Vytížení svchost

[ROMIK]

Dobrý den,nevím jestli je to po těch čistkach 2 +NB viz http://forum.viry.cz/viewtopic.php?f=13 ... 1&start=15
jsem zjistil ,že mi po startu systému tak do 5 minut začne u jednoho procesu "svchost" požírat ram až na 150 000kB
a zatíží procesor na 50 procent a drží.U obou NB je to to samé.

[Rudy]

Zdravím!
Svchost spravuje síť. služby, takže to může dělat cokoli, co má přístup na internet. Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

[ROMIK]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:13-04-2016
Ran by Roman (administrator) on LATITUDE (14-04-2016 19:23:41)
Running from C:\Users\Roman\Desktop
Loaded Profiles: Roman (Available Profiles: Roman)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_d511891fb5bff1e2\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_d511891fb5bff1e2\AEstSrv.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Dell Inc.) C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Farbar) C:\Users\Roman\Desktop\FRST 32.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [3117384 2012-11-16] (ESET)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [495708 2010-03-10] (IDT, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [488816 2011-01-04] (Alps Electric Co., Ltd.)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-02-27]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell System Manager.lnk [2014-03-09]
ShortcutTarget: Dell System Manager.lnk -> C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe (Dell Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 01 C:\Windows\system32\NLAapi.dll [52224 2012-10-03] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 02 C:\Windows\system32\napinsp.dll [52224 2009-07-14] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\napinsp.dll"
Winsock: Catalog5 05 C:\Windows\System32\mswsock.dll [231424 2013-09-08] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5 06 C:\Windows\System32\winrnr.dll [20992 2009-07-14] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\System32\winrnr.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{48541ECB-B52D-4C87-A703-EA051690484C}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-3014564139-766327633-3771355248-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-3014564139-766327633-3771355248-1000 -> {0AF4B32E-CF18-400E-955C-E9B9D06EDAD4} URL = hxxp://cs.wikipedia.org/w/index.php?title=Speci%C3%A1ln%C3%AD:Hled%C3%A1n%C3%AD&search={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03] (Adobe Systems Incorporated)
BHO: WebTransBHO Class -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> C:\ProgramData\LangSoft\WebIE.dll [2014-09-28] ()
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-01] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-01] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKLM - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll [2014-09-28] ()
Toolbar: HKU\S-1-5-21-3014564139-766327633-3771355248-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2014-05-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-05-01] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-02-27] [not signed]

Chrome:
=======
CHR Profile: C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-11]
CHR Extension: (Dokumenty Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-11]
CHR Extension: (Disk Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-11]
CHR Extension: (YouTube) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-11]
CHR Extension: (Vyhledávání Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-12]
CHR Extension: (Tabulky Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-11]
CHR Extension: (Peněženka Google) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-16]
CHR Extension: (Gmail) - C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-12]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Credential Vault Host Control Service; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [812448 2010-03-24] (Broadcom Corporation)
R2 Credential Vault Host Storage; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [27040 2010-03-24] (Broadcom Corporation)
R2 dcpsysmgrsvc; C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe [390000 2011-07-28] (Dell Inc.)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [913184 2012-11-16] (ESET)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_d511891fb5bff1e2\STacSV.exe [229458 2010-03-10] (IDT, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 acpials; C:\Windows\System32\DRIVERS\acpials.sys [7680 2009-07-14] (Microsoft Corporation)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [33832 2009-11-03] (Broadcom Corporation)
S3 cxbu0wdm; C:\Windows\System32\DRIVERS\cxbu0wdm.sys [131064 2014-05-14] (HID Global Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [169120 2012-11-16] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [120152 2012-03-14] (ESET)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [30616 2013-03-04] (Elaborate Bytes AG)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [103112 2012-03-14] (ESET)
S3 FTD2XX; C:\Windows\System32\Drivers\OPCOMUSB.sys [34639 2005-12-15] (FTDI Ltd.) [File not signed]
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [61576 2011-08-25] (FTDI Ltd.)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [6814720 2010-07-14] (Intel Corporation)
R0 PBADRV; C:\Windows\System32\DRIVERS\PBADRV.sys [26608 2008-06-04] (Dell Inc)
S3 R5BaseSmc; C:\Windows\System32\DRIVERS\smccard.sys [14592 2014-03-17] (OEM)
S3 RT-USB; C:\Windows\System32\drivers\RT-USB.SYS [59464 2010-06-16] (Ross-Tech LLC)
U5 UnlockerDriver5; C:\Users\Roman\Downloads\Unlocker-Portable_1.9.0\x86\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-14 19:23 - 2016-04-14 19:23 - 00011621 _____ C:\Users\Roman\Desktop\FRST.txt
2016-04-14 19:23 - 2016-04-14 19:23 - 00000000 ____D C:\FRST
2016-04-14 19:22 - 2016-04-14 19:22 - 01725952 _____ (Farbar) C:\Users\Roman\Desktop\FRST 32.exe
2016-04-14 19:20 - 2016-04-14 19:20 - 00029696 _____ C:\Users\Roman\AppData\Local\MSGBOX.EXE
2016-04-14 19:19 - 2016-04-14 19:22 - 00000000 ____D C:\Users\Roman\Viry
2016-04-12 15:32 - 2016-04-12 15:32 - 00099365 _____ C:\Users\Roman\Lonovo.pdf
2016-04-11 21:20 - 2016-04-11 21:20 - 00000569 _____ C:\Users\Roman\Desktop\nastavení deštového senzoru octavie - Hledat Googlem.url
2016-04-11 21:12 - 2016-04-11 21:12 - 00000317 _____ C:\Users\Roman\Desktop\Nastavení citlivosti dešťového senzoru VWGlobe.cz.url
2016-04-11 20:54 - 2016-04-11 20:54 - 00000344 _____ C:\Users\Roman\Desktop\Diskuzní fórum - T-Mobile.cz.url
2016-04-11 20:52 - 2016-04-11 20:52 - 00000390 _____ C:\Users\Roman\Desktop\Nastavení služby E-mail do SMS - T-Mobile.cz.url
2016-04-11 20:08 - 2016-04-11 20:08 - 00000000 ____D C:\Program Files\trend micro
2016-04-10 12:40 - 2016-04-10 12:40 - 00000273 _____ C:\Users\Roman\Desktop\Automatické přeposílání příchozích e-mailů na jiný účet - Nápověda Gmail.url
2016-04-10 11:54 - 2016-04-10 11:54 - 00000244 _____ C:\Users\Roman\Desktop\VIRY.CZ • Obsah.url
2016-04-10 11:02 - 2016-04-10 11:05 - 00000386 _____ C:\Users\Roman\Desktop\Nový textový dokument.txt
2016-04-10 10:50 - 2016-04-10 10:50 - 00000565 _____ C:\Users\Roman\Desktop\Příslušenství pro holicí strojky Philips RQ111-50 OKAY.cz.url
2016-04-10 10:49 - 2016-04-10 10:49 - 00000000 ____D C:\Users\Roman\inst OP COM 141204
2016-04-02 20:08 - 2016-04-02 20:08 - 00002640 _____ C:\Users\Roman\Desktop\Jak vypnout notifikaci Stáhnout si Windows 10 - poradna.url
2016-04-02 20:00 - 2016-02-05 20:44 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2016-04-02 20:00 - 2016-02-05 19:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2016-04-02 20:00 - 2016-02-02 20:48 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2016-04-02 20:00 - 2016-02-01 21:02 - 00105408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-04-02 20:00 - 2016-02-01 20:49 - 02364928 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-04-02 20:00 - 2016-02-01 20:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-04-02 20:00 - 2016-02-01 20:49 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-04-02 20:00 - 2016-02-01 20:45 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-04-02 20:00 - 2016-02-01 20:44 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-04-02 20:00 - 2016-01-21 02:51 - 00057280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2016-04-02 20:00 - 2015-12-16 20:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-04-02 20:00 - 2015-12-16 20:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2016-04-02 20:00 - 2015-12-16 20:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2016-04-02 20:00 - 2015-12-16 20:43 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2016-04-02 20:00 - 2015-06-03 22:22 - 00355456 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2016-04-02 19:31 - 2015-11-16 22:12 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-04-02 19:30 - 2016-02-09 08:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-04-02 19:30 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-02 19:30 - 2016-02-08 22:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-04-02 19:30 - 2016-02-08 22:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-04-02 19:30 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-04-02 19:30 - 2016-02-08 22:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-04-02 19:30 - 2016-02-08 22:38 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-04-02 19:30 - 2016-02-08 22:38 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-04-02 19:30 - 2016-02-08 22:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-04-02 19:30 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-02 19:30 - 2016-02-08 22:32 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-04-02 19:30 - 2016-02-08 22:31 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-04-02 19:30 - 2016-02-08 22:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-04-02 19:30 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-04-02 19:30 - 2016-02-08 22:28 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-04-02 19:30 - 2016-02-08 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-04-02 19:30 - 2016-02-08 22:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-04-02 19:30 - 2016-02-08 22:23 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-02 19:30 - 2016-02-08 22:20 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-04-02 19:30 - 2016-02-08 22:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-02 19:30 - 2016-02-08 22:15 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-04-02 19:30 - 2016-02-08 22:13 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-04-02 19:30 - 2016-02-08 22:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-04-02 19:30 - 2016-02-08 22:11 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-04-02 19:30 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-04-02 19:30 - 2016-02-08 22:10 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-04-02 19:30 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-04-02 19:30 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-02 19:30 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-04-02 19:30 - 2016-02-08 22:02 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-04-02 19:30 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-04-02 19:30 - 2016-02-08 22:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-04-02 19:30 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-04-02 19:30 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-04-02 19:30 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-04-02 19:30 - 2016-02-03 19:59 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-04-02 19:30 - 2016-01-22 08:06 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-04-02 19:30 - 2016-01-22 08:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-04-02 19:30 - 2016-01-22 08:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-04-02 19:30 - 2016-01-22 08:02 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-04-02 19:30 - 2016-01-22 08:02 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-04-02 19:30 - 2016-01-22 08:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
2016-04-02 19:30 - 2016-01-22 08:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 07:01 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-04-02 19:30 - 2016-01-22 06:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 06:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 06:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-02 19:30 - 2016-01-22 06:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-02 19:30 - 2015-12-08 23:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2016-04-02 19:30 - 2015-12-08 23:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2016-04-02 19:30 - 2015-12-08 23:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2016-04-02 19:30 - 2015-12-08 23:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2016-04-02 19:30 - 2015-12-08 23:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2016-04-02 19:30 - 2015-12-08 23:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2016-04-02 19:30 - 2015-12-08 23:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2016-04-02 19:30 - 2015-12-08 23:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2016-04-02 19:30 - 2015-12-08 23:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2016-04-02 19:30 - 2015-12-08 23:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-04-02 19:30 - 2015-12-08 23:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-04-02 19:30 - 2015-12-08 23:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2016-04-02 19:30 - 2015-12-08 23:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2016-04-02 19:30 - 2015-12-08 23:53 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2016-04-02 19:30 - 2015-12-08 23:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2016-04-02 19:30 - 2015-12-08 23:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-04-02 19:30 - 2015-12-08 23:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-04-02 19:30 - 2015-12-08 23:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-04-02 19:30 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2016-04-02 19:30 - 2015-12-08 23:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2016-04-02 19:30 - 2015-12-08 23:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2016-04-02 19:30 - 2015-12-08 23:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2016-04-02 19:30 - 2015-11-10 20:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-04-02 19:30 - 2015-11-10 20:39 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-04-02 19:30 - 2015-11-10 20:39 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-04-02 19:30 - 2015-11-05 21:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-04-02 19:30 - 2015-11-03 20:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2016-04-02 19:29 - 2016-02-12 20:39 - 02956288 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-04-02 19:29 - 2016-02-12 20:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-04-02 19:29 - 2016-02-12 20:26 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2016-04-02 19:29 - 2016-02-12 20:07 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-04-02 19:29 - 2016-02-12 20:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-04-02 19:29 - 2016-02-12 20:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-04-02 19:29 - 2016-02-12 20:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-04-02 19:29 - 2016-02-12 20:05 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-04-02 19:29 - 2016-02-12 20:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-04-02 19:29 - 2016-02-12 20:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-04-02 19:29 - 2016-02-12 20:05 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2016-04-02 19:29 - 2016-02-11 20:44 - 03994560 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-04-02 19:29 - 2016-02-11 20:44 - 03938240 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-04-02 19:29 - 2016-02-11 20:44 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-04-02 19:29 - 2016-02-11 20:44 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-04-02 19:29 - 2016-02-11 20:41 - 01310232 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-04-02 19:29 - 2016-02-11 20:38 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-04-02 19:29 - 2016-02-11 20:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-04-02 19:29 - 2016-02-11 20:37 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-04-02 19:29 - 2016-02-11 20:37 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-04-02 19:29 - 2016-02-11 20:37 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-04-02 19:29 - 2016-02-11 20:37 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-04-02 19:29 - 2016-02-11 20:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-04-02 19:29 - 2016-02-11 20:37 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-04-02 19:29 - 2016-02-11 20:35 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-04-02 19:29 - 2016-02-11 20:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-04-02 19:29 - 2016-02-11 20:35 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-04-02 19:29 - 2016-02-11 20:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-04-02 19:29 - 2016-02-11 20:33 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-02 19:29 - 2016-02-11 20:33 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-04-02 19:29 - 2016-02-11 20:31 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-04-02 19:29 - 2016-02-11 20:31 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-04-02 19:29 - 2016-02-11 20:30 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-04-02 19:29 - 2016-02-11 20:30 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-04-02 19:29 - 2016-02-11 20:30 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-04-02 19:29 - 2016-02-11 19:43 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-04-02 19:29 - 2016-02-11 19:37 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-04-02 19:29 - 2016-02-11 19:32 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-04-02 19:29 - 2016-02-11 19:32 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-04-02 19:29 - 2016-02-11 19:32 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-04-02 19:29 - 2016-02-11 19:31 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-04-02 19:29 - 2016-02-11 19:30 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-04-02 19:29 - 2016-02-11 19:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-04-02 19:29 - 2016-02-11 19:30 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-04-02 19:29 - 2016-02-04 19:46 - 02387456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-02 19:29 - 2016-01-22 08:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-04-02 19:29 - 2016-01-22 08:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-04-02 19:29 - 2016-01-22 07:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-04-02 19:29 - 2016-01-16 20:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-04-02 19:29 - 2016-01-07 19:35 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-04-02 19:29 - 2016-01-06 20:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-04-02 19:29 - 2016-01-06 19:56 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-04-02 19:29 - 2015-12-20 20:45 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-04-02 19:29 - 2015-12-20 20:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2016-04-02 19:29 - 2015-12-20 18:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-04-02 19:29 - 2015-12-11 20:35 - 00951808 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-04-02 19:29 - 2015-12-08 23:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2016-04-02 19:29 - 2015-12-08 23:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2016-04-02 19:29 - 2015-12-08 23:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2016-04-02 19:29 - 2015-12-08 23:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2016-04-02 19:29 - 2015-12-08 23:53 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2016-04-02 19:29 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2016-04-02 19:29 - 2015-12-08 23:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2016-04-02 19:29 - 2015-12-08 23:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2016-04-02 19:29 - 2015-12-08 23:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-04-02 19:29 - 2015-12-08 23:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2016-04-02 19:29 - 2015-12-08 23:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2016-04-02 19:29 - 2015-12-08 23:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-04-02 19:29 - 2015-12-08 23:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-04-02 19:29 - 2015-12-08 23:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2016-04-02 19:29 - 2015-12-08 23:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-04-02 19:29 - 2015-12-08 23:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2016-04-02 19:29 - 2015-12-08 23:11 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2016-04-02 19:29 - 2015-12-08 23:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2016-04-02 19:29 - 2015-11-19 16:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-04-02 19:29 - 2015-11-19 16:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-04-02 19:29 - 2015-11-11 20:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-04-02 19:29 - 2015-11-11 20:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2016-04-02 19:28 - 2016-02-09 11:51 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-04-02 19:28 - 2016-02-09 11:51 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-04-02 19:28 - 2016-02-09 11:50 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-04-02 19:28 - 2016-02-09 11:13 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-04-02 19:28 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-04-02 19:28 - 2016-02-09 11:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-04-02 19:28 - 2016-02-05 20:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-04-02 19:28 - 2016-02-05 20:44 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-04-02 19:28 - 2016-02-05 20:42 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-04-02 19:28 - 2016-02-05 19:43 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-04-02 19:28 - 2016-02-05 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-04-02 19:28 - 2016-02-04 20:41 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-04-02 19:28 - 2016-02-03 20:49 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-04-02 19:28 - 2016-02-03 20:49 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-04-02 19:28 - 2016-02-03 20:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-04-02 19:28 - 2016-01-11 20:54 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-04-02 19:28 - 2015-12-08 23:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2016-04-02 19:28 - 2015-12-08 23:53 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-04-02 19:28 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2016-04-02 19:28 - 2015-11-14 00:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2016-04-02 19:28 - 2015-11-14 00:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2016-04-02 19:28 - 2015-11-05 21:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2016-04-02 19:28 - 2015-11-05 11:48 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2016-04-02 19:28 - 2015-11-03 20:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-04-01 13:33 - 2016-04-01 13:33 - 00019723 _____ C:\Users\Roman\Java PrintingserviF Hyl renault Thalia 01.pdf
2016-04-01 12:35 - 2016-04-01 12:35 - 36609852 _____ C:\Users\Roman\diagnosis.and.troubleshooting.of.automotive.electrical.electronic.and.computer.systems.pdf
2016-03-31 18:29 - 2016-03-31 18:29 - 00001815 _____ C:\Users\Roman\Desktop\Volkswagen Touran TDI 77 KW Trendline -DPH-2012 - Jindřichův Hradec, prodám.url
2016-03-30 20:07 - 2016-03-30 20:09 - 00002397 _____ C:\Users\Roman\Desktop\Heavy Duty Vehicles (New VCI).lnk
2016-03-30 19:57 - 2016-03-30 20:00 - 00002367 _____ C:\Users\Roman\Desktop\car (New VCI).lnk
2016-03-30 17:02 - 2016-04-01 10:42 - 00000000 __SHD C:\Users\Roman\AppData\Roaming\wyUpdate AU
2016-03-22 20:33 - 2016-03-22 20:33 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2016-03-22 20:32 - 2016-03-22 20:33 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-14 19:22 - 2014-02-27 19:24 - 00000000 ____D C:\Users\Roman
2016-04-14 17:44 - 2009-07-14 06:34 - 00021312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-14 17:44 - 2009-07-14 06:34 - 00021312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-14 17:40 - 2011-04-12 03:37 - 00634546 _____ C:\Windows\system32\perfh005.dat
2016-04-14 17:40 - 2011-04-12 03:37 - 00123104 _____ C:\Windows\system32\perfc005.dat
2016-04-14 17:40 - 2010-11-20 23:01 - 01478586 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-14 17:40 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2016-04-14 17:36 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-14 16:41 - 2009-07-14 06:53 - 00032552 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-04-09 15:38 - 2009-07-14 06:33 - 00411000 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-02 20:16 - 2015-05-16 10:36 - 00000000 ____D C:\Windows\system32\appraiser
2016-04-02 20:16 - 2014-04-26 09:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-04-02 20:04 - 2009-07-14 06:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-04-02 19:51 - 2011-04-12 03:46 - 00000000 ____D C:\Program Files\Windows Journal
2016-04-02 19:37 - 2014-03-01 12:09 - 00000000 ____D C:\Windows\system32\MRT
2016-04-02 19:33 - 2014-03-01 12:09 - 141270216 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-04-01 13:35 - 2014-05-09 16:40 - 00000000 ____D C:\Program Files\wow
2016-03-30 18:24 - 2014-03-26 22:33 - 00000000 ____D C:\ProgramData\Autocom
2016-03-30 18:23 - 2014-03-26 22:33 - 00000000 ____D C:\Users\Roman\AppData\Roaming\Autocom
2016-03-30 18:02 - 2014-03-06 21:21 - 00000000 ____D C:\Program Files\Autocom
2016-03-30 17:25 - 2014-03-15 21:25 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-03-30 17:25 - 2014-03-15 21:25 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-03-30 17:01 - 2014-03-17 17:13 - 00000000 ____D C:\Users\Roman\AppData\Roaming\Delphi
2016-03-30 16:58 - 2014-03-06 21:32 - 00000000 ____D C:\Program Files\Delphi Diagnostics

==================== Files in the root of some directories =======

2016-04-14 19:20 - 2016-04-14 19:20 - 0029696 _____ () C:\Users\Roman\AppData\Local\MSGBOX.EXE
2014-03-08 14:27 - 2014-11-23 15:21 - 0000677 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2014-11-08 11:08 - 2014-11-08 11:08 - 0000060 _____ () C:\ProgramData\Sls.ini

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-04-10 12:24

==================== End of FRST.txt ============================

[Rudy]

Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

[ROMIK]

# AdwCleaner v5.111 - Log soubor vytvořen 14/04/2016 o 19:57:53
# Aktualizováno 14/04/2016 by Xplode
# Databáze : 2016-04-11.4 [Server]
# Operační systém : Windows 7 Professional Service Pack 1 (X86)
# Jméno uživatele : Roman - LATITUDE
# Spuštěno z : C:\Users\Roman\Desktop\adwcleaner_5.111.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****


***** [ Složky ] *****


***** [ Soubory ] *****


***** [ DLLs ] *****


***** [ Zástupci ] *****


***** [ Naplánované úkoly ] *****


***** [ Registr ] *****


***** [ Webové prohlížeče ] *****


*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno
:: Chrome preferences reset : C:\Users\Roman\AppData\Local\Google\Chrome\User Data\Default

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [858 bytes] - [14/04/2016 19:57:53]
C:\AdwCleaner\AdwCleaner[S1].txt - [809 bytes] - [14/04/2016 19:56:16]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1002 bytes] ##########

[Rudy]

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Pravděpodobně váš problém nebude mít s malware nic společného.

[ROMIK]

Fix result of Farbar Recovery Scan Tool (x86) Version:13-04-2016
Ran by Roman (2016-04-15 15:43:23) Run:1
Running from C:\Users\Roman\Desktop
Loaded Profiles: Roman (Available Profiles: Roman)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
End
*****************

"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully.

==== End of Fixlog 15:43:23 ====

[Rudy]

Smazáno. Pokud se nic nezměnilo, na zkoušku vypněte aut. aktualizace, příp. přeinstalujte antivir.

[ROMIK]

Aktualizace mám na ručně ,sice našlo mi to nějaké aktualizace odklikl jsem ale když dám stáhnout a instalovat tak to nestahuje jen dokola lítá ten zelený pruh.
Ještě mně napadlo,končí mi licence NOD 32 a čekám na novou on pořád upozrnuje na konec.

[Rudy]

OK. Zkuste ho odinstalovat, příp. nainstalujte jiný.

[ROMIK]

Takže pro všechny ,dělaly to aktualizace ktere win vyhledal aniž bych mněl zapnute automatické aktualizace.
Dnes se mi konečně podařilo stahnou a nainstalovat a zatím je vše OK.

[Rudy]

Díky za info.