-02-12 22:49 - 2015-02-12 22:49 - 0000044 _____ () C:\Users\Miroslav\AppData\Roaming\twow_sysprepdt.dat
2015-11-22 21:25 - 2015-11-22 21:25 - 0032038 _____ () C:\Users\Miroslav\AppData\Local\SquareClock.Production_Home_Siko_WebIcon.ico
2014-09-29 09:18 - 2014-09-29 09:18 - 0000003 _____ () C:\Users\Miroslav\AppData\Local\user_data.ini
2014-11-04 16:22 - 2014-11-04 16:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\Miroslav\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Miroslav\AppData\Local\Temp\sfareca00001.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job => C:\Users\Miroslav\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Miroslav\Desktop" je 21416 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Miroslav (administrator) on MIROSLAV-PC (29-03-2016 20:30:42)
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available Profiles: Miroslav)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\ProgramData\Ronzap\Ronzap.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Windows\DAODx.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7200984 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [ QQPCTray] => "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe" /regrun
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [AdobeBridge] => [X]
AppInit_DLLs: C:\ProgramData\Ronzap\Rankex.dll => C:\ProgramData\Ronzap\Rankex.dll [363520 2016-03-29] ()
AppInit_DLLs-x32: C:\ProgramData\Ronzap\Xxx-find.dll => C:\ProgramData\Ronzap\Xxx-find.dll [257536 2016-03-29] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22A83F5D-89A7-4424-8E9D-7C4188E282D9}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{34F7103D-2C11-4FAA-BD34-9E150A07D54D}: [DhcpNameServer] 10.0.0.138
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130900044436600023&GUID=F7389CC1-0968-4DEC-9BC8-B7E1DC0240E0
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.2345.com/?34838
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {2FD913F6-1D65-4972-AC6C-69F7D2BBFA13} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {4C162509-EABC-463D-B383-678452377450} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {67D28C64-38CA-4B26-A464-21DEE6D6A304} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {9236224F-9CED-490E-AB70-62FFFF49846B} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {C4C881B9-7E38-4D78-8353-054AACA4A03E} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC2FC6EA-40FD-4A15-AEC2-7D86FA971D3F} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC45EB59-5AFF-428A-B188-C3B764401882} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DE252F16-4D9A-4008-B001-3895ACDCC888} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {FD73DCA4-747F-4F78-9352-CE13E883B0AB} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
FireFox:
========
FF ProfilePath: C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF Homepage: C:\ProgramData\Ronzaps\ff.HP
FF NewTab: C:\ProgramData\Ronzaps\ff.NT
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-24] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-24] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF SearchPlugin: C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\DD1B66D4.xml [2016-03-29]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack [not found]
FF Extension: GsearchFinder - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi [2016-03-24]
Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRkqhqJHajANi0B_XuyZ3_pwFz2OOITqPlkx50uriDqJrPXHGbr74xRo4SY32JdYnpQLrkqPG21S0J2R4Z6QSUakfrS
CHR StartupUrls: Default -> "hxxp://www.google.cz/","hxxp://www.mystartsear ... CH8qC38qBE.."
CHR Profile: C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-09]
CHR Extension: (Dokumenty Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-09]
CHR Extension: (Disk Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Adblock Plus) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Tabulky Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-18]
CHR Extension: (Chromium Wheel Smooth Scroller) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\khpcanbeojalbkpgpmjpdkjnkfcgfkhb [2016-01-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-05]
CHR Extension: (Gmail) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-09]
StartMenuInternet: Google Chrome.5X2A3Y3GEIUSIKNCBIPNMMJBGQ - C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-01-01] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-16] (NVIDIA Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-16] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-16] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-07] (Electronic Arts)
R2 Ronzap; C:\ProgramData\\Ronzap\\Ronzap.exe [1069568 2016-03-29] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-29] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-12-16] (NVIDIA Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S2 tsnethlpx64; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TsNetHlpX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-29 20:30 - 2016-03-29 20:31 - 00017401 _____ C:\Users\Miroslav\Desktop\FRST.txt
2016-03-29 20:29 - 2016-03-29 20:29 - 02374144 _____ (Farbar) C:\Users\Miroslav\Desktop\FRST64.exe
2016-03-29 20:23 - 2016-03-29 20:20 - 00112640 _____ (forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
2016-03-29 20:22 - 2016-03-29 20:22 - 00000000 ___SD C:\Uinstall
2016-03-29 20:13 - 2016-03-29 20:13 - 00001389 _____ C:\Users\Miroslav\Desktop\Photoshop – zástupce (2).lnk
2016-03-29 20:10 - 2016-03-29 20:10 - 00003596 _____ C:\Windows\System32\Tasks\{76F719DE-E0AF-4275-B4D0-CE4F197A4567}
2016-03-29 19:43 - 2016-03-29 19:43 - 00003514 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Miroslav-PC-Miroslav
2016-03-29 19:40 - 2016-03-29 20:28 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-29 19:40 - 2016-03-29 20:08 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-29 19:40 - 2016-03-29 19:46 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-29 19:40 - 2016-03-29 19:46 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-29 19:36 - 2016-03-29 19:36 - 00000898 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2016-03-29 19:36 - 2016-03-29 19:36 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-03-29 19:35 - 2016-03-29 19:35 - 00000853 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2016-03-29 19:34 - 2016-03-29 19:34 - 00000827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2016-03-29 19:33 - 2016-03-29 19:33 - 00000947 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-03-29 19:15 - 2016-03-29 19:15 - 01222144 _____ C:\Users\Miroslav\Downloads\RSITx64.exe
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\rsit
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\Program Files\trend micro
2016-03-29 18:49 - 2016-03-29 20:22 - 00000000 ____D C:\Qoobox
2016-03-29 18:49 - 2016-03-29 19:08 - 00000000 ____D C:\Windows\erdnt
2016-03-29 18:49 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-03-29 18:49 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-03-29 18:49 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-03-29 18:48 - 2016-03-29 18:48 - 05658151 ____R (Swearware) C:\Users\Miroslav\Downloads\Uinstall.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 01309184 _____ C:\Users\Miroslav\Downloads\zoek.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 00000000 ____D C:\zoek_backup
2016-03-29 18:38 - 2016-03-29 19:26 - 00000000 ____D C:\ProgramData\BOINC
2016-03-29 18:37 - 2016-03-29 20:28 - 00000000 ____D C:\ProgramData\Ronzap
2016-03-29 18:37 - 2016-03-29 18:38 - 00000000 ____D C:\ProgramData\Ronzaps
2016-03-29 18:37 - 2016-03-29 18:37 - 06504960 _____ C:\Users\Miroslav\AppData\Roaming\agent.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 01626416 _____ C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\noah.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00072699 _____ C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00065424 _____ C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 00054272 _____ C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00018432 _____ C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00005568 _____ C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 00166534 _____ C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 00127488 _____ C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:36 - 2016-03-29 18:36 - 00016992 _____ C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:25 - 2016-03-29 18:39 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\tab
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\hover
2016-03-29 18:21 - 2016-03-29 18:21 - 00005120 _____ C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\Users\Public\Thunder Network
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\ProgramData\Thunder Network
2016-03-29 18:17 - 2016-03-29 18:26 - 00000000 ____D C:\Users\Miroslav\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-03-29 18:17 - 2016-03-29 18:17 - 02803251 _____ C:\Windows\chromebrowser.exe
2016-03-29 18:17 - 2016-03-29 18:17 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-03-29 17:31 - 2016-03-29 18:16 - 00000000 ____D C:\Users\Miroslav\Downloads\Adobe Photoshop CS6 13.0.1 Final Multilanguage (cracked dll)
2016-03-28 23:32 - 2016-03-29 09:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Google
2016-03-28 23:24 - 2016-03-29 19:41 - 00000000 ____D C:\ProgramData\Google
2016-03-28 23:24 - 2016-03-28 23:24 - 00000000 ____D C:\Program Files\Google
2016-03-28 23:15 - 2016-03-28 23:22 - 450071920 _____ C:\Users\Miroslav\Downloads\nikcollection-full-1.2.11.exe
2016-03-28 23:12 - 2016-03-28 23:46 - 00000000 ____D C:\Users\Miroslav\Downloads\[ www.torrenting.com ] - Marvels.Daredevil.S02E05.WEBRip.x264-NF69
2016-03-28 12:37 - 2016-03-28 12:38 - 00360896 _____ C:\Users\Miroslav\Downloads\Major_Lazer_-_Be_Together_(feat._Wild_Belle)_(Vanic_Remix).mp3.sfk
2016-03-28 10:04 - 2016-03-28 10:25 - 388792825 _____ C:\Users\Miroslav\Downloads\ENTPACKEN!!!UNZIP!!!!.zip
2016-03-28 06:28 - 2016-03-28 06:29 - 55705599 _____ C:\Users\Miroslav\Downloads\JohnDeere7930_Final_BITTE_ENTPACKEN.zip
2016-03-27 23:21 - 2016-03-27 23:21 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik (1).zip
2016-03-27 22:58 - 2016-03-27 23:11 - 332715399 _____ C:\Users\Miroslav\Downloads\Asshole Fever - Veronica Morre - Veronicas Anal in Lacy Fishnets_540p.mp4
2016-03-27 22:57 - 2016-03-28 23:54 - 413627686 _____ C:\Users\Miroslav\Downloads\AssHole Fever - Amirah Adara - Scoring a Deuce.mp4
2016-03-27 22:57 - 2016-03-27 23:18 - 204761420 _____ C:\Users\Miroslav\Downloads\ahf_minnie_manga.mp4
2016-03-27 11:14 - 2016-03-27 11:15 - 00000000 ____D C:\Users\Miroslav\Downloads\Limitless.S01E19.HDTV.x264-LOL[ettv]
2016-03-27 11:13 - 2016-03-27 11:13 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik.zip
2016-03-26 21:48 - 2016-03-26 22:39 - 901975014 _____ C:\Users\Miroslav\Downloads\Fuck-you-pane-učiteli-2-CZ.avi
2016-03-25 20:37 - 2016-03-25 20:37 - 01409455 _____ C:\Users\Miroslav\Downloads\Grass-Textur.zip
2016-03-24 21:32 - 2016-03-24 21:32 - 00000000 ____D C:\Users\Miroslav\Documents\Adobe
2016-03-24 19:46 - 2016-03-24 19:58 - 00202240 _____ C:\Users\Miroslav\Downloads\Pendulum do videa.mp3.sfk
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\Program Files (x86)\Windows Phone
2016-03-24 14:07 - 2016-03-24 14:07 - 00000000 ____D C:\ProgramData\Applications
2016-03-24 13:21 - 2016-03-28 12:33 - 00000000 ____D C:\Users\Miroslav\Desktop\Hudba
2016-03-24 09:44 - 2016-03-24 09:44 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Apple Computer
2016-03-24 01:22 - 2016-03-24 01:22 - 00045695 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E04.WEBRip.x264-NF69.srt
2016-03-23 19:53 - 2016-03-23 20:08 - 00223344 _____ C:\Users\Miroslav\Downloads\Dustsucker (Royalty Free Music) [CC - BY].mp3.sfk
2016-03-23 19:52 - 2016-03-23 19:52 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple Computer
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-03-23 19:51 - 2016-03-23 19:51 - 00000000 ____D C:\Users\Miroslav\AppData\LocalLow\Apple Computer
2016-03-22 20:09 - 2016-03-22 20:10 - 16503296 _____ C:\Users\Miroslav\Desktop\Test Fabka.avi
2016-03-22 20:02 - 2016-03-22 20:06 - 2799419806 _____ C:\Users\Miroslav\Desktop\loseless.avi
2016-03-22 19:46 - 2016-03-22 19:49 - 00000000 ____D C:\Program Files (x86)\MBL
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic Bullet Looks
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\Program Files (x86)\LooksBuilder
2016-03-22 19:46 - 2004-03-29 16:23 - 00090112 _____ (MindVision Software) C:\Windows\unvise32.exe
2016-03-22 16:33 - 2016-03-22 16:33 - 00110616 _____ C:\Users\Miroslav\Downloads\daredevil-subtitles-cz-2.zip
2016-03-22 08:03 - 2016-03-22 08:03 - 00038781 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E03.WEBRip.x264-SKGTV.srt
2016-03-21 14:08 - 2016-03-21 14:08 - 29261108 _____ C:\Users\Miroslav\Downloads\Entpacken_Fliegl_Trailer_Set_2.rar
2016-03-20 13:09 - 2014-06-03 05:16 - 00000285 _____ C:\Users\Miroslav\Desktop\shadows_pixel.fx
2016-03-20 00:29 - 2016-03-20 00:29 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET (1).srt
2016-03-19 23:39 - 2016-03-19 23:39 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET.srt
2016-03-19 11:59 - 2016-03-19 11:59 - 00052075 _____ C:\Users\Miroslav\Downloads\Limitless-S01E17(0000268389).srt
2016-03-16 21:09 - 2016-03-16 21:09 - 00148453 _____ C:\Users\Miroslav\Downloads\Citizenfour(0000257743) (1).srt
2016-03-16 00:40 - 2016-03-21 15:10 - 00000000 ____D C:\Users\Miroslav\Documents\GTA San Andreas User Files
2016-03-16 00:40 - 2016-03-16 00:40 - 00000786 _____ C:\Users\Public\Desktop\MTA San Andreas 1.5.lnk
2016-03-16 00:40 - 2016-03-16 00:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.5
2016-03-16 00:39 - 2016-03-16 00:41 - 00000000 ____D C:\ProgramData\MTA San Andreas All
2016-03-16 00:31 - 2016-03-16 00:31 - 00000637 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk
2016-03-16 00:31 - 2016-03-16 00:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2016-03-13 21:13 - 2016-03-24 19:58 - 00785872 _____ C:\Users\Miroslav\Downloads\Pendulum_-_The_Island.mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00401800 _____ C:\Users\Miroslav\Downloads\American Authors - Best Day Of My Life (Just A Gent Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00291560 _____ C:\Users\Miroslav\Downloads\Milky_Chance_-_Stolen_Dance_(Embody_Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00257392 _____ C:\Users\Miroslav\Downloads\Avenir_-_Louane_(Best_Remix_right_now)_-Djadler_Musics.mp3.sfk
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\x264vfw
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\Program Files (x86)\x264vfw
2016-03-09 16:27 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-09 16:27 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 16:27 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-09 16:27 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-09 16:27 - 2016-02-09 08:53 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 16:27 - 2016-02-09 08:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-09 16:27 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 16:27 - 2016-02-08 22:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 16:27 - 2016-02-08 22:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-03-09 16:27 - 2016-02-08 22:38 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-09 16:27 - 2016-02-08 22:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 22:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-03-09 16:27 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 16:27 - 2016-02-08 22:32 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 22:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-03-09 16:27 - 2016-02-08 22:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 22:20 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 22:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 22:15 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-03-09 16:27 - 2016-02-08 22:13 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-09 16:27 - 2016-02-08 22:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 22:11 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-09 16:27 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 22:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 16:27 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 16:27 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 16:27 - 2016-02-08 20:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 20:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 20:19 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 20:18 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-03-09 16:27 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 16:27 - 2016-02-08 20:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-09 16:27 - 2016-02-08 20:14 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 20:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-03-09 16:27 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 16:27 - 2016-02-08 20:13 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 20:06 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-09 16:27 - 2016-02-08 20:03 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 19:55 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 19:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-09 16:27 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 19:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 19:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-09 16:27 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 16:27 - 2016-02-08 19:35 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 16:27 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 19:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 16:27 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 16:27 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 16:27 - 2016-02-04 19:52 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 16:27 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 16:27 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 16:27 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:26 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 16:26 - 2016-02-08 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-09 16:26 - 2016-02-08 20:26 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-03-09 16:26 - 2016-02-08 19:52 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-09 16:24 - 2016-02-11 20:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:56 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-09 16:24 - 2016-02-11 20:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-09 16:24 - 2016-02-11 20:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-09 16:24 - 2016-02-11 20:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-09 16:23 - 2016-02-19 21:02 - 00038336 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 16:23 - 2016-02-19 20:54 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 16:23 - 2016-02-19 16:07 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:44 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-09 16:23 - 2016-02-11 19:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-09 16:23 - 2016-02-11 19:34 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-09 16:23 - 2016-02-11 19:34 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-09 16:23 - 2016-02-11 19:33 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-09 16:23 - 2016-02-11 19:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 19:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-03-09 16:23 - 2016-02-11 19:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 16:07 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-09 16:23 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 16:23 - 2016-02-09 11:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-09 16:23 - 2016-02-05 20:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-03-09 16:23 - 2016-02-05 19:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 16:23 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 16:23 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2016-03-08 18:17 - 2016-03-24 19:04 - 00000000 ____D C:\Users\Miroslav\Desktop\TechAgro vstupenky
2016-03-08 00:39 - 2008-04-07 18:38 - 64142841 _____ C:\Users\Miroslav\Desktop\Stop and Stare.wmv
2016-03-06 12:30 - 2016-03-06 12:30 - 00001030 _____ C:\Users\Public\Desktop\Fotolab Fotosvet.lnk
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-29 20:30 - 2015-07-08 09:33 - 00000000 ____D C:\FRST
2016-03-29 20:28 - 2016-01-08 00:05 - 00003034 _____ C:\Windows\System32\Tasks\MSIAfterburner
2016-03-29 20:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-29 20:27 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-29 20:27 - 2009-07-14 06:45 - 05174288 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-29 20:24 - 2015-05-15 14:00 - 00000000 ____D C:\Users\Miroslav\AppData\Local\ElevatedDiagnostics
2016-03-29 20:13 - 2016-01-01 23:47 - 00000000 ____D C:\Users\Miroslav\AppData\Local\CrashDumps
2016-03-29 20:13 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-29 20:13 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-29 20:08 - 2015-07-15 09:02 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-29 20:08 - 2014-11-05 15:21 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-03-29 19:42 - 2014-09-29 11:55 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Adobe
2016-03-29 19:41 - 2014-09-29 09:36 - 00064800 _____ C:\Users\Miroslav\AppData\Local\GDIPFONTCACHEV1.DAT
2016-03-29 19:40 - 2014-09-29 09:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-29 19:36 - 2015-01-29 11:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-03-29 19:35 - 2015-01-29 11:13 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2016-03-29 19:35 - 2014-09-29 11:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Adobe
2016-03-29 19:33 - 2015-01-29 11:13 - 00001483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-03-29 19:33 - 2014-11-20 19:36 - 00000000 ____D C:\ProgramData\Adobe
2016-03-29 19:32 - 2011-03-04 11:41 - 02300940 _____ C:\Windows\system32\perfh015.dat
2016-03-29 19:32 - 2011-03-04 11:41 - 01653670 _____ C:\Windows\system32\perfc015.dat
2016-03-29 19:32 - 2011-03-04 11:18 - 05229382 _____ C:\Windows\system32\perfh005.dat
2016-03-29 19:32 - 2011-03-04 11:18 - 01682884 _____ C:\Windows\system32\perfc005.dat
2016-03-29 19:32 - 2009-07-14 07:13 - 00006266 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-29 19:28 - 2014-12-03 10:54 - 00000000 ____D C:\Windows\system32\appmgmt
2016-03-29 19:01 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-03-29 18:40 - 2014-11-12 18:08 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-29 18:39 - 2015-07-09 18:26 - 00001199 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-29 18:39 - 2015-07-09 18:26 - 00001191 _____ C:\Users\Miroslav\Desktop\Google Chrome.lnk
2016-03-29 18:39 - 2014-09-26 16:42 - 00000975 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-29 18:38 - 2014-09-29 09:14 - 00000000 ____D C:\Windows\Downloaded Installations
2016-03-29 18:20 - 2014-09-26 16:42 - 00000000 ____D C:\Users\Miroslav\AppData\Local\VirtualStore
2016-03-29 18:16 - 2014-11-09 12:23 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\uTorrent
2016-03-29 07:42 - 2015-09-17 23:24 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job
2016-03-28 23:25 - 2014-09-29 09:37 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Google
2016-03-28 23:23 - 2015-12-25 20:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-24 21:32 - 2015-07-09 17:49 - 349534735 _____ C:\Users\Miroslav\Desktop\Dovolená 2015.wmv
2016-03-24 20:35 - 2016-02-09 08:28 - 00000000 ____D C:\Users\Miroslav\Desktop\FARMWEB
2016-03-24 19:09 - 2016-01-28 19:33 - 00000000 ____D C:\Users\Miroslav\Desktop\Test video
2016-03-24 18:02 - 2014-09-29 11:56 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-24 18:02 - 2014-09-29 11:56 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-24 18:02 - 2014-09-29 11:56 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-24 13:23 - 2014-12-03 10:50 - 00000000 ____D C:\Users\Miroslav\Desktop\Playlist
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-23 22:34 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-03-21 14:21 - 2015-04-07 19:22 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-03-16 00:40 - 2015-02-12 22:41 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-16 00:31 - 2014-09-29 09:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-15 07:41 - 2009-07-14 07:08 - 00032580 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-13 21:13 - 2015-01-28 12:47 - 00010256 _____ C:\Users\Miroslav\Documents\unajz.veg
2016-03-13 18:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-03-13 10:57 - 2015-01-28 12:47 - 00015208 _____ C:\Users\Miroslav\Documents\unajz.veg.bak
2016-03-12 12:09 - 2016-02-21 18:12 - 00013712 _____ C:\Users\Miroslav\Documents\Techagro 2016.veg
2016-03-11 12:00 - 2014-11-06 20:24 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-09 16:38 - 2014-11-05 16:44 - 00000000 ____D C:\Windows\system32\MRT
2016-03-09 16:35 - 2014-12-11 10:15 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-09 16:35 - 2014-11-05 16:44 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-06 14:14 - 2015-01-16 20:50 - 00000000 ____D C:\ProgramData\tmp
==================== Files in the root of some directories =======
2016-03-29 18:37 - 2016-03-29 18:37 - 6504960 _____ () C:\Users\Miroslav\AppData\Roaming\agent.dat
2015-06-18 13:36 - 2015-07-07 23:06 - 0000024 _____ () C:\Users\Miroslav\AppData\Roaming\appdataFr25.bin
2016-03-29 18:37 - 2016-03-29 18:37 - 0054272 _____ () C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0065424 _____ () C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 1626416 _____ () C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:21 - 2016-03-29 18:21 - 0005120 _____ () C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:36 - 2016-03-29 18:36 - 0166534 _____ () C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 0016992 _____ () C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 0127488 _____ () C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0072699 _____ () C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0018432 _____ () C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0005568 _____ () C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\noah.dat
2015-02-12 22:49 - 2015-02-12 22:49 - 0000044 _____ () C:\Users\Miroslav\AppData\Roaming\twow_sysprepdt.dat
2015-11-22 21:25 - 2015-11-22 21:25 - 0032038 _____ () C:\Users\Miroslav\AppData\Local\SquareClock.Production_Home_Siko_WebIcon.ico
2014-09-29 09:18 - 2014-09-29 09:18 - 0000003 _____ () C:\Users\Miroslav\AppData\Local\user_data.ini
2014-11-04 16:22 - 2014-11-04 16:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\Miroslav\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Miroslav\AppData\Local\Temp\sfareca00001.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job => C:\Users\Miroslav\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Miroslav\Desktop" je 21416 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
-
Rudy
- Site Admin
- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - nechtěné instalace
1. Spusťte tuto utilitu:
2. Z logu:Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
To je příliš mnoho a může to zpomalovat start systému. Vytvořte v C:\Users\Miroslav novou složku a přesuňte do ní všechna data z plochy (kromě zástupců). Na plochu si pak dejte zástupce té složky pro snazší přístup.Velikost slozky "C:\Users\Miroslav\Desktop" je 21416 MB.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - nechtěné instalace
ADW cleaner log:
# AdwCleaner v5.107 - Log soubor vytvořen 30/03/2016 o 06:50:12
# Aktualizováno 28/03/2016 by Xplode
# Databáze : 2016-03-30.1 [Server]
# Operační systém : Windows 7 Professional Service Pack 1 (x64)
# Jméno uživatele : Miroslav - MIROSLAV-PC
# Spuštěno z : C:\Users\Miroslav\Downloads\adwcleaner_5.107.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum
***** [ Služby ] *****
***** [ Složky ] *****
***** [ Soubory ] *****
[-] Soubor Smazáno : C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\dd1b66d4.xml
***** [ DLLs ] *****
***** [ Zástupci ] *****
***** [ Naplánované úkoly ] *****
***** [ Registr ] *****
[-] Klávesa Smazáno : HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Classes\dream.capture
[-] Klávesa Smazáno : HKLM\SOFTWARE\Classes\dream.capture.1
[-] Klávesa Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1a995f25-7eb8-42c0-b6a9-02f653698ce2}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c861bb60-dfcc-4b08-aecd-f8622442368c}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[-] Klávesa Smazáno : HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Internet Speed Checker
[-] Data Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
***** [ Webové prohlížeče ] *****
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : feed.sonic-search.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : yessearches
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : yessearches.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : mystartsearch.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : speedbit.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : mystartsearch
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : mysearch.avg.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : dscaler.en.softonic.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : feed.sonic-search.com_
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Smazáno : hxxp://www.mystartsearch.com/?type=hp&ts=14158 ... XXZ1DD4FSL
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Smazáno : hxxp://www.yessearches.com/?mode=nnnb&ptid=wak ... CH8qC38qBE..
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Smazáno : hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRkqhqJHajANi0B_XuyZ3_pwFz2OOITqPlkx50uriDqJrPXHGbr74xRo4SY32JdYnpQLrkqPG21S0J2R4Z6QSUakfrS
*************************
:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [3843 bytes] - [30/03/2016 06:50:12]
C:\AdwCleaner\AdwCleaner[R0].txt - [17286 bytes] - [12/11/2014 19:33:16]
C:\AdwCleaner\AdwCleaner[R10].txt - [5995 bytes] - [09/07/2015 13:59:34]
C:\AdwCleaner\AdwCleaner[R1].txt - [2069 bytes] - [12/11/2014 19:45:29]
C:\AdwCleaner\AdwCleaner[R2].txt - [1757 bytes] - [16/11/2014 15:46:31]
C:\AdwCleaner\AdwCleaner[R3].txt - [3589 bytes] - [17/12/2014 14:30:34]
C:\AdwCleaner\AdwCleaner[R4].txt - [3586 bytes] - [20/04/2015 11:48:48]
C:\AdwCleaner\AdwCleaner[R5].txt - [3644 bytes] - [20/04/2015 11:50:22]
C:\AdwCleaner\AdwCleaner[R6].txt - [3138 bytes] - [15/05/2015 13:37:37]
C:\AdwCleaner\AdwCleaner[R7].txt - [9985 bytes] - [18/06/2015 13:55:05]
C:\AdwCleaner\AdwCleaner[R8].txt - [3400 bytes] - [26/06/2015 19:11:41]
C:\AdwCleaner\AdwCleaner[R9].txt - [5935 bytes] - [09/07/2015 08:28:07]
C:\AdwCleaner\AdwCleaner[S0].txt - [15553 bytes] - [12/11/2014 19:36:58]
C:\AdwCleaner\AdwCleaner[S1].txt - [7363 bytes] - [12/11/2014 19:46:26]
C:\AdwCleaner\AdwCleaner[S2].txt - [1689 bytes] - [16/11/2014 15:49:34]
C:\AdwCleaner\AdwCleaner[S3].txt - [3686 bytes] - [17/12/2014 14:31:32]
C:\AdwCleaner\AdwCleaner[S4].txt - [3688 bytes] - [20/04/2015 11:50:58]
C:\AdwCleaner\AdwCleaner[S5].txt - [3190 bytes] - [15/05/2015 13:39:16]
C:\AdwCleaner\AdwCleaner[S6].txt - [5576 bytes] - [18/06/2015 13:55:40]
C:\AdwCleaner\AdwCleaner[S7].txt - [3447 bytes] - [26/06/2015 19:12:29]
C:\AdwCleaner\AdwCleaner[S8].txt - [6021 bytes] - [09/07/2015 14:02:02]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [5379 bytes] ##########
Za tip s plochou děkuji, určitě to uklidím
# AdwCleaner v5.107 - Log soubor vytvořen 30/03/2016 o 06:50:12
# Aktualizováno 28/03/2016 by Xplode
# Databáze : 2016-03-30.1 [Server]
# Operační systém : Windows 7 Professional Service Pack 1 (x64)
# Jméno uživatele : Miroslav - MIROSLAV-PC
# Spuštěno z : C:\Users\Miroslav\Downloads\adwcleaner_5.107.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum
***** [ Služby ] *****
***** [ Složky ] *****
***** [ Soubory ] *****
[-] Soubor Smazáno : C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\dd1b66d4.xml
***** [ DLLs ] *****
***** [ Zástupci ] *****
***** [ Naplánované úkoly ] *****
***** [ Registr ] *****
[-] Klávesa Smazáno : HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Classes\dream.capture
[-] Klávesa Smazáno : HKLM\SOFTWARE\Classes\dream.capture.1
[-] Klávesa Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1a995f25-7eb8-42c0-b6a9-02f653698ce2}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c861bb60-dfcc-4b08-aecd-f8622442368c}
[-] Klávesa Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[-] Klávesa Smazáno : HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Internet Speed Checker
[-] Data Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
***** [ Webové prohlížeče ] *****
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : feed.sonic-search.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : yessearches
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : yessearches.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : mystartsearch.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : speedbit.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : mystartsearch
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : mysearch.avg.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : dscaler.en.softonic.com
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Smazáno : feed.sonic-search.com_
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Smazáno : hxxp://www.mystartsearch.com/?type=hp&ts=14158 ... XXZ1DD4FSL
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Smazáno : hxxp://www.yessearches.com/?mode=nnnb&ptid=wak ... CH8qC38qBE..
[-] [C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Smazáno : hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRkqhqJHajANi0B_XuyZ3_pwFz2OOITqPlkx50uriDqJrPXHGbr74xRo4SY32JdYnpQLrkqPG21S0J2R4Z6QSUakfrS
*************************
:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [3843 bytes] - [30/03/2016 06:50:12]
C:\AdwCleaner\AdwCleaner[R0].txt - [17286 bytes] - [12/11/2014 19:33:16]
C:\AdwCleaner\AdwCleaner[R10].txt - [5995 bytes] - [09/07/2015 13:59:34]
C:\AdwCleaner\AdwCleaner[R1].txt - [2069 bytes] - [12/11/2014 19:45:29]
C:\AdwCleaner\AdwCleaner[R2].txt - [1757 bytes] - [16/11/2014 15:46:31]
C:\AdwCleaner\AdwCleaner[R3].txt - [3589 bytes] - [17/12/2014 14:30:34]
C:\AdwCleaner\AdwCleaner[R4].txt - [3586 bytes] - [20/04/2015 11:48:48]
C:\AdwCleaner\AdwCleaner[R5].txt - [3644 bytes] - [20/04/2015 11:50:22]
C:\AdwCleaner\AdwCleaner[R6].txt - [3138 bytes] - [15/05/2015 13:37:37]
C:\AdwCleaner\AdwCleaner[R7].txt - [9985 bytes] - [18/06/2015 13:55:05]
C:\AdwCleaner\AdwCleaner[R8].txt - [3400 bytes] - [26/06/2015 19:11:41]
C:\AdwCleaner\AdwCleaner[R9].txt - [5935 bytes] - [09/07/2015 08:28:07]
C:\AdwCleaner\AdwCleaner[S0].txt - [15553 bytes] - [12/11/2014 19:36:58]
C:\AdwCleaner\AdwCleaner[S1].txt - [7363 bytes] - [12/11/2014 19:46:26]
C:\AdwCleaner\AdwCleaner[S2].txt - [1689 bytes] - [16/11/2014 15:49:34]
C:\AdwCleaner\AdwCleaner[S3].txt - [3686 bytes] - [17/12/2014 14:31:32]
C:\AdwCleaner\AdwCleaner[S4].txt - [3688 bytes] - [20/04/2015 11:50:58]
C:\AdwCleaner\AdwCleaner[S5].txt - [3190 bytes] - [15/05/2015 13:39:16]
C:\AdwCleaner\AdwCleaner[S6].txt - [5576 bytes] - [18/06/2015 13:55:40]
C:\AdwCleaner\AdwCleaner[S7].txt - [3447 bytes] - [26/06/2015 19:12:29]
C:\AdwCleaner\AdwCleaner[S8].txt - [6021 bytes] - [09/07/2015 14:02:02]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [5379 bytes] ##########
Za tip s plochou děkuji, určitě to uklidím
-
Rudy
- Site Admin
- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - nechtěné instalace
Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - nechtěné instalace
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Miroslav (administrator) on MIROSLAV-PC (31-03-2016 17:29:57)
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available Profiles: Miroslav)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Windows\DAODx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\ProgramData\Ronzap\Ronzap.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7200984 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [ QQPCTray] => "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe" /regrun
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [AdobeBridge] => [X]
AppInit_DLLs: C:\ProgramData\Ronzap\Rankex.dll => C:\ProgramData\Ronzap\Rankex.dll [363520 2016-03-29] ()
AppInit_DLLs-x32: C:\ProgramData\Ronzap\Xxx-find.dll => C:\ProgramData\Ronzap\Xxx-find.dll [257536 2016-03-29] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22A83F5D-89A7-4424-8E9D-7C4188E282D9}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{34F7103D-2C11-4FAA-BD34-9E150A07D54D}: [DhcpNameServer] 10.0.0.138
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130900044436600023&GUID=F7389CC1-0968-4DEC-9BC8-B7E1DC0240E0
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {2FD913F6-1D65-4972-AC6C-69F7D2BBFA13} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {4C162509-EABC-463D-B383-678452377450} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {67D28C64-38CA-4B26-A464-21DEE6D6A304} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {9236224F-9CED-490E-AB70-62FFFF49846B} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {C4C881B9-7E38-4D78-8353-054AACA4A03E} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC2FC6EA-40FD-4A15-AEC2-7D86FA971D3F} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC45EB59-5AFF-428A-B188-C3B764401882} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DE252F16-4D9A-4008-B001-3895ACDCC888} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {FD73DCA4-747F-4F78-9352-CE13E883B0AB} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
FireFox:
========
FF ProfilePath: C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF Homepage: C:\ProgramData\Ronzaps\ff.HP
FF NewTab: C:\ProgramData\Ronzaps\ff.NT
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-24] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-24] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack [not found]
FF Extension: GsearchFinder - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi [2016-03-24]
Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRkqhqJHajANi0B_XuyZ3_pwFz2OOITqPlkx50uriDqJrPXHGbr74xRo4SY32JdYnpQLrkqPG21S0J2R4Z6QSUakfrS
CHR StartupUrls: Default -> "hxxp://www.google.cz/","hxxp://www.mystartsear ... CH8qC38qBE.."
CHR DefaultSearchURL: Default -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRoRrfI9RhWNPDR_YrIH50CpKp0dfCNXSzuciyWqBzxgmjqjetAMYhzU03637MvjiwUMs3-Oycr4sMgOtRnLPGNOIcI&q={searchTerms}
CHR DefaultSearchKeyword: Default -> feed.sonic-search.com
CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
CHR Profile: C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-09]
CHR Extension: (Dokumenty Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-09]
CHR Extension: (Disk Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Adblock Plus) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Tabulky Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-18]
CHR Extension: (Chromium Wheel Smooth Scroller) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\khpcanbeojalbkpgpmjpdkjnkfcgfkhb [2016-01-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-05]
CHR Extension: (Gmail) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-09]
StartMenuInternet: Google Chrome.5X2A3Y3GEIUSIKNCBIPNMMJBGQ - C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-01-01] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-16] (NVIDIA Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-16] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-16] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-07] (Electronic Arts)
R2 Ronzap; C:\ProgramData\\Ronzap\\Ronzap.exe [1069568 2016-03-29] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-29] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-12-16] (NVIDIA Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S2 tsnethlpx64; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TsNetHlpX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-31 17:29 - 2016-03-31 17:30 - 00018164 _____ C:\Users\Miroslav\Desktop\FRST.txt
2016-03-31 17:27 - 2016-03-29 20:29 - 02374144 _____ (Farbar) C:\Users\Miroslav\Desktop\FRST64.exe
2016-03-31 17:27 - 2016-03-29 20:20 - 00112640 _____ (forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
2016-03-31 14:33 - 2016-03-31 14:33 - 00000038 _____ C:\Users\Miroslav\Desktop\Techagro 2016.avi.sfl
2016-03-31 13:15 - 2016-03-31 13:15 - 00000000 ____D C:\Users\Miroslav\Downloads\FuckOrFired.E06.Jenny.XXX.1080p.MP4-KTR
2016-03-31 07:09 - 2016-03-31 07:09 - 00000000 ____D C:\Users\Miroslav\Downloads\FuckOrFired.E22.Julia.XXX.1080p.MP4-KTR
2016-03-31 07:09 - 2016-03-31 07:09 - 00000000 ____D C:\Users\Miroslav\Downloads\FuckOrFired.E03.Victoria.XXX.1080p.MP4-KTR
2016-03-30 19:09 - 2016-03-31 14:33 - 10480640 _____ C:\Users\Miroslav\Desktop\Techagro 2016.avi
2016-03-30 19:04 - 2016-03-31 14:31 - 827377816 _____ C:\Users\Miroslav\Documents\Mion LOGO.avi
2016-03-30 18:56 - 2016-03-30 18:56 - 00000000 ____D C:\Users\Miroslav\Documents\Particles
2016-03-30 18:50 - 2016-03-30 18:55 - 160081834 _____ C:\Users\Miroslav\Downloads\Particles_HD.zip
2016-03-30 18:23 - 2016-03-30 18:23 - 00032911 _____ C:\Users\Miroslav\Downloads\bignoodle_titling.zip
2016-03-30 18:20 - 2016-03-31 14:20 - 00000132 _____ C:\Users\Miroslav\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2016-03-30 18:17 - 2016-03-30 18:17 - 00053034 _____ C:\Users\Miroslav\Downloads\batman_forever.zip
2016-03-30 17:59 - 2016-03-30 18:40 - 722535882 _____ C:\Users\Miroslav\Downloads\Batman-Bad-Blood.2016.720p.BRRip.x264.AAC+CZ-tit.v-obraze-Super-Doga-Animovaný.avi
2016-03-30 07:17 - 2016-03-30 07:17 - 00000643 _____ C:\Users\Miroslav\Desktop\Plocha – zástupce.lnk
2016-03-30 06:56 - 2016-03-30 06:56 - 00036903 _____ C:\Users\Miroslav\Downloads\Gotham.S02E16.720p.HDTV.X264-DIMENSION (+LOL+FUM).srt
2016-03-30 06:48 - 2016-03-30 06:48 - 03102208 _____ C:\Users\Miroslav\Downloads\adwcleaner_5.107.exe
2016-03-29 20:22 - 2016-03-29 20:22 - 00000000 ___SD C:\Uinstall
2016-03-29 20:13 - 2016-03-29 20:13 - 00001389 _____ C:\Users\Miroslav\Desktop\Photoshop – zástupce (2).lnk
2016-03-29 20:10 - 2016-03-29 20:10 - 00003596 _____ C:\Windows\System32\Tasks\{76F719DE-E0AF-4275-B4D0-CE4F197A4567}
2016-03-29 19:43 - 2016-03-29 19:43 - 00003514 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Miroslav-PC-Miroslav
2016-03-29 19:40 - 2016-03-31 17:24 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-29 19:40 - 2016-03-31 14:51 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-29 19:40 - 2016-03-29 19:46 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-29 19:40 - 2016-03-29 19:46 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-29 19:36 - 2016-03-29 19:36 - 00000898 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2016-03-29 19:36 - 2016-03-29 19:36 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-03-29 19:35 - 2016-03-29 19:35 - 00000853 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2016-03-29 19:34 - 2016-03-29 19:34 - 00000827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2016-03-29 19:33 - 2016-03-29 19:33 - 00000947 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-03-29 19:15 - 2016-03-29 19:15 - 01222144 _____ C:\Users\Miroslav\Downloads\RSITx64.exe
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\rsit
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\Program Files\trend micro
2016-03-29 18:49 - 2016-03-29 20:22 - 00000000 ____D C:\Qoobox
2016-03-29 18:49 - 2016-03-29 19:08 - 00000000 ____D C:\Windows\erdnt
2016-03-29 18:49 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-03-29 18:49 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-03-29 18:49 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-03-29 18:48 - 2016-03-29 18:48 - 05658151 ____R (Swearware) C:\Users\Miroslav\Downloads\Uinstall.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 01309184 _____ C:\Users\Miroslav\Downloads\zoek.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 00000000 ____D C:\zoek_backup
2016-03-29 18:38 - 2016-03-29 19:26 - 00000000 ____D C:\ProgramData\BOINC
2016-03-29 18:37 - 2016-03-31 17:25 - 00000000 ____D C:\ProgramData\Ronzap
2016-03-29 18:37 - 2016-03-29 18:38 - 00000000 ____D C:\ProgramData\Ronzaps
2016-03-29 18:37 - 2016-03-29 18:37 - 06504960 _____ C:\Users\Miroslav\AppData\Roaming\agent.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 01626416 _____ C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\noah.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00072699 _____ C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00065424 _____ C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 00054272 _____ C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00018432 _____ C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00005568 _____ C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 00166534 _____ C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 00127488 _____ C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:36 - 2016-03-29 18:36 - 00016992 _____ C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:25 - 2016-03-29 18:39 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\tab
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\hover
2016-03-29 18:21 - 2016-03-29 18:21 - 00005120 _____ C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\Users\Public\Thunder Network
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\ProgramData\Thunder Network
2016-03-29 18:17 - 2016-03-29 18:26 - 00000000 ____D C:\Users\Miroslav\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-03-29 18:17 - 2016-03-29 18:17 - 02803251 _____ C:\Windows\chromebrowser.exe
2016-03-29 18:17 - 2016-03-29 18:17 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-03-29 17:31 - 2016-03-29 18:16 - 00000000 ____D C:\Users\Miroslav\Downloads\Adobe Photoshop CS6 13.0.1 Final Multilanguage (cracked dll)
2016-03-28 23:32 - 2016-03-29 09:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Google
2016-03-28 23:24 - 2016-03-29 19:41 - 00000000 ____D C:\ProgramData\Google
2016-03-28 23:24 - 2016-03-28 23:24 - 00000000 ____D C:\Program Files\Google
2016-03-28 23:15 - 2016-03-28 23:22 - 450071920 _____ C:\Users\Miroslav\Downloads\nikcollection-full-1.2.11.exe
2016-03-28 23:12 - 2016-03-28 23:46 - 00000000 ____D C:\Users\Miroslav\Downloads\[ www.torrenting.com ] - Marvels.Daredevil.S02E05.WEBRip.x264-NF69
2016-03-28 12:37 - 2016-03-28 12:38 - 00360896 _____ C:\Users\Miroslav\Downloads\Major_Lazer_-_Be_Together_(feat._Wild_Belle)_(Vanic_Remix).mp3.sfk
2016-03-28 10:04 - 2016-03-28 10:25 - 388792825 _____ C:\Users\Miroslav\Downloads\ENTPACKEN!!!UNZIP!!!!.zip
2016-03-28 06:28 - 2016-03-28 06:29 - 55705599 _____ C:\Users\Miroslav\Downloads\JohnDeere7930_Final_BITTE_ENTPACKEN.zip
2016-03-27 23:21 - 2016-03-27 23:21 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik (1).zip
2016-03-27 22:58 - 2016-03-27 23:11 - 332715399 _____ C:\Users\Miroslav\Downloads\Asshole Fever - Veronica Morre - Veronicas Anal in Lacy Fishnets_540p.mp4
2016-03-27 22:57 - 2016-03-28 23:54 - 413627686 _____ C:\Users\Miroslav\Downloads\AssHole Fever - Amirah Adara - Scoring a Deuce.mp4
2016-03-27 22:57 - 2016-03-27 23:18 - 204761420 _____ C:\Users\Miroslav\Downloads\ahf_minnie_manga.mp4
2016-03-27 11:14 - 2016-03-27 11:15 - 00000000 ____D C:\Users\Miroslav\Downloads\Limitless.S01E19.HDTV.x264-LOL[ettv]
2016-03-27 11:13 - 2016-03-27 11:13 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik.zip
2016-03-26 21:48 - 2016-03-26 22:39 - 901975014 _____ C:\Users\Miroslav\Downloads\Fuck-you-pane-učiteli-2-CZ.avi
2016-03-25 20:37 - 2016-03-25 20:37 - 01409455 _____ C:\Users\Miroslav\Downloads\Grass-Textur.zip
2016-03-24 21:32 - 2016-03-24 21:32 - 00000000 ____D C:\Users\Miroslav\Documents\Adobe
2016-03-24 19:46 - 2016-03-24 19:58 - 00202240 _____ C:\Users\Miroslav\Downloads\Pendulum do videa.mp3.sfk
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\Program Files (x86)\Windows Phone
2016-03-24 14:07 - 2016-03-24 14:07 - 00000000 ____D C:\ProgramData\Applications
2016-03-24 09:44 - 2016-03-24 09:44 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Apple Computer
2016-03-24 01:22 - 2016-03-24 01:22 - 00045695 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E04.WEBRip.x264-NF69.srt
2016-03-23 19:53 - 2016-03-23 20:08 - 00223344 _____ C:\Users\Miroslav\Downloads\Dustsucker (Royalty Free Music) [CC - BY].mp3.sfk
2016-03-23 19:52 - 2016-03-23 19:52 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple Computer
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-03-23 19:51 - 2016-03-23 19:51 - 00000000 ____D C:\Users\Miroslav\AppData\LocalLow\Apple Computer
2016-03-22 19:46 - 2016-03-22 19:49 - 00000000 ____D C:\Program Files (x86)\MBL
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic Bullet Looks
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\Program Files (x86)\LooksBuilder
2016-03-22 19:46 - 2004-03-29 16:23 - 00090112 _____ (MindVision Software) C:\Windows\unvise32.exe
2016-03-22 16:33 - 2016-03-22 16:33 - 00110616 _____ C:\Users\Miroslav\Downloads\daredevil-subtitles-cz-2.zip
2016-03-22 08:03 - 2016-03-22 08:03 - 00038781 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E03.WEBRip.x264-SKGTV.srt
2016-03-21 14:08 - 2016-03-21 14:08 - 29261108 _____ C:\Users\Miroslav\Downloads\Entpacken_Fliegl_Trailer_Set_2.rar
2016-03-20 00:29 - 2016-03-20 00:29 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET (1).srt
2016-03-19 23:39 - 2016-03-19 23:39 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET.srt
2016-03-19 11:59 - 2016-03-19 11:59 - 00052075 _____ C:\Users\Miroslav\Downloads\Limitless-S01E17(0000268389).srt
2016-03-16 21:09 - 2016-03-16 21:09 - 00148453 _____ C:\Users\Miroslav\Downloads\Citizenfour(0000257743) (1).srt
2016-03-16 00:40 - 2016-03-21 15:10 - 00000000 ____D C:\Users\Miroslav\Documents\GTA San Andreas User Files
2016-03-16 00:40 - 2016-03-16 00:40 - 00000786 _____ C:\Users\Public\Desktop\MTA San Andreas 1.5.lnk
2016-03-16 00:40 - 2016-03-16 00:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.5
2016-03-16 00:39 - 2016-03-16 00:41 - 00000000 ____D C:\ProgramData\MTA San Andreas All
2016-03-16 00:31 - 2016-03-16 00:31 - 00000637 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk
2016-03-16 00:31 - 2016-03-16 00:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2016-03-13 21:13 - 2016-03-24 19:58 - 00785872 _____ C:\Users\Miroslav\Downloads\Pendulum_-_The_Island.mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00401800 _____ C:\Users\Miroslav\Downloads\American Authors - Best Day Of My Life (Just A Gent Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00291560 _____ C:\Users\Miroslav\Downloads\Milky_Chance_-_Stolen_Dance_(Embody_Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00257392 _____ C:\Users\Miroslav\Downloads\Avenir_-_Louane_(Best_Remix_right_now)_-Djadler_Musics.mp3.sfk
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\x264vfw
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\Program Files (x86)\x264vfw
2016-03-09 16:27 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-09 16:27 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 16:27 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-09 16:27 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-09 16:27 - 2016-02-09 08:53 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 16:27 - 2016-02-09 08:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-09 16:27 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 16:27 - 2016-02-08 22:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 16:27 - 2016-02-08 22:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-03-09 16:27 - 2016-02-08 22:38 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-09 16:27 - 2016-02-08 22:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 22:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-03-09 16:27 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 16:27 - 2016-02-08 22:32 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 22:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-03-09 16:27 - 2016-02-08 22:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 22:20 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 22:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 22:15 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-03-09 16:27 - 2016-02-08 22:13 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-09 16:27 - 2016-02-08 22:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 22:11 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-09 16:27 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 22:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 16:27 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 16:27 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 16:27 - 2016-02-08 20:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 20:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 20:19 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 20:18 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-03-09 16:27 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 16:27 - 2016-02-08 20:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-09 16:27 - 2016-02-08 20:14 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 20:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-03-09 16:27 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 16:27 - 2016-02-08 20:13 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 20:06 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-09 16:27 - 2016-02-08 20:03 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 19:55 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 19:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-09 16:27 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 19:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 19:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-09 16:27 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 16:27 - 2016-02-08 19:35 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 16:27 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 19:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 16:27 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 16:27 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 16:27 - 2016-02-04 19:52 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 16:27 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 16:27 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 16:27 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:26 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 16:26 - 2016-02-08 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-09 16:26 - 2016-02-08 20:26 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-03-09 16:26 - 2016-02-08 19:52 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-09 16:24 - 2016-02-11 20:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:56 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-09 16:24 - 2016-02-11 20:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-09 16:24 - 2016-02-11 20:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-09 16:24 - 2016-02-11 20:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-09 16:23 - 2016-02-19 21:02 - 00038336 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 16:23 - 2016-02-19 20:54 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 16:23 - 2016-02-19 16:07 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:44 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-09 16:23 - 2016-02-11 19:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-09 16:23 - 2016-02-11 19:34 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-09 16:23 - 2016-02-11 19:34 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-09 16:23 - 2016-02-11 19:33 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-09 16:23 - 2016-02-11 19:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 19:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-03-09 16:23 - 2016-02-11 19:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 16:07 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-09 16:23 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 16:23 - 2016-02-09 11:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-09 16:23 - 2016-02-05 20:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-03-09 16:23 - 2016-02-05 19:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 16:23 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 16:23 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-31 17:29 - 2015-07-08 09:33 - 00000000 ____D C:\FRST
2016-03-31 17:25 - 2014-11-05 15:21 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-03-31 17:24 - 2016-01-08 00:05 - 00003034 _____ C:\Windows\System32\Tasks\MSIAfterburner
2016-03-31 17:24 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-31 17:24 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-31 14:59 - 2014-11-09 12:23 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\uTorrent
2016-03-31 14:34 - 2016-02-21 18:12 - 00015840 _____ C:\Users\Miroslav\Documents\Techagro 2016.veg
2016-03-31 14:02 - 2015-07-15 09:02 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-31 13:08 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-31 13:08 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-31 12:59 - 2011-03-04 11:41 - 02330704 _____ C:\Windows\system32\perfh015.dat
2016-03-31 12:59 - 2011-03-04 11:41 - 01682090 _____ C:\Windows\system32\perfc015.dat
2016-03-31 12:59 - 2011-03-04 11:18 - 05315902 _____ C:\Windows\system32\perfh005.dat
2016-03-31 12:59 - 2011-03-04 11:18 - 01712130 _____ C:\Windows\system32\perfc005.dat
2016-03-31 12:59 - 2009-07-14 07:13 - 00006266 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-31 07:00 - 2014-09-29 11:55 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Adobe
2016-03-31 06:50 - 2009-07-14 06:45 - 05174400 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-30 19:10 - 2016-02-21 18:12 - 00015960 _____ C:\Users\Miroslav\Documents\Techagro 2016.veg.bak
2016-03-30 19:06 - 2014-09-29 09:36 - 00066088 _____ C:\Users\Miroslav\AppData\Local\GDIPFONTCACHEV1.DAT
2016-03-30 07:05 - 2014-11-20 19:36 - 00000000 ____D C:\ProgramData\Adobe
2016-03-30 06:50 - 2014-11-12 19:33 - 00000000 ____D C:\AdwCleaner
2016-03-29 20:24 - 2015-05-15 14:00 - 00000000 ____D C:\Users\Miroslav\AppData\Local\ElevatedDiagnostics
2016-03-29 20:13 - 2016-01-01 23:47 - 00000000 ____D C:\Users\Miroslav\AppData\Local\CrashDumps
2016-03-29 19:40 - 2014-09-29 09:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-29 19:36 - 2015-01-29 11:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-03-29 19:35 - 2015-01-29 11:13 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2016-03-29 19:35 - 2014-09-29 11:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Adobe
2016-03-29 19:33 - 2015-01-29 11:13 - 00001483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-03-29 19:28 - 2014-12-03 10:54 - 00000000 ____D C:\Windows\system32\appmgmt
2016-03-29 19:01 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-03-29 18:40 - 2014-11-12 18:08 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-29 18:39 - 2015-07-09 18:26 - 00001199 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-29 18:39 - 2015-07-09 18:26 - 00001191 _____ C:\Users\Miroslav\Desktop\Google Chrome.lnk
2016-03-29 18:39 - 2014-09-26 16:42 - 00000975 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-29 18:38 - 2014-09-29 09:14 - 00000000 ____D C:\Windows\Downloaded Installations
2016-03-29 18:20 - 2014-09-26 16:42 - 00000000 ____D C:\Users\Miroslav\AppData\Local\VirtualStore
2016-03-29 07:42 - 2015-09-17 23:24 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job
2016-03-28 23:25 - 2014-09-29 09:37 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Google
2016-03-28 23:23 - 2015-12-25 20:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-24 18:02 - 2014-09-29 11:56 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-24 18:02 - 2014-09-29 11:56 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-24 18:02 - 2014-09-29 11:56 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-23 22:34 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-03-21 14:21 - 2015-04-07 19:22 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-03-16 00:40 - 2015-02-12 22:41 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-16 00:31 - 2014-09-29 09:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-15 07:41 - 2009-07-14 07:08 - 00032580 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-13 21:13 - 2015-01-28 12:47 - 00010256 _____ C:\Users\Miroslav\Documents\unajz.veg
2016-03-13 18:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-03-13 10:57 - 2015-01-28 12:47 - 00015208 _____ C:\Users\Miroslav\Documents\unajz.veg.bak
2016-03-11 12:00 - 2014-11-06 20:24 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-09 16:38 - 2014-11-05 16:44 - 00000000 ____D C:\Windows\system32\MRT
2016-03-09 16:35 - 2014-12-11 10:15 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-09 16:35 - 2014-11-05 16:44 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-06 14:14 - 2015-01-16 20:50 - 00000000 ____D C:\ProgramData\tmp
==================== Files in the root of some directories =======
2016-03-30 18:20 - 2016-03-31 14:20 - 0000132 _____ () C:\Users\Miroslav\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2016-03-29 18:37 - 2016-03-29 18:37 - 6504960 _____ () C:\Users\Miroslav\AppData\Roaming\agent.dat
2015-06-18 13:36 - 2015-07-07 23:06 - 0000024 _____ () C:\Users\Miroslav\AppData\Roaming\appdataFr25.bin
2016-03-29 18:37 - 2016-03-29 18:37 - 0054272 _____ () C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0065424 _____ () C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 1626416 _____ () C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:21 - 2016-03-29 18:21 - 0005120 _____ () C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:36 - 2016-03-29 18:36 - 0166534 _____ () C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 0016992 _____ () C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 0127488 _____ () C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0072699 _____ () C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0018432 _____ () C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0005568 _____ () C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\noah.dat
2015-02-12 22:49 - 2015-02-12 22:49 - 0000044 _____ () C:\Users\Miroslav\AppData\Roaming\twow_sysprepdt.dat
2015-11-22 21:25 - 2015-11-22 21:25 - 0032038 _____ () C:\Users\Miroslav\AppData\Local\SquareClock.Production_Home_Siko_WebIcon.ico
2014-09-29 09:18 - 2014-09-29 09:18 - 0000003 _____ () C:\Users\Miroslav\AppData\Local\user_data.ini
2014-11-04 16:22 - 2014-11-04 16:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\Miroslav\AppData\Local\Temp\libeay32.dll
C:\Users\Miroslav\AppData\Local\Temp\msvcr120.dll
C:\Users\Miroslav\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Miroslav\AppData\Local\Temp\sfareca00001.dll
C:\Users\Miroslav\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job => C:\Users\Miroslav\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Miroslav\Desktop" je 12 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by Miroslav (administrator) on MIROSLAV-PC (31-03-2016 17:29:57)
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available Profiles: Miroslav)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Windows\DAODx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\ProgramData\Ronzap\Ronzap.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7200984 2013-10-04] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [ QQPCTray] => "C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\QQPCTray.exe" /regrun
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\...\Run: [AdobeBridge] => [X]
AppInit_DLLs: C:\ProgramData\Ronzap\Rankex.dll => C:\ProgramData\Ronzap\Rankex.dll [363520 2016-03-29] ()
AppInit_DLLs-x32: C:\ProgramData\Ronzap\Xxx-find.dll => C:\ProgramData\Ronzap\Xxx-find.dll [257536 2016-03-29] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => No File
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{22A83F5D-89A7-4424-8E9D-7C4188E282D9}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{34F7103D-2C11-4FAA-BD34-9E150A07D54D}: [DhcpNameServer] 10.0.0.138
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130900044436600023&GUID=F7389CC1-0968-4DEC-9BC8-B7E1DC0240E0
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {2FD913F6-1D65-4972-AC6C-69F7D2BBFA13} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {4C162509-EABC-463D-B383-678452377450} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {67D28C64-38CA-4B26-A464-21DEE6D6A304} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {9236224F-9CED-490E-AB70-62FFFF49846B} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {C4C881B9-7E38-4D78-8353-054AACA4A03E} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC2FC6EA-40FD-4A15-AEC2-7D86FA971D3F} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DC45EB59-5AFF-428A-B188-C3B764401882} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {DE252F16-4D9A-4008-B001-3895ACDCC888} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-1610609173-1946185470-3874883686-1000 -> {FD73DCA4-747F-4F78-9352-CE13E883B0AB} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
FireFox:
========
FF ProfilePath: C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF Homepage: C:\ProgramData\Ronzaps\ff.HP
FF NewTab: C:\ProgramData\Ronzaps\ff.NT
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-24] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-24] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-02] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-02-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin HKU\S-1-5-21-1610609173-1946185470-3874883686-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Miroslav\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack [not found]
FF Extension: GsearchFinder - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi [2016-03-24]
Chrome:
=======
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRkqhqJHajANi0B_XuyZ3_pwFz2OOITqPlkx50uriDqJrPXHGbr74xRo4SY32JdYnpQLrkqPG21S0J2R4Z6QSUakfrS
CHR StartupUrls: Default -> "hxxp://www.google.cz/","hxxp://www.mystartsear ... CH8qC38qBE.."
CHR DefaultSearchURL: Default -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWqICWRlg5p-Tqs2VjJdT4c5SDM8LfNPF766h8uygA21Rem5_H-K4iV28jUAPxKkL-xkuEKmefVZKrVWRoRrfI9RhWNPDR_YrIH50CpKp0dfCNXSzuciyWqBzxgmjqjetAMYhzU03637MvjiwUMs3-Oycr4sMgOtRnLPGNOIcI&q={searchTerms}
CHR DefaultSearchKeyword: Default -> feed.sonic-search.com
CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
CHR Profile: C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-09]
CHR Extension: (Dokumenty Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-09]
CHR Extension: (Disk Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Adblock Plus) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Tabulky Google) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-09]
CHR Extension: (Dokumenty Google offline) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-18]
CHR Extension: (Chromium Wheel Smooth Scroller) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\khpcanbeojalbkpgpmjpdkjnkfcgfkhb [2016-01-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-05]
CHR Extension: (Gmail) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-09]
StartMenuInternet: Google Chrome.5X2A3Y3GEIUSIKNCBIPNMMJBGQ - C:\Users\Miroslav\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-01-01] (Macrovision Europe Ltd.) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-16] (NVIDIA Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-16] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-16] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-07] (Electronic Arts)
R2 Ronzap; C:\ProgramData\\Ronzap\\Ronzap.exe [1069568 2016-03-29] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-29] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-12-16] (NVIDIA Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [23552 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [86016 2014-01-12] (Nuvoton Technology Corp.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S2 tsnethlpx64; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17347.218\TsNetHlpX64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-31 17:29 - 2016-03-31 17:30 - 00018164 _____ C:\Users\Miroslav\Desktop\FRST.txt
2016-03-31 17:27 - 2016-03-29 20:29 - 02374144 _____ (Farbar) C:\Users\Miroslav\Desktop\FRST64.exe
2016-03-31 17:27 - 2016-03-29 20:20 - 00112640 _____ (forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
2016-03-31 14:33 - 2016-03-31 14:33 - 00000038 _____ C:\Users\Miroslav\Desktop\Techagro 2016.avi.sfl
2016-03-31 13:15 - 2016-03-31 13:15 - 00000000 ____D C:\Users\Miroslav\Downloads\FuckOrFired.E06.Jenny.XXX.1080p.MP4-KTR
2016-03-31 07:09 - 2016-03-31 07:09 - 00000000 ____D C:\Users\Miroslav\Downloads\FuckOrFired.E22.Julia.XXX.1080p.MP4-KTR
2016-03-31 07:09 - 2016-03-31 07:09 - 00000000 ____D C:\Users\Miroslav\Downloads\FuckOrFired.E03.Victoria.XXX.1080p.MP4-KTR
2016-03-30 19:09 - 2016-03-31 14:33 - 10480640 _____ C:\Users\Miroslav\Desktop\Techagro 2016.avi
2016-03-30 19:04 - 2016-03-31 14:31 - 827377816 _____ C:\Users\Miroslav\Documents\Mion LOGO.avi
2016-03-30 18:56 - 2016-03-30 18:56 - 00000000 ____D C:\Users\Miroslav\Documents\Particles
2016-03-30 18:50 - 2016-03-30 18:55 - 160081834 _____ C:\Users\Miroslav\Downloads\Particles_HD.zip
2016-03-30 18:23 - 2016-03-30 18:23 - 00032911 _____ C:\Users\Miroslav\Downloads\bignoodle_titling.zip
2016-03-30 18:20 - 2016-03-31 14:20 - 00000132 _____ C:\Users\Miroslav\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2016-03-30 18:17 - 2016-03-30 18:17 - 00053034 _____ C:\Users\Miroslav\Downloads\batman_forever.zip
2016-03-30 17:59 - 2016-03-30 18:40 - 722535882 _____ C:\Users\Miroslav\Downloads\Batman-Bad-Blood.2016.720p.BRRip.x264.AAC+CZ-tit.v-obraze-Super-Doga-Animovaný.avi
2016-03-30 07:17 - 2016-03-30 07:17 - 00000643 _____ C:\Users\Miroslav\Desktop\Plocha – zástupce.lnk
2016-03-30 06:56 - 2016-03-30 06:56 - 00036903 _____ C:\Users\Miroslav\Downloads\Gotham.S02E16.720p.HDTV.X264-DIMENSION (+LOL+FUM).srt
2016-03-30 06:48 - 2016-03-30 06:48 - 03102208 _____ C:\Users\Miroslav\Downloads\adwcleaner_5.107.exe
2016-03-29 20:22 - 2016-03-29 20:22 - 00000000 ___SD C:\Uinstall
2016-03-29 20:13 - 2016-03-29 20:13 - 00001389 _____ C:\Users\Miroslav\Desktop\Photoshop – zástupce (2).lnk
2016-03-29 20:10 - 2016-03-29 20:10 - 00003596 _____ C:\Windows\System32\Tasks\{76F719DE-E0AF-4275-B4D0-CE4F197A4567}
2016-03-29 19:43 - 2016-03-29 19:43 - 00003514 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Miroslav-PC-Miroslav
2016-03-29 19:40 - 2016-03-31 17:24 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-29 19:40 - 2016-03-31 14:51 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-29 19:40 - 2016-03-29 19:46 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-29 19:40 - 2016-03-29 19:46 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-29 19:36 - 2016-03-29 19:36 - 00000898 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2016-03-29 19:36 - 2016-03-29 19:36 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-03-29 19:35 - 2016-03-29 19:35 - 00000853 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2016-03-29 19:34 - 2016-03-29 19:34 - 00000827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2016-03-29 19:33 - 2016-03-29 19:33 - 00000947 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-03-29 19:15 - 2016-03-29 19:15 - 01222144 _____ C:\Users\Miroslav\Downloads\RSITx64.exe
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\rsit
2016-03-29 19:15 - 2016-03-29 19:15 - 00000000 ____D C:\Program Files\trend micro
2016-03-29 18:49 - 2016-03-29 20:22 - 00000000 ____D C:\Qoobox
2016-03-29 18:49 - 2016-03-29 19:08 - 00000000 ____D C:\Windows\erdnt
2016-03-29 18:49 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-03-29 18:49 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-03-29 18:49 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-03-29 18:49 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-03-29 18:48 - 2016-03-29 18:48 - 05658151 ____R (Swearware) C:\Users\Miroslav\Downloads\Uinstall.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 01309184 _____ C:\Users\Miroslav\Downloads\zoek.exe
2016-03-29 18:45 - 2016-03-29 18:45 - 00000000 ____D C:\zoek_backup
2016-03-29 18:38 - 2016-03-29 19:26 - 00000000 ____D C:\ProgramData\BOINC
2016-03-29 18:37 - 2016-03-31 17:25 - 00000000 ____D C:\ProgramData\Ronzap
2016-03-29 18:37 - 2016-03-29 18:38 - 00000000 ____D C:\ProgramData\Ronzaps
2016-03-29 18:37 - 2016-03-29 18:37 - 06504960 _____ C:\Users\Miroslav\AppData\Roaming\agent.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 01626416 _____ C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\noah.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00126464 _____ C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00072699 _____ C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 00065424 _____ C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 00054272 _____ C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00018432 _____ C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 00005568 _____ C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 00166534 _____ C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 00127488 _____ C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:36 - 2016-03-29 18:36 - 00016992 _____ C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:25 - 2016-03-29 18:39 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\tab
2016-03-29 18:25 - 2016-03-29 18:25 - 00000000 ____D C:\Windows\SysWOW64\hover
2016-03-29 18:21 - 2016-03-29 18:21 - 00005120 _____ C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\Users\Public\Thunder Network
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\ProgramData\Thunder Network
2016-03-29 18:17 - 2016-03-29 18:26 - 00000000 ____D C:\Users\Miroslav\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-03-29 18:17 - 2016-03-29 18:17 - 02803251 _____ C:\Windows\chromebrowser.exe
2016-03-29 18:17 - 2016-03-29 18:17 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-03-29 17:31 - 2016-03-29 18:16 - 00000000 ____D C:\Users\Miroslav\Downloads\Adobe Photoshop CS6 13.0.1 Final Multilanguage (cracked dll)
2016-03-28 23:32 - 2016-03-29 09:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Google
2016-03-28 23:24 - 2016-03-29 19:41 - 00000000 ____D C:\ProgramData\Google
2016-03-28 23:24 - 2016-03-28 23:24 - 00000000 ____D C:\Program Files\Google
2016-03-28 23:15 - 2016-03-28 23:22 - 450071920 _____ C:\Users\Miroslav\Downloads\nikcollection-full-1.2.11.exe
2016-03-28 23:12 - 2016-03-28 23:46 - 00000000 ____D C:\Users\Miroslav\Downloads\[ www.torrenting.com ] - Marvels.Daredevil.S02E05.WEBRip.x264-NF69
2016-03-28 12:37 - 2016-03-28 12:38 - 00360896 _____ C:\Users\Miroslav\Downloads\Major_Lazer_-_Be_Together_(feat._Wild_Belle)_(Vanic_Remix).mp3.sfk
2016-03-28 10:04 - 2016-03-28 10:25 - 388792825 _____ C:\Users\Miroslav\Downloads\ENTPACKEN!!!UNZIP!!!!.zip
2016-03-28 06:28 - 2016-03-28 06:29 - 55705599 _____ C:\Users\Miroslav\Downloads\JohnDeere7930_Final_BITTE_ENTPACKEN.zip
2016-03-27 23:21 - 2016-03-27 23:21 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik (1).zip
2016-03-27 22:58 - 2016-03-27 23:11 - 332715399 _____ C:\Users\Miroslav\Downloads\Asshole Fever - Veronica Morre - Veronicas Anal in Lacy Fishnets_540p.mp4
2016-03-27 22:57 - 2016-03-28 23:54 - 413627686 _____ C:\Users\Miroslav\Downloads\AssHole Fever - Amirah Adara - Scoring a Deuce.mp4
2016-03-27 22:57 - 2016-03-27 23:18 - 204761420 _____ C:\Users\Miroslav\Downloads\ahf_minnie_manga.mp4
2016-03-27 11:14 - 2016-03-27 11:15 - 00000000 ____D C:\Users\Miroslav\Downloads\Limitless.S01E19.HDTV.x264-LOL[ettv]
2016-03-27 11:13 - 2016-03-27 11:13 - 00021450 _____ C:\Users\Miroslav\Downloads\limitless-S01E19-hdtv-By-jeriska03-efvendy-lukascoolarik.zip
2016-03-26 21:48 - 2016-03-26 22:39 - 901975014 _____ C:\Users\Miroslav\Downloads\Fuck-you-pane-učiteli-2-CZ.avi
2016-03-25 20:37 - 2016-03-25 20:37 - 01409455 _____ C:\Users\Miroslav\Downloads\Grass-Textur.zip
2016-03-24 21:32 - 2016-03-24 21:32 - 00000000 ____D C:\Users\Miroslav\Documents\Adobe
2016-03-24 19:46 - 2016-03-24 19:58 - 00202240 _____ C:\Users\Miroslav\Downloads\Pendulum do videa.mp3.sfk
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone
2016-03-24 14:08 - 2016-03-24 14:08 - 00000000 ____D C:\Program Files (x86)\Windows Phone
2016-03-24 14:07 - 2016-03-24 14:07 - 00000000 ____D C:\ProgramData\Applications
2016-03-24 09:44 - 2016-03-24 09:44 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Apple Computer
2016-03-24 01:22 - 2016-03-24 01:22 - 00045695 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E04.WEBRip.x264-NF69.srt
2016-03-23 19:53 - 2016-03-23 20:08 - 00223344 _____ C:\Users\Miroslav\Downloads\Dustsucker (Royalty Free Music) [CC - BY].mp3.sfk
2016-03-23 19:52 - 2016-03-23 19:52 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple Computer
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\ProgramData\Apple
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-03-23 19:52 - 2016-03-23 19:52 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-03-23 19:51 - 2016-03-23 19:51 - 00000000 ____D C:\Users\Miroslav\AppData\LocalLow\Apple Computer
2016-03-22 19:46 - 2016-03-22 19:49 - 00000000 ____D C:\Program Files (x86)\MBL
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic Bullet Looks
2016-03-22 19:46 - 2016-03-22 19:46 - 00000000 ____D C:\Program Files (x86)\LooksBuilder
2016-03-22 19:46 - 2004-03-29 16:23 - 00090112 _____ (MindVision Software) C:\Windows\unvise32.exe
2016-03-22 16:33 - 2016-03-22 16:33 - 00110616 _____ C:\Users\Miroslav\Downloads\daredevil-subtitles-cz-2.zip
2016-03-22 08:03 - 2016-03-22 08:03 - 00038781 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E03.WEBRip.x264-SKGTV.srt
2016-03-21 14:08 - 2016-03-21 14:08 - 29261108 _____ C:\Users\Miroslav\Downloads\Entpacken_Fliegl_Trailer_Set_2.rar
2016-03-20 00:29 - 2016-03-20 00:29 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET (1).srt
2016-03-19 23:39 - 2016-03-19 23:39 - 00043437 _____ C:\Users\Miroslav\Downloads\Marvels.Daredevil.S02E01.WEBRip.x264-FLEET.srt
2016-03-19 11:59 - 2016-03-19 11:59 - 00052075 _____ C:\Users\Miroslav\Downloads\Limitless-S01E17(0000268389).srt
2016-03-16 21:09 - 2016-03-16 21:09 - 00148453 _____ C:\Users\Miroslav\Downloads\Citizenfour(0000257743) (1).srt
2016-03-16 00:40 - 2016-03-21 15:10 - 00000000 ____D C:\Users\Miroslav\Documents\GTA San Andreas User Files
2016-03-16 00:40 - 2016-03-16 00:40 - 00000786 _____ C:\Users\Public\Desktop\MTA San Andreas 1.5.lnk
2016-03-16 00:40 - 2016-03-16 00:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.5
2016-03-16 00:39 - 2016-03-16 00:41 - 00000000 ____D C:\ProgramData\MTA San Andreas All
2016-03-16 00:31 - 2016-03-16 00:31 - 00000637 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk
2016-03-16 00:31 - 2016-03-16 00:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2016-03-13 21:13 - 2016-03-24 19:58 - 00785872 _____ C:\Users\Miroslav\Downloads\Pendulum_-_The_Island.mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00401800 _____ C:\Users\Miroslav\Downloads\American Authors - Best Day Of My Life (Just A Gent Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00291560 _____ C:\Users\Miroslav\Downloads\Milky_Chance_-_Stolen_Dance_(Embody_Remix).mp3.sfk
2016-03-13 21:13 - 2016-03-13 21:21 - 00257392 _____ C:\Users\Miroslav\Downloads\Avenir_-_Louane_(Best_Remix_right_now)_-Djadler_Musics.mp3.sfk
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\x264vfw
2016-03-13 10:57 - 2016-03-13 10:57 - 00000000 ____D C:\Program Files (x86)\x264vfw
2016-03-09 16:27 - 2016-02-12 20:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-03-09 16:27 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 16:27 - 2016-02-12 20:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 16:27 - 2016-02-12 20:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-03-09 16:27 - 2016-02-12 20:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-03-09 16:27 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 16:27 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 16:27 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-03-09 16:27 - 2016-02-09 08:53 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 16:27 - 2016-02-09 08:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-09 16:27 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 16:27 - 2016-02-08 22:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 16:27 - 2016-02-08 22:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-03-09 16:27 - 2016-02-08 22:38 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-03-09 16:27 - 2016-02-08 22:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 22:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-03-09 16:27 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 16:27 - 2016-02-08 22:32 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 22:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-03-09 16:27 - 2016-02-08 22:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 22:20 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 22:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 22:15 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-03-09 16:27 - 2016-02-08 22:13 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-03-09 16:27 - 2016-02-08 22:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 22:11 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 16:27 - 2016-02-08 22:10 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-03-09 16:27 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 16:27 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 22:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 16:27 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 16:27 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 16:27 - 2016-02-08 20:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-09 16:27 - 2016-02-08 20:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 16:27 - 2016-02-08 20:27 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 16:27 - 2016-02-08 20:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-03-09 16:27 - 2016-02-08 20:19 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-09 16:27 - 2016-02-08 20:18 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-03-09 16:27 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 16:27 - 2016-02-08 20:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-09 16:27 - 2016-02-08 20:14 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-09 16:27 - 2016-02-08 20:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-03-09 16:27 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 16:27 - 2016-02-08 20:13 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-03-09 16:27 - 2016-02-08 20:06 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-03-09 16:27 - 2016-02-08 20:03 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-09 16:27 - 2016-02-08 19:55 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-03-09 16:27 - 2016-02-08 19:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-03-09 16:27 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 16:27 - 2016-02-08 19:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-09 16:27 - 2016-02-08 19:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-03-09 16:27 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 16:27 - 2016-02-08 19:35 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 16:27 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 16:27 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 16:27 - 2016-02-08 19:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-03-09 16:27 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 16:27 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 16:27 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 16:27 - 2016-02-04 19:52 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 16:27 - 2016-02-03 20:58 - 00862208 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2016-03-09 16:27 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 16:27 - 2016-02-03 20:07 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 16:27 - 2016-01-11 21:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 16:27 - 2015-11-19 16:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2016-03-09 16:27 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2016-03-09 16:26 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 16:26 - 2016-02-08 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-09 16:26 - 2016-02-08 20:26 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-03-09 16:26 - 2016-02-08 19:52 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-03-09 16:24 - 2016-02-11 20:56 - 05572032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:56 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-03-09 16:24 - 2016-02-11 20:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-03-09 16:24 - 2016-02-11 20:52 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-03-09 16:24 - 2016-02-11 20:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:44 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-03-09 16:24 - 2016-02-11 20:41 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-09 16:24 - 2016-02-11 20:38 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-03-09 16:24 - 2016-02-11 20:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 16:24 - 2016-02-11 20:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-03-09 16:23 - 2016-02-19 21:02 - 00038336 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 16:23 - 2016-02-19 20:54 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 16:23 - 2016-02-19 16:07 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-03-09 16:23 - 2016-02-11 20:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:48 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:44 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 20:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:41 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-03-09 16:23 - 2016-02-11 20:38 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-03-09 16:23 - 2016-02-11 20:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-03-09 16:23 - 2016-02-11 20:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-03-09 16:23 - 2016-02-11 20:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-03-09 16:23 - 2016-02-11 20:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 20:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:48 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-03-09 16:23 - 2016-02-11 19:41 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-03-09 16:23 - 2016-02-11 19:40 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-03-09 16:23 - 2016-02-11 19:34 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-03-09 16:23 - 2016-02-11 19:34 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-03-09 16:23 - 2016-02-11 19:33 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-03-09 16:23 - 2016-02-11 19:32 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-03-09 16:23 - 2016-02-11 19:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-03-09 16:23 - 2016-02-11 19:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-03-09 16:23 - 2016-02-11 19:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 19:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-03-09 16:23 - 2016-02-11 16:07 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 14634496 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:57 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-03-09 16:23 - 2016-02-09 11:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 16:23 - 2016-02-09 11:54 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2016-03-09 16:23 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2016-03-09 16:23 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 16:23 - 2016-02-05 20:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-03-09 16:23 - 2016-02-05 20:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-03-09 16:23 - 2016-02-05 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-03-09 16:23 - 2016-02-05 20:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-03-09 16:23 - 2016-02-05 19:48 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 16:23 - 2016-02-05 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 16:23 - 2016-02-05 16:07 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 16:23 - 2016-02-05 03:19 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 16:23 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-31 17:29 - 2015-07-08 09:33 - 00000000 ____D C:\FRST
2016-03-31 17:25 - 2014-11-05 15:21 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2016-03-31 17:24 - 2016-01-08 00:05 - 00003034 _____ C:\Windows\System32\Tasks\MSIAfterburner
2016-03-31 17:24 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-31 17:24 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-31 14:59 - 2014-11-09 12:23 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\uTorrent
2016-03-31 14:34 - 2016-02-21 18:12 - 00015840 _____ C:\Users\Miroslav\Documents\Techagro 2016.veg
2016-03-31 14:02 - 2015-07-15 09:02 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-31 13:08 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-31 13:08 - 2009-07-14 06:45 - 00036560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-31 12:59 - 2011-03-04 11:41 - 02330704 _____ C:\Windows\system32\perfh015.dat
2016-03-31 12:59 - 2011-03-04 11:41 - 01682090 _____ C:\Windows\system32\perfc015.dat
2016-03-31 12:59 - 2011-03-04 11:18 - 05315902 _____ C:\Windows\system32\perfh005.dat
2016-03-31 12:59 - 2011-03-04 11:18 - 01712130 _____ C:\Windows\system32\perfc005.dat
2016-03-31 12:59 - 2009-07-14 07:13 - 00006266 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-31 07:00 - 2014-09-29 11:55 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Adobe
2016-03-31 06:50 - 2009-07-14 06:45 - 05174400 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-30 19:10 - 2016-02-21 18:12 - 00015960 _____ C:\Users\Miroslav\Documents\Techagro 2016.veg.bak
2016-03-30 19:06 - 2014-09-29 09:36 - 00066088 _____ C:\Users\Miroslav\AppData\Local\GDIPFONTCACHEV1.DAT
2016-03-30 07:05 - 2014-11-20 19:36 - 00000000 ____D C:\ProgramData\Adobe
2016-03-30 06:50 - 2014-11-12 19:33 - 00000000 ____D C:\AdwCleaner
2016-03-29 20:24 - 2015-05-15 14:00 - 00000000 ____D C:\Users\Miroslav\AppData\Local\ElevatedDiagnostics
2016-03-29 20:13 - 2016-01-01 23:47 - 00000000 ____D C:\Users\Miroslav\AppData\Local\CrashDumps
2016-03-29 19:40 - 2014-09-29 09:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-03-29 19:36 - 2015-01-29 11:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-03-29 19:35 - 2015-01-29 11:13 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2016-03-29 19:35 - 2014-09-29 11:57 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Adobe
2016-03-29 19:33 - 2015-01-29 11:13 - 00001483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-03-29 19:28 - 2014-12-03 10:54 - 00000000 ____D C:\Windows\system32\appmgmt
2016-03-29 19:01 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-03-29 18:40 - 2014-11-12 18:08 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-29 18:39 - 2015-07-09 18:26 - 00001199 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-29 18:39 - 2015-07-09 18:26 - 00001191 _____ C:\Users\Miroslav\Desktop\Google Chrome.lnk
2016-03-29 18:39 - 2014-09-26 16:42 - 00000975 _____ C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-29 18:38 - 2014-09-29 09:14 - 00000000 ____D C:\Windows\Downloaded Installations
2016-03-29 18:20 - 2014-09-26 16:42 - 00000000 ____D C:\Users\Miroslav\AppData\Local\VirtualStore
2016-03-29 07:42 - 2015-09-17 23:24 - 00000922 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job
2016-03-28 23:25 - 2014-09-29 09:37 - 00000000 ____D C:\Users\Miroslav\AppData\Local\Google
2016-03-28 23:23 - 2015-12-25 20:04 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-24 18:02 - 2014-09-29 11:56 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-24 18:02 - 2014-09-29 11:56 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-24 18:02 - 2014-09-29 11:56 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-24 02:34 - 2015-04-05 20:42 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-23 22:34 - 2014-09-29 09:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-03-21 14:21 - 2015-04-07 19:22 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2016-03-16 00:40 - 2015-02-12 22:41 - 00000000 ____D C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-16 00:31 - 2014-09-29 09:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-15 07:41 - 2009-07-14 07:08 - 00032580 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-13 21:13 - 2015-01-28 12:47 - 00010256 _____ C:\Users\Miroslav\Documents\unajz.veg
2016-03-13 18:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-03-13 10:57 - 2015-01-28 12:47 - 00015208 _____ C:\Users\Miroslav\Documents\unajz.veg.bak
2016-03-11 12:00 - 2014-11-06 20:24 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-09 16:38 - 2014-11-05 16:44 - 00000000 ____D C:\Windows\system32\MRT
2016-03-09 16:35 - 2014-12-11 10:15 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-09 16:35 - 2014-11-05 16:44 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-06 14:14 - 2015-01-16 20:50 - 00000000 ____D C:\ProgramData\tmp
==================== Files in the root of some directories =======
2016-03-30 18:20 - 2016-03-31 14:20 - 0000132 _____ () C:\Users\Miroslav\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2016-03-29 18:37 - 2016-03-29 18:37 - 6504960 _____ () C:\Users\Miroslav\AppData\Roaming\agent.dat
2015-06-18 13:36 - 2015-07-07 23:06 - 0000024 _____ () C:\Users\Miroslav\AppData\Roaming\appdataFr25.bin
2016-03-29 18:37 - 2016-03-29 18:37 - 0054272 _____ () C:\Users\Miroslav\AppData\Roaming\ApplicationHosting.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0065424 _____ () C:\Users\Miroslav\AppData\Roaming\Config.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 1626416 _____ () C:\Users\Miroslav\AppData\Roaming\Flextom.tst
2016-03-29 18:21 - 2016-03-29 18:21 - 0005120 _____ () C:\Users\Miroslav\AppData\Roaming\GiftBag.db
2016-03-29 18:36 - 2016-03-29 18:36 - 0166534 _____ () C:\Users\Miroslav\AppData\Roaming\inst.lat
2016-03-29 18:36 - 2016-03-29 18:36 - 0016992 _____ () C:\Users\Miroslav\AppData\Roaming\InstallationConfiguration.xml
2016-03-29 18:36 - 2016-03-29 18:36 - 0127488 _____ () C:\Users\Miroslav\AppData\Roaming\Installer.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0072699 _____ () C:\Users\Miroslav\AppData\Roaming\Lamtom.tst
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\lobby.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0018432 _____ () C:\Users\Miroslav\AppData\Roaming\Main.dat
2016-03-29 18:37 - 2016-03-29 18:37 - 0005568 _____ () C:\Users\Miroslav\AppData\Roaming\md.xml
2016-03-29 18:37 - 2016-03-29 18:37 - 0126464 _____ () C:\Users\Miroslav\AppData\Roaming\noah.dat
2015-02-12 22:49 - 2015-02-12 22:49 - 0000044 _____ () C:\Users\Miroslav\AppData\Roaming\twow_sysprepdt.dat
2015-11-22 21:25 - 2015-11-22 21:25 - 0032038 _____ () C:\Users\Miroslav\AppData\Local\SquareClock.Production_Home_Siko_WebIcon.ico
2014-09-29 09:18 - 2014-09-29 09:18 - 0000003 _____ () C:\Users\Miroslav\AppData\Local\user_data.ini
2014-11-04 16:22 - 2014-11-04 16:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\Miroslav\AppData\Local\Temp\libeay32.dll
C:\Users\Miroslav\AppData\Local\Temp\msvcr120.dll
C:\Users\Miroslav\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Miroslav\AppData\Local\Temp\sfareca00001.dll
C:\Users\Miroslav\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job => C:\Users\Miroslav\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Miroslav\Desktop" je 12 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
-
Rudy
- Site Admin
- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - nechtěné instalace
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
AppInit_DLLs: C:\ProgramData\Ronzap\Rankex.dll => C:\ProgramData\Ronzap\Rankex.dll [363520 2016-03-29] ()
AppInit_DLLs-x32: C:\ProgramData\Ronzap\Xxx-find.dll => C:\ProgramData\Ronzap\Xxx-find.dll [257536 2016-03-29] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => No File
C:\ProgramData\Ronzap
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack [not found]
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F. ... Z6QSUakfrS
CHR StartupUrls: Default -> "hxxp://www.google.cz/","hxxp://www.mystartsear ... CH8qC38qBE.."
CHR DefaultSearchURL: Default -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73 ... PGNOIcI&q={searchTerms}
CHR DefaultSearchKeyword: Default -> feed.sonic-search.com
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job
C:\ProgramData\DP45977C.lfl
C:\Users\Miroslav\AppData\Local\Temp
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - nechtěné instalace
Zde log:
Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Miroslav (2016-03-31 19:02:31) Run:2
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available Profiles: Miroslav)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
AppInit_DLLs: C:\ProgramData\Ronzap\Rankex.dll => C:\ProgramData\Ronzap\Rankex.dll [363520 2016-03-29] ()
AppInit_DLLs-x32: C:\ProgramData\Ronzap\Xxx-find.dll => C:\ProgramData\Ronzap\Xxx-find.dll [257536 2016-03-29] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => No File
C:\ProgramData\Ronzap
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack [not found]
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F. ... Z6QSUakfrS
CHR StartupUrls: Default -> "hxxp://www.google.cz/","hxxp://www.mystartsear ... CH8qC38qBE.."
CHR DefaultSearchURL: Default -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73 ... PGNOIcI&q={searchTerms}
CHR DefaultSearchKeyword: Default -> feed.sonic-search.com
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job
C:\ProgramData\DP45977C.lfl
C:\Users\Miroslav\AppData\Local\Temp
End
*****************
"C:\ProgramData\Ronzap\Rankex.dll" => Value data removed successfully.
"C:\ProgramData\Ronzap\Xxx-find.dll" => Value data removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.QMDeskTopGCIcon" => key removed successfully
HKCR\CLSID\{B7667919-3765-4815-A66D-98A09BE662D6} => key not found.
"C:\ProgramData\Ronzap" folder move:
Could not move "C:\ProgramData\Ronzap" => Scheduled to move on reboot.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com => path removed successfully
C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com => path removed successfully
C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack => path removed successfully
Chrome HomePage => removed successfully
Chrome StartupUrls => removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
"C:\Users\Miroslav\AppData\Local\Temp" folder move:
Could not move "C:\Users\Miroslav\AppData\Local\Temp" => Scheduled to move on reboot.
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-03-31 19:05:12)
C:\ProgramData\Ronzap => Is moved successfully
C:\Users\Miroslav\AppData\Local\Temp => moved successfully
==== End of Fixlog 19:05:12 ====
Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Miroslav (2016-03-31 19:02:31) Run:2
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available Profiles: Miroslav)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
AppInit_DLLs: C:\ProgramData\Ronzap\Rankex.dll => C:\ProgramData\Ronzap\Rankex.dll [363520 2016-03-29] ()
AppInit_DLLs-x32: C:\ProgramData\Ronzap\Xxx-find.dll => C:\ProgramData\Ronzap\Xxx-find.dll [257536 2016-03-29] ()
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => No File
C:\ProgramData\Ronzap
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com [not found]
FF Extension: No Name - C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack [not found]
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F. ... Z6QSUakfrS
CHR StartupUrls: Default -> "hxxp://www.google.cz/","hxxp://www.mystartsear ... CH8qC38qBE.."
CHR DefaultSearchURL: Default -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73 ... PGNOIcI&q={searchTerms}
CHR DefaultSearchKeyword: Default -> feed.sonic-search.com
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job
C:\ProgramData\DP45977C.lfl
C:\Users\Miroslav\AppData\Local\Temp
End
*****************
"C:\ProgramData\Ronzap\Rankex.dll" => Value data removed successfully.
"C:\ProgramData\Ronzap\Xxx-find.dll" => Value data removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.QMDeskTopGCIcon" => key removed successfully
HKCR\CLSID\{B7667919-3765-4815-A66D-98A09BE662D6} => key not found.
"C:\ProgramData\Ronzap" folder move:
Could not move "C:\ProgramData\Ronzap" => Scheduled to move on reboot.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-1610609173-1946185470-3874883686-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\0b105cbff1eb40b89bca7dae371d@7ead239035fb4613ab38ef.com => path removed successfully
C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\sepherdwilbur@aol.com => path removed successfully
C:\Users\Miroslav\AppData\Roaming\Mozilla\Firefox\Profiles\1kb7q2hc.default\extensions\jid1-CxAfu9DDH0Q8gQ@jetpack => path removed successfully
Chrome HomePage => removed successfully
Chrome StartupUrls => removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1610609173-1946185470-3874883686-1000Core.job => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
"C:\Users\Miroslav\AppData\Local\Temp" folder move:
Could not move "C:\Users\Miroslav\AppData\Local\Temp" => Scheduled to move on reboot.
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-03-31 19:05:12)
C:\ProgramData\Ronzap => Is moved successfully
C:\Users\Miroslav\AppData\Local\Temp => moved successfully
==== End of Fixlog 19:05:12 ====
-
Rudy
- Site Admin
- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - nechtěné instalace
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu - nechtěné instalace
Ano, vše se zdá být v pořádku, už i z Chromu zmizel vyhledávač SnapDo. Děkuji za pomoc.
-
Rudy
- Site Admin
- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu - nechtěné instalace
OK, rádo se stalo!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?