VIRY.CZ

Myslel som krok 4. ale už ho mam. Ako som pustil ten combofix, v tej modrej tabuľke je uz asi 5 minút napísané Do not run any programs until combofix has finished. Je to normálne?

Je to varovani, ze nemate spouste zadne programy, dokud CF neskonci. Pokud jde o cas, sken muze v nekterych pripadech trvat i hodinu (nekdy i vic). Ja samozrejme odsud neposoudim, jestli se seknul, nebo pracuje

Pokud si myslite, ze je kousnuty, vypnete ho a zkuste ho spustit v nouzovem rezimu.

No, trvalo to skoro 30 minút, ale už to je, prikladám sem log, je celkom dlhý :/ Snáď to nie je také zlé

ComboFix 14-07-12.02 - Dávid . 07. 2014 9:25.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.4079.2237 [GMT 2:00]
Running from: c:\users\Dßvid\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET personal firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Java\jre7\bin\jp2ssv.dll
C:\Thumbs.db
c:\users\Dávid\AppData\Roaming\igfxsrvc.exe
c:\users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1870c11b1a88b14592fa259b0363cf46.exe
c:\users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6b5d90dd4a1d21b2867e772e041e898c.exe
c:\windows\msxml4-KB954430-enu.LOG
c:\windows\msxml4-KB973688-enu.LOG
.
.
((((((((((((((((((((((((( Files Created from 2014-06-12 to 2014-07-12 )))))))))))))))))))))))))))))))
.
.
2014-07-12 07:38 . 2014-07-12 07:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-07-12 07:30 . 2014-07-12 07:30 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F301C28-8885-4B24-BF98-BF971D1166E0}\offreg.dll
2014-07-11 11:42 . 2014-07-12 07:22 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-07-11 11:41 . 2014-07-11 11:41 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-07-11 11:41 . 2014-07-11 11:41 -------- d-----w- c:\programdata\Malwarebytes
2014-07-11 11:41 . 2014-05-12 05:26 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-07-11 11:41 . 2014-05-12 05:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-07-11 11:41 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-07-11 09:32 . 2014-07-11 09:33 -------- d-----w- C:\rsit
2014-07-11 09:32 . 2014-07-11 09:33 -------- d-----w- c:\program files\trend micro
2014-07-11 09:14 . 2014-06-05 10:54 10779000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F301C28-8885-4B24-BF98-BF971D1166E0}\mpengine.dll
2014-07-10 05:49 . 2014-05-08 09:32 3178496 ----a-w- c:\windows\system32\rdpcorets.dll
2014-07-10 05:49 . 2014-05-08 09:32 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-10 05:49 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-07-10 05:49 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll
2014-07-09 13:40 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-09 13:40 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2014-07-09 13:40 . 2012-08-23 14:13 243200 ----a-w- c:\windows\system32\rdpudd.dll
2014-07-09 13:40 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2014-07-09 13:37 . 2013-09-25 02:23 1030144 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-07-09 13:37 . 2013-09-25 01:57 792576 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-07-09 13:37 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2014-07-09 13:37 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-07-09 08:07 . 2014-06-20 20:14 293048 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2014-07-09 08:07 . 2014-06-19 01:39 23464448 ----a-w- c:\windows\system32\mshtml.dll
2014-07-09 08:07 . 2014-06-19 00:14 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 08:07 . 2014-06-18 23:50 977408 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-07-09 08:07 . 2014-06-05 14:45 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-07-09 08:07 . 2014-06-05 14:26 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-07-09 08:07 . 2014-06-05 14:25 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-07-07 19:51 . 2014-07-07 19:51 -------- d-----w- c:\program files (x86)\miinecraft
2014-06-29 15:00 . 2014-06-29 15:00 -------- d-----w- c:\programdata\Oracle
2014-06-29 15:00 . 2014-06-29 15:00 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-06-29 14:59 . 2014-06-29 14:59 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-06-29 14:59 . 2014-06-29 14:59 -------- d-----w- c:\program files (x86)\Java
2014-06-27 09:39 . 2014-06-27 09:39 -------- d-----w- c:\program files\Common Files\Apple
2014-06-27 09:39 . 2014-06-27 09:39 -------- d-----w- c:\program files (x86)\Common Files\Apple
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\program files (x86)\Apple Software Update
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\program files\Bonjour
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\program files (x86)\Bonjour
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\programdata\Apple
2014-06-25 18:26 . 2014-06-25 18:26 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2014-06-24 11:41 . 2014-06-16 11:13 43320 ----a-w- c:\windows\system32\uxtuneup.dll
2014-06-24 11:41 . 2014-06-16 11:13 36152 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2014-06-23 05:00 . 2009-03-18 16:35 33856 ---ha-w- c:\windows\system32\hamachi.sys
2014-06-20 11:46 . 2014-06-20 11:47 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-06-20 11:43 . 2014-06-20 11:43 -------- d-----w- c:\program files\Adobe
2014-06-20 11:38 . 2014-06-20 11:45 -------- d-----w- c:\program files\Common Files\Adobe
2014-06-20 11:24 . 2014-06-22 12:36 -------- d-----w- c:\programdata\Package Cache
2014-06-20 11:22 . 2014-06-20 11:45 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2014-06-17 14:51 . 2014-06-17 14:51 -------- d-----w- c:\program files\Microsoft Xbox 360 Accessories
2014-06-17 14:28 . 2014-06-17 14:28 -------- d-----w- c:\programdata\Origin
2014-06-17 14:25 . 2014-06-17 14:25 -------- d-----w- c:\programdata\Electronic Arts
2014-06-17 12:03 . 2014-06-17 13:41 -------- d-----w- c:\program files (x86)\FIFA 14
2014-06-17 12:01 . 2014-07-02 13:18 -------- d-----w- c:\program files (x86)\VNT
2014-06-17 12:01 . 2014-06-17 12:01 -------- d-----w- c:\programdata\AskPartnerNetwork
2014-06-17 12:01 . 2014-06-17 12:01 -------- d-----w- c:\program files (x86)\AskPartnerNetwork
2014-06-17 12:00 . 2014-06-17 12:00 -------- d-----w- c:\programdata\APN
2014-06-16 14:12 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2014-06-16 14:12 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2014-06-16 14:12 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2014-06-16 14:12 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2014-06-16 14:12 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-06-16 14:12 . 2013-12-24 22:48 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-06-16 14:12 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-06-16 14:12 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-06-16 14:12 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-06-16 14:12 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-06-16 14:12 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2014-06-16 14:12 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2014-06-16 13:56 . 2014-07-09 13:49 -------- d-s---w- c:\windows\system32\CompatTel
2014-06-16 13:48 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-06-16 13:48 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-06-16 13:48 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-06-16 13:48 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-06-16 13:48 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-06-16 13:40 . 2014-06-16 13:40 -------- d-----w- c:\windows\Migration
2014-06-16 13:36 . 2013-10-14 16:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-06-16 13:29 . 2014-06-16 13:29 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 05:43 . 2014-01-28 02:32 228864 ----a-w- c:\windows\system32\wwansvc.dll
2014-06-16 05:42 . 2014-04-25 02:34 801280 ----a-w- c:\windows\system32\usp10.dll
2014-06-16 05:41 . 2014-03-04 09:47 5550016 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-06-16 05:40 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2014-06-16 05:36 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2014-06-16 05:05 . 2014-06-16 05:05 -------- d-----w- c:\windows\system32\SPReview
2014-06-16 05:05 . 2014-06-16 05:05 -------- d-----w- c:\windows\system32\EventProviders
2014-06-16 01:40 . 2010-11-20 13:33 299392 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll
2014-06-16 01:39 . 2010-11-20 13:27 21504 ----a-w- c:\windows\system32\TRAPI.dll
2014-06-16 01:37 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2014-06-16 01:37 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2014-06-16 01:37 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2014-06-16 01:00 . 2014-06-16 01:00 -------- d-----w- c:\program files (x86)\MSXML 4.0
2014-06-15 20:14 . 2014-06-15 20:14 -------- d-----w- c:\programdata\LogMeIn
2014-06-15 19:19 . 2014-06-15 19:19 -------- d-----w- c:\programdata\Recovery
2014-06-15 19:07 . 2014-06-15 19:07 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2014-06-15 19:05 . 2014-07-09 13:42 -------- d-----w- c:\windows\system32\MRT
2014-06-15 19:04 . 2014-06-15 19:04 -------- d-----w- c:\program files\WinRAR
2014-06-15 18:50 . 2014-06-15 18:50 -------- d-----w- c:\program files (x86)\EA Sports
2014-06-15 14:14 . 2014-07-01 15:20 -------- d-----w- c:\program files (x86)\Hearthstone
2014-06-15 14:06 . 2014-07-11 15:01 -------- d-----w- c:\program files (x86)\Battle.net
2014-06-15 14:06 . 2014-06-15 14:14 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2014-06-15 14:06 . 2014-06-15 14:06 -------- d-----w- c:\programdata\Blizzard Entertainment
2014-06-15 14:05 . 2014-06-15 14:05 -------- d-----w- c:\programdata\Battle.net
2014-06-15 13:57 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-06-15 13:57 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-06-15 13:57 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-06-15 13:57 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-06-15 13:57 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-06-15 13:57 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-06-15 13:57 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-06-15 13:57 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-06-15 13:57 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-06-15 13:57 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-06-15 13:43 . 2014-06-15 13:43 -------- d-----w- c:\programdata\HP
2014-06-15 13:43 . 2010-10-13 10:02 323584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\hpcpp103.dll
2014-06-15 13:42 . 2010-09-19 13:51 193592 ----a-w- c:\windows\system32\hppdcompio.dll
2014-06-15 13:42 . 2010-09-19 13:51 167480 ----a-w- c:\windows\SysWow64\hppccompio.dll
2014-06-15 13:42 . 2010-10-13 10:02 176640 ----a-w- c:\windows\system32\hpcpn103.dll
2014-06-15 13:42 . 2010-02-11 08:19 491008 ----a-w- c:\windows\SysWow64\hpcdmc32.dll
2014-06-15 13:42 . 2010-10-13 09:57 305664 ----a-w- c:\windows\SysWow64\hpcc3103.dll
2014-06-15 13:35 . 2014-06-15 13:35 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2014-06-15 13:35 . 2014-06-15 13:35 -------- d-----w- c:\program files (x86)\Microsoft Sync Framework
2014-06-15 13:33 . 2014-06-15 13:33 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2014-06-15 13:33 . 2014-06-15 13:33 -------- d-----w- c:\program files\Microsoft Office
2014-06-15 13:33 . 2014-06-15 13:33 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-12 07:23 . 2014-07-10 05:45 20626 ----a-w- c:\users\Dávid\AppData\Roaming\igfxsrvc.exe.tmp
2014-07-12 07:23 . 2014-07-10 05:45 20626 ----a-w- c:\users\Dávid\AppData\Roaming\igfxsrvc.exe.tmp
2014-06-16 13:31 . 2014-06-16 13:31 208384 ----a-w- c:\windows\SysWow64\webcheck.dll
2014-06-16 13:31 . 2014-06-16 13:31 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-06-16 05:13 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2014-06-16 05:13 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2014-06-15 09:24 . 2010-06-24 18:33 23264 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-05-23 11:02 . 2014-05-23 11:02 136704 ----a-w- c:\windows\SysWow64\RzVAD.dll
2014-05-23 10:34 . 2014-05-23 10:34 32768 ----a-w- c:\windows\system32\drivers\RzMaelstromVAD.sys
2014-05-23 10:31 . 2014-05-23 10:31 245760 ----a-w- c:\windows\system32\DriverInstallCACMD.exe
2014-05-23 10:31 . 2014-05-23 10:31 69632 ----a-w- c:\windows\system32\DriverInstallCA.dll
2014-05-20 02:44 . 2011-03-30 20:26 31520 ----a-w- c:\windows\system32\nvhdap64.dll
2014-05-20 02:44 . 2011-03-30 20:26 197408 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2014-05-20 01:25 . 2010-08-09 06:12 6769096 ----a-w- c:\windows\system32\nvcpl.dll
2014-05-20 01:25 . 2010-08-09 06:12 3514144 ----a-w- c:\windows\system32\nvsvc64.dll
2014-05-20 01:25 . 2010-08-09 06:12 927520 ----a-w- c:\windows\system32\nvvsvc.exe
2014-05-20 01:25 . 2010-08-09 06:12 62808 ----a-w- c:\windows\system32\nvshext.dll
2014-05-20 01:25 . 2010-08-09 06:12 387528 ----a-w- c:\windows\system32\nvmctray.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-05-08 21445248]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"Spotify"="c:\users\Dávid\AppData\Roaming\Spotify\Spotify.exe" [2014-07-07 6162488]
"Spotify Web Helper"="c:\users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-07-07 1178168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2010-09-28 664600]
"BATINDICATOR"="c:\program files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe" [2009-05-08 2068992]
"LaunchHPOSIAPP"="c:\program files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe" [2009-04-04 385024]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2010-08-30 61112]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-05-31 585048]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2014-06-25 1956760]
"VNT"="c:\program files (x86)\VNT\vntldr.exe" [2014-06-25 196504]
"Adobe Creative Cloud"="c:\program files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2014-05-26 2688920]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-06-23 3816272]
.
c:\users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Curse.lnk - c:\users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe /startup [2014-7-3 8492296]
Obrazovková spinka a spúšťač programu OneNote 2010.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2010-3-29 227712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"HP Software Update"=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 APNMCP;Ask Update Service;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
R4 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
R4 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
R4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R4 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R4 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE\drivers\RzMaelstromVAD.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-15 09:43 1091912 ----a-w- c:\program files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-15 09:43]
.
2014-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf8b583d8bd57f.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-15 09:43]
.
2014-07-09 c:\windows\Tasks\HPCeeScheduleForDAVIDPC$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
2014-07-08 c:\windows\Tasks\HPCeeScheduleForDávid.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2014-05-23 00:10 671904 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2014-05-23 00:10 671904 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2014-05-23 00:10 671904 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2010-09-15 611896]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-30 2199840]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-02-24 5581888]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-02-27 558496]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-04-24 1425408]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.bing.com?pc=HPDTDF
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xportovať do programu Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&oslať do programu OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
Wow6432Node-HKCU-Run-1870c11b1a88b14592fa259b0363cf46 - c:\users\Dávid\AppData\Roaming\igfxsrvc.exe
Wow6432Node-HKCU-Run-Systeme d’exploitation Microsoft® Windows® - c:\users\Dávid\AppData\Local\Temp\.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
AddRemove-{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8} - c:\program files (x86)\InstallShield Installation Information\{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8}\setup.exe
.
.
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Systčme d’exploitation Microsoft® Windows®"="c:\\Users\\Dávid\\AppData\\Local\\Temp\\.exe"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-07-12 09:59:44
ComboFix-quarantined-files.txt 2014-07-12 07:59
.
Pre-Run: 851 368 292 352 bytes free
Post-Run: 851 261 620 224 bytes free
.
- - End Of File - - D458CF28EA96F7560D49FFF9107BA062

Vypnete trvale Windows Defender



Presunte ComboFix primo na disk C (takze cesta k nemu bude c:\ComboFix.exe )!
Otevrete si poznamkovy blok a zkopirujte do nej tento skript Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte take primo na C (takze cesta k nemu bude c:\CFScript.txt ).
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

Prikladám log z ComboFix

ComboFix 14-07-12.02 - Dávid . 07. 2014 10:44:54.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.4079.1301 [GMT 2:00]
Running from: c:\users\Dßvid\Desktop\ComboFix.exe
Command switches used :: C:\CFScript.txt
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET personal firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\\Users\\Dávid\\AppData\\Local\\Temp\\.exe"
"c:\users\Dávid\AppData\Local\Temp\.exe"
"c:\users\Dávid\AppData\Local\Temp\svchost.exe"
"c:\users\Dávid\AppData\Roaming\igfxsrvc.exe.tmp"
"c:\users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ba4c12bee3027d94da5c81db2d196bfd.exe"
"c:\windows\inf\mncpags\mncpags.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_APNMCP
-------\Service_c2cautoupdatesvc
-------\Service_c2cpnrsvc
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Files Created from 2014-06-12 to 2014-07-12 )))))))))))))))))))))))))))))))
.
.
2014-07-12 08:57 . 2014-07-12 08:57 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-07-11 11:42 . 2014-07-12 09:01 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-07-11 11:41 . 2014-07-11 11:41 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-07-11 11:41 . 2014-07-11 11:41 -------- d-----w- c:\programdata\Malwarebytes
2014-07-11 11:41 . 2014-05-12 05:26 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-07-11 11:41 . 2014-05-12 05:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-07-11 11:41 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-07-11 09:32 . 2014-07-11 09:33 -------- d-----w- C:\rsit
2014-07-11 09:32 . 2014-07-11 09:33 -------- d-----w- c:\program files\trend micro
2014-07-11 09:14 . 2014-06-05 10:54 10779000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F301C28-8885-4B24-BF98-BF971D1166E0}\mpengine.dll
2014-07-10 05:49 . 2014-05-08 09:32 3178496 ----a-w- c:\windows\system32\rdpcorets.dll
2014-07-10 05:49 . 2014-05-08 09:32 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-10 05:49 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-07-10 05:49 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll
2014-07-09 13:40 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-09 13:40 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2014-07-09 13:40 . 2012-08-23 14:13 243200 ----a-w- c:\windows\system32\rdpudd.dll
2014-07-09 13:40 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2014-07-09 13:37 . 2013-09-25 02:23 1030144 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-07-09 13:37 . 2013-09-25 01:57 792576 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-07-09 13:37 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2014-07-09 13:37 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-07-09 08:07 . 2014-06-20 20:14 293048 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2014-07-09 08:07 . 2014-06-19 01:39 23464448 ----a-w- c:\windows\system32\mshtml.dll
2014-07-09 08:07 . 2014-06-19 00:14 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 08:07 . 2014-06-18 23:50 977408 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2014-07-09 08:07 . 2014-06-05 14:45 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-07-09 08:07 . 2014-06-05 14:26 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-07-09 08:07 . 2014-06-05 14:25 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-06-29 15:00 . 2014-06-29 15:00 -------- d-----w- c:\programdata\Oracle
2014-06-29 15:00 . 2014-06-29 15:00 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-06-29 14:59 . 2014-06-29 14:59 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-06-29 14:59 . 2014-06-29 14:59 -------- d-----w- c:\program files (x86)\Java
2014-06-27 09:39 . 2014-06-27 09:39 -------- d-----w- c:\program files\Common Files\Apple
2014-06-27 09:39 . 2014-06-27 09:39 -------- d-----w- c:\program files (x86)\Common Files\Apple
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\program files (x86)\Apple Software Update
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\program files\Bonjour
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\program files (x86)\Bonjour
2014-06-27 09:38 . 2014-06-27 09:38 -------- d-----w- c:\programdata\Apple
2014-06-25 18:26 . 2014-06-25 18:26 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi
2014-06-24 11:41 . 2014-06-16 11:13 43320 ----a-w- c:\windows\system32\uxtuneup.dll
2014-06-24 11:41 . 2014-06-16 11:13 36152 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2014-06-23 05:00 . 2009-03-18 16:35 33856 ---ha-w- c:\windows\system32\hamachi.sys
2014-06-20 11:46 . 2014-06-20 11:47 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2014-06-20 11:43 . 2014-06-20 11:43 -------- d-----w- c:\program files\Adobe
2014-06-20 11:38 . 2014-06-20 11:45 -------- d-----w- c:\program files\Common Files\Adobe
2014-06-20 11:24 . 2014-06-22 12:36 -------- d-----w- c:\programdata\Package Cache
2014-06-20 11:22 . 2014-06-20 11:45 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2014-06-17 14:51 . 2014-06-17 14:51 -------- d-----w- c:\program files\Microsoft Xbox 360 Accessories
2014-06-17 14:28 . 2014-06-17 14:28 -------- d-----w- c:\programdata\Origin
2014-06-17 14:25 . 2014-06-17 14:25 -------- d-----w- c:\programdata\Electronic Arts
2014-06-17 12:03 . 2014-06-17 13:41 -------- d-----w- c:\program files (x86)\FIFA 14
2014-06-17 12:01 . 2014-07-02 13:18 -------- d-----w- c:\program files (x86)\VNT
2014-06-17 12:01 . 2014-06-17 12:01 -------- d-----w- c:\programdata\AskPartnerNetwork
2014-06-17 12:01 . 2014-06-17 12:01 -------- d-----w- c:\program files (x86)\AskPartnerNetwork
2014-06-17 12:00 . 2014-06-17 12:00 -------- d-----w- c:\programdata\APN
2014-06-16 14:12 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2014-06-16 14:12 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2014-06-16 14:12 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2014-06-16 14:12 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2014-06-16 14:12 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-06-16 14:12 . 2013-12-24 22:48 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-06-16 14:12 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-06-16 14:12 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-06-16 14:12 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-06-16 14:12 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-06-16 14:12 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2014-06-16 14:12 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2014-06-16 13:56 . 2014-07-09 13:49 -------- d-s---w- c:\windows\system32\CompatTel
2014-06-16 13:48 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-06-16 13:48 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-06-16 13:48 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-06-16 13:48 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-06-16 13:48 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-06-16 13:40 . 2014-06-16 13:40 -------- d-----w- c:\windows\Migration
2014-06-16 13:36 . 2013-10-14 16:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-06-16 13:29 . 2014-06-16 13:29 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 05:43 . 2014-01-28 02:32 228864 ----a-w- c:\windows\system32\wwansvc.dll
2014-06-16 05:42 . 2014-04-25 02:34 801280 ----a-w- c:\windows\system32\usp10.dll
2014-06-16 05:41 . 2014-03-04 09:47 5550016 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-06-16 05:40 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2014-06-16 05:36 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2014-06-16 05:05 . 2014-06-16 05:05 -------- d-----w- c:\windows\system32\SPReview
2014-06-16 05:05 . 2014-06-16 05:05 -------- d-----w- c:\windows\system32\EventProviders
2014-06-16 01:40 . 2010-11-20 13:33 299392 ----a-w- c:\windows\system32\mcupdate_GenuineIntel.dll
2014-06-16 01:39 . 2010-11-20 13:27 21504 ----a-w- c:\windows\system32\TRAPI.dll
2014-06-16 01:37 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2014-06-16 01:37 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2014-06-16 01:37 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll
2014-06-16 01:00 . 2014-06-16 01:00 -------- d-----w- c:\program files (x86)\MSXML 4.0
2014-06-15 20:14 . 2014-06-15 20:14 -------- d-----w- c:\programdata\LogMeIn
2014-06-15 19:19 . 2014-06-15 19:19 -------- d-----w- c:\programdata\Recovery
2014-06-15 19:07 . 2014-06-15 19:07 178800 ----a-w- c:\windows\SysWow64\CmdLineExt_x64.dll
2014-06-15 19:05 . 2014-07-09 13:42 -------- d-----w- c:\windows\system32\MRT
2014-06-15 19:04 . 2014-06-15 19:04 -------- d-----w- c:\program files\WinRAR
2014-06-15 18:50 . 2014-06-15 18:50 -------- d-----w- c:\program files (x86)\EA Sports
2014-06-15 14:14 . 2014-07-01 15:20 -------- d-----w- c:\program files (x86)\Hearthstone
2014-06-15 14:06 . 2014-07-11 15:01 -------- d-----w- c:\program files (x86)\Battle.net
2014-06-15 14:06 . 2014-06-15 14:14 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2014-06-15 14:06 . 2014-06-15 14:06 -------- d-----w- c:\programdata\Blizzard Entertainment
2014-06-15 14:05 . 2014-06-15 14:05 -------- d-----w- c:\programdata\Battle.net
2014-06-15 13:57 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-06-15 13:57 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-06-15 13:57 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-06-15 13:57 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-06-15 13:57 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-06-15 13:57 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-06-15 13:57 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-06-15 13:57 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-06-15 13:57 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-06-15 13:57 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-06-15 13:43 . 2014-06-15 13:43 -------- d-----w- c:\programdata\HP
2014-06-15 13:43 . 2010-10-13 10:02 323584 ----a-w- c:\windows\system32\Spool\prtprocs\x64\hpcpp103.dll
2014-06-15 13:42 . 2010-09-19 13:51 193592 ----a-w- c:\windows\system32\hppdcompio.dll
2014-06-15 13:42 . 2010-09-19 13:51 167480 ----a-w- c:\windows\SysWow64\hppccompio.dll
2014-06-15 13:42 . 2010-10-13 10:02 176640 ----a-w- c:\windows\system32\hpcpn103.dll
2014-06-15 13:42 . 2010-02-11 08:19 491008 ----a-w- c:\windows\SysWow64\hpcdmc32.dll
2014-06-15 13:42 . 2010-10-13 09:57 305664 ----a-w- c:\windows\SysWow64\hpcc3103.dll
2014-06-15 13:35 . 2014-06-15 13:35 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
2014-06-15 13:35 . 2014-06-15 13:35 -------- d-----w- c:\program files (x86)\Microsoft Sync Framework
2014-06-15 13:33 . 2014-06-15 13:33 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2014-06-15 13:33 . 2014-06-15 13:33 -------- d-----w- c:\program files\Microsoft Office
2014-06-15 13:33 . 2014-06-15 13:33 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2014-06-15 13:32 . 2014-06-15 13:37 -------- d-----w- c:\programdata\Microsoft Help
2014-06-15 13:31 . 2014-06-15 13:31 -------- d-----r- C:\MSOCache
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-12 07:23 . 2014-07-10 05:45 20626 ----a-w- c:\users\Dávid\AppData\Roaming\igfxsrvc.exe.tmp
2014-07-12 07:23 . 2014-07-10 05:45 20626 ----a-w- c:\users\Dávid\AppData\Roaming\igfxsrvc.exe.tmp
2014-06-16 13:31 . 2014-06-16 13:31 208384 ----a-w- c:\windows\SysWow64\webcheck.dll
2014-06-16 13:31 . 2014-06-16 13:31 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-06-16 05:13 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2014-06-16 05:13 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2014-06-15 09:24 . 2010-06-24 18:33 23264 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-05-23 11:02 . 2014-05-23 11:02 136704 ----a-w- c:\windows\SysWow64\RzVAD.dll
2014-05-23 10:34 . 2014-05-23 10:34 32768 ----a-w- c:\windows\system32\drivers\RzMaelstromVAD.sys
2014-05-23 10:31 . 2014-05-23 10:31 245760 ----a-w- c:\windows\system32\DriverInstallCACMD.exe
2014-05-23 10:31 . 2014-05-23 10:31 69632 ----a-w- c:\windows\system32\DriverInstallCA.dll
2014-05-20 02:44 . 2011-03-30 20:26 31520 ----a-w- c:\windows\system32\nvhdap64.dll
2014-05-20 02:44 . 2011-03-30 20:26 197408 ----a-w- c:\windows\system32\drivers\nvhda64v.sys
2014-05-20 01:25 . 2010-08-09 06:12 6769096 ----a-w- c:\windows\system32\nvcpl.dll
2014-05-20 01:25 . 2010-08-09 06:12 3514144 ----a-w- c:\windows\system32\nvsvc64.dll
2014-05-20 01:25 . 2010-08-09 06:12 927520 ----a-w- c:\windows\system32\nvvsvc.exe
2014-05-20 01:25 . 2010-08-09 06:12 62808 ----a-w- c:\windows\system32\nvshext.dll
2014-05-20 01:25 . 2010-08-09 06:12 387528 ----a-w- c:\windows\system32\nvmctray.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"Spotify"="c:\users\Dávid\AppData\Roaming\Spotify\Spotify.exe" [2014-07-07 6162488]
"Spotify Web Helper"="c:\users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-07-07 1178168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BATINDICATOR"="c:\program files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe" [2009-05-08 2068992]
"LaunchHPOSIAPP"="c:\program files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe" [2009-04-04 385024]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2010-08-30 61112]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-06-23 3816272]
.
c:\users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Curse.lnk - c:\users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe /startup [2014-7-3 8492296]
Obrazovková spinka a spúšťač programu OneNote 2010.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2010-3-29 227712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
R4 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
R4 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE\drivers\RzMaelstromVAD.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-15 09:43 1091912 ----a-w- c:\program files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-15 09:43]
.
2014-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cf8b583d8bd57f.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-06-15 09:43]
.
2014-07-09 c:\windows\Tasks\HPCeeScheduleForDAVIDPC$.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
2014-07-08 c:\windows\Tasks\HPCeeScheduleForDávid.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2014-05-23 00:10 671904 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2014-05-23 00:10 671904 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2014-05-23 00:10 671904 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2010-09-15 611896]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-30 2199840]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-02-24 5581888]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-04-24 1425408]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xportovať do programu Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&oslať do programu OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
AddRemove-{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8} - c:\program files (x86)\InstallShield Installation Information\{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
------------------------ Other Running Processes ------------------------
.
c:\windows\SysWOW64\ezSharedSvcHost.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
c:\program files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe
c:\program files (x86)\Malwarebytes Anti-Malware\mbam.exe
c:\users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe
c:\program files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
c:\program files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe
c:\users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Completion time: 2014-07-12 11:22:38 - machine was rebooted
ComboFix-quarantined-files.txt 2014-07-12 09:22
ComboFix2.txt 2014-07-12 08:00
.
Pre-Run: 850 941 136 896 bytes free
Post-Run: 850 673 684 480 bytes free
.
- - End Of File - - 319522E70A461A75FB34288A3E16F4BD

No, sice jste nepostupoval presne podle navodu, ale proslo to


Postupujte podle navodu kolegy

vyosek píše: Stahnete si TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe

• Kliknete na volbu Change parametrs
• V okne Additional Option zakliknete vsechny moznosti
• Kliknete na OK
• Utilite prikazte, at skenuje - klik na Start Scan
• Po dokonceni skenu se objevi okno, zkontrolujte, zda-li je vsude moznost Skip
• Pokud moznost Skip nebude primarne nastavena, prekliknete ji na Skip
• Pokud mate vsude Skip, kliknete na Continue
• Na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt bude log - jeho obsah sem vlozte

Postupujte podle navodu kolegy

vyosek píše: Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

• Ulozte nejlepe na Plochu a rozbalte
• Spustte kliknutim na mbar
• Nyni postupne kliknete na Next a Update
• Po dokonceni update (aktualizace) databaze kliknete opet na Next
• Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
• Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
• Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
• Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
• PC bude restartovan
• Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

Vyzerá to že to pomohlo! Som vám veľmi vdačný, využitie procesora sa pohybuje od 0-15%, dalej som si niekde (možno len podmetovo) všimol že sa odstránil ten súbor kde bolo po francúzsky napísané správca systému, takže jediné čo mi teraz vadí je asi iba to, že pri štarte počítač hučí. Ešte by som sa chcel spýtať, za mesiac mi končí licencia na ESET Smart Security, na nejaký iný antivírus, pretože minule ako som na začiatku písal tak sa mi do PC nabúral nejaký Američan a ukradol mi STEAM účet. Nechcem aby sa to opakovalo a tak by som vám bol vdačný keby ste mi doporučili nejaký AV so silným Firewallom. Keď budem mať nejaké peniaze nazvyš, tak vám prispejem v eshope. Idem spraviť ešte hentie iné kroky, myslím že jediné čo som nespravil podľa postupu bolo to, že som nedokázal nájsť umiestnenie Combofixu, tak som tam hodil iba odkaz a do neho hodil ten .txt

11:33:38.0163 0x0d74 TDSS rootkit removing tool 3.0.0.40 Jul 10 2014 12:37:58
11:33:41.0541 0x0d74 ============================================================
11:33:41.0541 0x0d74 Current date / time: 2014/07/12 11:33:41.0541
11:33:41.0541 0x0d74 SystemInfo:
11:33:41.0541 0x0d74
11:33:41.0541 0x0d74 OS Version: 6.1.7601 ServicePack: 1.0
11:33:41.0541 0x0d74 Product type: Workstation
11:33:41.0541 0x0d74 ComputerName: DAVIDPC
11:33:41.0541 0x0d74 UserName: Dávid
11:33:41.0542 0x0d74 Windows directory: C:\Windows
11:33:41.0542 0x0d74 System windows directory: C:\Windows
11:33:41.0542 0x0d74 Running under WOW64
11:33:41.0542 0x0d74 Processor architecture: Intel x64
11:33:41.0542 0x0d74 Number of processors: 4
11:33:41.0542 0x0d74 Page size: 0x1000
11:33:41.0542 0x0d74 Boot type: Normal boot
11:33:41.0542 0x0d74 ============================================================
11:33:41.0892 0x0d74 KLMD registered as C:\Windows\system32\drivers\74561625.sys
11:33:42.0309 0x0d74 System UUID: {225D77C7-4F0A-1855-3FEB-B2312BDA878D}
11:33:42.0969 0x0d74 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:33:43.0006 0x0d74 ============================================================
11:33:43.0006 0x0d74 \Device\Harddisk0\DR0:
11:33:43.0007 0x0d74 MBR partitions:
11:33:43.0007 0x0d74 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
11:33:43.0007 0x0d74 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x72AFD800
11:33:43.0007 0x0d74 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x72B30000, BlocksNum 0x1BD6000
11:33:43.0007 0x0d74 ============================================================
11:33:43.0025 0x0d74 C: <-> \Device\Harddisk0\DR0\Partition2
11:33:43.0078 0x0d74 D: <-> \Device\Harddisk0\DR0\Partition3
11:33:43.0078 0x0d74 ============================================================
11:33:43.0078 0x0d74 Initialize success
11:33:43.0078 0x0d74 ============================================================
11:34:05.0832 0x14ec ============================================================
11:34:05.0832 0x14ec Scan started
11:34:05.0832 0x14ec Mode: Manual; SigCheck; TDLFS;
11:34:05.0832 0x14ec ============================================================
11:34:05.0832 0x14ec KSN ping started
11:34:11.0673 0x14ec KSN ping finished: true
11:34:12.0222 0x14ec ================ Scan system memory ========================
11:34:12.0222 0x14ec System memory - ok
11:34:12.0222 0x14ec ================ Scan services =============================
11:34:12.0452 0x14ec [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
11:34:12.0521 0x14ec 1394ohci - ok
11:34:12.0555 0x14ec [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys
11:34:12.0570 0x14ec ACPI - ok
11:34:12.0584 0x14ec [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
11:34:12.0636 0x14ec AcpiPmi - ok
11:34:12.0672 0x14ec [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
11:34:12.0691 0x14ec adp94xx - ok
11:34:12.0722 0x14ec [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
11:34:12.0738 0x14ec adpahci - ok
11:34:12.0744 0x14ec [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
11:34:12.0756 0x14ec adpu320 - ok
11:34:12.0771 0x14ec [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
11:34:12.0867 0x14ec AeLookupSvc - ok
11:34:12.0932 0x14ec [ A6FB9DB8F1A86861D955FD6975977AE0, 788C6EE50719227D7A9B7F08C8D5E1289FCD0E8AC23A1021A5093D2E8368F696 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe
11:34:12.0972 0x14ec AESTFilters - ok
11:34:13.0019 0x14ec [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys
11:34:13.0068 0x14ec AFD - ok
11:34:13.0110 0x14ec [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys
11:34:13.0118 0x14ec agp440 - ok
11:34:13.0136 0x14ec [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe
11:34:13.0163 0x14ec ALG - ok
11:34:13.0197 0x14ec [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys
11:34:13.0205 0x14ec aliide - ok
11:34:13.0233 0x14ec [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys
11:34:13.0241 0x14ec amdide - ok
11:34:13.0263 0x14ec [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
11:34:13.0301 0x14ec AmdK8 - ok
11:34:13.0312 0x14ec [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
11:34:13.0333 0x14ec AmdPPM - ok
11:34:13.0345 0x14ec [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys
11:34:13.0355 0x14ec amdsata - ok
11:34:13.0380 0x14ec [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
11:34:13.0392 0x14ec amdsbs - ok
11:34:13.0401 0x14ec [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys
11:34:13.0408 0x14ec amdxata - ok
11:34:13.0450 0x14ec [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys
11:34:13.0553 0x14ec AppID - ok
11:34:13.0572 0x14ec [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll
11:34:13.0612 0x14ec AppIDSvc - ok
11:34:13.0631 0x14ec [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll
11:34:13.0667 0x14ec Appinfo - ok
11:34:13.0719 0x14ec [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\DRIVERS\arc.sys
11:34:13.0729 0x14ec arc - ok
11:34:13.0743 0x14ec [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
11:34:13.0752 0x14ec arcsas - ok
11:34:13.0843 0x14ec [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
11:34:13.0853 0x14ec aspnet_state - ok
11:34:13.0868 0x14ec [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
11:34:13.0902 0x14ec AsyncMac - ok
11:34:13.0940 0x14ec [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys
11:34:13.0947 0x14ec atapi - ok
11:34:13.0999 0x14ec [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
11:34:14.0073 0x14ec AudioEndpointBuilder - ok
11:34:14.0090 0x14ec [ F23FEF6D569FCE88671949894A8BECF1, FCE7B156ED663471CF9A736915F00302E93B50FC647563D235313A37FCE8F0F6 ] AudioSrv C:\Windows\System32\Audiosrv.dll
11:34:14.0129 0x14ec AudioSrv - ok
11:34:14.0170 0x14ec [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll
11:34:14.0216 0x14ec AxInstSV - ok
11:34:14.0262 0x14ec [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
11:34:14.0301 0x14ec b06bdrv - ok
11:34:14.0335 0x14ec [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
11:34:14.0365 0x14ec b57nd60a - ok
11:34:14.0402 0x14ec [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll
11:34:14.0432 0x14ec BDESVC - ok
11:34:14.0443 0x14ec [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys
11:34:14.0482 0x14ec Beep - ok
11:34:14.0536 0x14ec [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll
11:34:14.0578 0x14ec BFE - ok
11:34:14.0622 0x14ec [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\system32\qmgr.dll
11:34:14.0676 0x14ec BITS - ok
11:34:14.0712 0x14ec [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
11:34:14.0726 0x14ec blbdrive - ok
11:34:14.0815 0x14ec [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
11:34:14.0832 0x14ec Bonjour Service - ok
11:34:14.0877 0x14ec [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
11:34:14.0897 0x14ec bowser - ok
11:34:14.0928 0x14ec [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
11:34:14.0973 0x14ec BrFiltLo - ok
11:34:14.0985 0x14ec [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
11:34:14.0996 0x14ec BrFiltUp - ok
11:34:15.0031 0x14ec [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
11:34:15.0059 0x14ec BridgeMP - ok
11:34:15.0081 0x14ec [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll
11:34:15.0112 0x14ec Browser - ok
11:34:15.0142 0x14ec [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys
11:34:15.0186 0x14ec Brserid - ok
11:34:15.0214 0x14ec [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
11:34:15.0233 0x14ec BrSerWdm - ok
11:34:15.0245 0x14ec [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
11:34:15.0268 0x14ec BrUsbMdm - ok
11:34:15.0270 0x14ec [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
11:34:15.0282 0x14ec BrUsbSer - ok
11:34:15.0299 0x14ec [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
11:34:15.0322 0x14ec BTHMODEM - ok
11:34:15.0358 0x14ec [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll
11:34:15.0395 0x14ec bthserv - ok
11:34:15.0413 0x14ec catchme - ok
11:34:15.0442 0x14ec [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
11:34:15.0485 0x14ec cdfs - ok
11:34:15.0537 0x14ec [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\drivers\cdrom.sys
11:34:15.0561 0x14ec cdrom - ok
11:34:15.0607 0x14ec [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll
11:34:15.0642 0x14ec CertPropSvc - ok
11:34:15.0654 0x14ec [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
11:34:15.0667 0x14ec circlass - ok
11:34:15.0698 0x14ec [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys
11:34:15.0714 0x14ec CLFS - ok
11:34:15.0761 0x14ec [ D88040F816FDA31C3B466F0FA0918F29, 39D3630E623DA25B8444B6D3AAAB16B98E7E289C5619E19A85D47B74C71449F3 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:34:15.0769 0x14ec clr_optimization_v2.0.50727_32 - ok
11:34:15.0801 0x14ec [ D1CEEA2B47CB998321C579651CE3E4F8, 654013B8FD229A50017B08DEC6CA19C7DDA8CE0771260E057A92625201D539B1 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
11:34:15.0809 0x14ec clr_optimization_v2.0.50727_64 - ok
11:34:15.0871 0x14ec [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:34:15.0881 0x14ec clr_optimization_v4.0.30319_32 - ok
11:34:15.0894 0x14ec [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
11:34:15.0905 0x14ec clr_optimization_v4.0.30319_64 - ok
11:34:15.0942 0x14ec [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
11:34:15.0958 0x14ec CmBatt - ok
11:34:15.0973 0x14ec [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys
11:34:15.0981 0x14ec cmdide - ok
11:34:16.0028 0x14ec [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG C:\Windows\system32\Drivers\cng.sys
11:34:16.0056 0x14ec CNG - ok
11:34:16.0082 0x14ec [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
11:34:16.0090 0x14ec Compbatt - ok
11:34:16.0131 0x14ec [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
11:34:16.0155 0x14ec CompositeBus - ok
11:34:16.0157 0x14ec COMSysApp - ok
11:34:16.0182 0x14ec [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
11:34:16.0190 0x14ec crcdisk - ok
11:34:16.0206 0x14ec [ 6B400F211BEE880A37A1ED0368776BF4, 2F27C6FA96A1C8CBDA467846DA57E63949A7EA37DB094B13397DDD30114295BD ] CryptSvc C:\Windows\system32\cryptsvc.dll
11:34:16.0224 0x14ec CryptSvc - ok
11:34:16.0271 0x14ec [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll
11:34:16.0315 0x14ec DcomLaunch - ok
11:34:16.0351 0x14ec [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll
11:34:16.0386 0x14ec defragsvc - ok
11:34:16.0406 0x14ec [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys
11:34:16.0437 0x14ec DfsC - ok
11:34:16.0481 0x14ec [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll
11:34:16.0524 0x14ec Dhcp - ok
11:34:16.0562 0x14ec [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys
11:34:16.0595 0x14ec discache - ok
11:34:16.0619 0x14ec [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\DRIVERS\disk.sys
11:34:16.0627 0x14ec Disk - ok
11:34:16.0664 0x14ec [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll
11:34:16.0693 0x14ec Dnscache - ok
11:34:16.0717 0x14ec [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll
11:34:16.0755 0x14ec dot3svc - ok
11:34:16.0778 0x14ec [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll
11:34:16.0821 0x14ec DPS - ok
11:34:16.0855 0x14ec [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
11:34:16.0884 0x14ec drmkaud - ok
11:34:16.0931 0x14ec [ 88612F1CE3BF42256913BF6E61C70D52, 7CF190F83FA8F15C33008EB381D3E345CEF37CBC046227DED26B36799EF4D9A7 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
11:34:16.0962 0x14ec DXGKrnl - ok
11:34:17.0023 0x14ec [ FE96AA1A36E76588C80DF1040286DDE1, 86EED8A0B59CD1930E6282997537ED94333FC7D45E3FE5A4D82057E1C8E5C2CD ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
11:34:17.0046 0x14ec eamonm - ok
11:34:17.0082 0x14ec [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll
11:34:17.0109 0x14ec EapHost - ok
11:34:17.0206 0x14ec [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
11:34:17.0306 0x14ec ebdrv - ok
11:34:17.0353 0x14ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS C:\Windows\System32\lsass.exe
11:34:17.0384 0x14ec EFS - ok
11:34:17.0422 0x14ec [ 807BA90D47F8885C09E1D6AFBB706E18, A803FE639C9C87733CA73D8F6C04A8CEB28DC45EEEA6CEC01ED3D4124C8E48EA ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
11:34:17.0433 0x14ec ehdrv - ok
11:34:17.0478 0x14ec [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
11:34:17.0532 0x14ec ehRecvr - ok
11:34:17.0555 0x14ec [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe
11:34:17.0589 0x14ec ehSched - ok
11:34:17.0676 0x14ec [ F1DB56A7C59278DC68DE7DBFE9F6C73B, B3E07DCF52D227BD4C22EDE5B895BC338A8F1EA4C86C1358EAC065454D80E76C ] ekrn C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
11:34:17.0712 0x14ec ekrn - ok
11:34:17.0759 0x14ec [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
11:34:17.0779 0x14ec elxstor - ok
11:34:17.0804 0x14ec [ 00A81DC02BA17FB4BFCFA026DC47458F, 1B95BD51727E66B023BA4F2C9F57E69496790582CB272D57FE4BC15BA64952D8 ] epfw C:\Windows\system32\DRIVERS\epfw.sys
11:34:17.0817 0x14ec epfw - ok
11:34:17.0847 0x14ec [ 3B085449438B2BCFD09CC84A0B90D1DB, 098DD64CC446E3960F93C0CDA495069DB6E7D9397CAC857E09E9FA323F5D31B2 ] EpfwLWF C:\Windows\system32\DRIVERS\EpfwLWF.sys
11:34:17.0855 0x14ec EpfwLWF - ok
11:34:17.0864 0x14ec [ 91D54747A07F56ADCE1B6CFD3387AF60, 6F27AC896EA360284F6868BA1FEB55AE9325C914E54D73AECC5EBC8328650D41 ] epfwwfp C:\Windows\system32\DRIVERS\epfwwfp.sys
11:34:17.0873 0x14ec epfwwfp - ok
11:34:17.0885 0x14ec [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys
11:34:17.0902 0x14ec ErrDev - ok
11:34:17.0948 0x14ec [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll
11:34:17.0988 0x14ec EventSystem - ok
11:34:18.0038 0x14ec [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys
11:34:18.0069 0x14ec exfat - ok
11:34:18.0082 0x14ec ezSharedSvc - ok
11:34:18.0101 0x14ec [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys
11:34:18.0145 0x14ec fastfat - ok
11:34:18.0197 0x14ec [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe
11:34:18.0251 0x14ec Fax - ok
11:34:18.0295 0x14ec [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\DRIVERS\fdc.sys
11:34:18.0315 0x14ec fdc - ok
11:34:18.0350 0x14ec [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll
11:34:18.0375 0x14ec fdPHost - ok
11:34:18.0387 0x14ec [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll
11:34:18.0429 0x14ec FDResPub - ok
11:34:18.0459 0x14ec [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
11:34:18.0467 0x14ec FileInfo - ok
11:34:18.0478 0x14ec [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
11:34:18.0515 0x14ec Filetrace - ok
11:34:18.0527 0x14ec [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
11:34:18.0537 0x14ec flpydisk - ok
11:34:18.0559 0x14ec [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
11:34:18.0574 0x14ec FltMgr - ok
11:34:18.0636 0x14ec [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll
11:34:18.0678 0x14ec FontCache - ok
11:34:18.0714 0x14ec [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:34:18.0721 0x14ec FontCache3.0.0.0 - ok
11:34:18.0744 0x14ec [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
11:34:18.0752 0x14ec FsDepends - ok
11:34:18.0788 0x14ec [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
11:34:18.0796 0x14ec Fs_Rec - ok
11:34:18.0812 0x14ec [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
11:34:18.0826 0x14ec fvevol - ok
11:34:18.0857 0x14ec [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
11:34:18.0866 0x14ec gagp30kx - ok
11:34:18.0932 0x14ec [ D154305DE6090E6E84E525F84BB08A06, 7B235178C3F26043AB7DB9EAD9A2185CEAF3C07BC48D63CA0EB6D56BCFEDF41A ] GameConsoleService C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
11:34:18.0960 0x14ec GameConsoleService - ok
11:34:18.0991 0x14ec [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll
11:34:19.0041 0x14ec gpsvc - ok
11:34:19.0077 0x14ec [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:34:19.0084 0x14ec gupdate - ok
11:34:19.0088 0x14ec [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:34:19.0095 0x14ec gupdatem - ok
11:34:19.0127 0x14ec [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
11:34:19.0135 0x14ec hamachi - ok
11:34:19.0259 0x14ec [ 8E459BA8360F33D64BE96F9550E56EE8, AA0568EE4DE90C7D6001759BADE17729E4420DEBE106DB8AFDC2B4E1C518DC49 ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
11:34:19.0329 0x14ec Hamachi2Svc - ok
11:34:19.0387 0x14ec [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
11:34:19.0445 0x14ec hcw85cir - ok
11:34:19.0491 0x14ec [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
11:34:19.0519 0x14ec HdAudAddService - ok
11:34:19.0567 0x14ec [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
11:34:19.0590 0x14ec HDAudBus - ok
11:34:19.0606 0x14ec [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
11:34:19.0624 0x14ec HidBatt - ok
11:34:19.0637 0x14ec [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
11:34:19.0664 0x14ec HidBth - ok
11:34:19.0703 0x14ec [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
11:34:19.0715 0x14ec HidIr - ok
11:34:19.0735 0x14ec [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\System32\hidserv.dll
11:34:19.0766 0x14ec hidserv - ok
11:34:19.0783 0x14ec [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\drivers\hidusb.sys
11:34:19.0805 0x14ec HidUsb - ok
11:34:19.0842 0x14ec [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll
11:34:19.0881 0x14ec hkmsvc - ok
11:34:19.0902 0x14ec [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
11:34:19.0928 0x14ec HomeGroupListener - ok
11:34:19.0951 0x14ec [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
11:34:19.0963 0x14ec HomeGroupProvider - ok
11:34:20.0025 0x14ec [ 37965381364B2E106E1DD7D74CDCAA43, 94C30FA88140E802A549549856145824122F138C2697301CDCAAEEEEA3858E12 ] HP Health Check Service C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
11:34:20.0033 0x14ec HP Health Check Service - ok
11:34:20.0077 0x14ec [ 3DC11A802353401332D49C3CBFBBE5FC, E812E8A4ED64FEC346BE6B175CE651CFC553A23F31B0ABC5D50E6995A7F130DF ] HPClientSvc C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
11:34:20.0090 0x14ec HPClientSvc - ok
11:34:20.0118 0x14ec [ A48A151D3FA7CB032A51453F087221C7, A74EFC7DC4F75BF29C9B459DCDF4D04F13F868D3D10F8D73606A5F03811170CA ] HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
11:34:20.0125 0x14ec HPDrvMntSvc.exe - ok
11:34:20.0162 0x14ec [ 71BD8A611E0677175D3938C9CEA7339A, 40A67671D231DAD8E9AEB5E38BCB8389192B373FD02ACCF960E9F287E1D8C9AD ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
11:34:20.0197 0x14ec hpqwmiex - ok
11:34:20.0242 0x14ec [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
11:34:20.0251 0x14ec HpSAMD - ok
11:34:20.0300 0x14ec [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys
11:34:20.0355 0x14ec HTTP - ok
11:34:20.0392 0x14ec [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
11:34:20.0399 0x14ec hwpolicy - ok
11:34:20.0455 0x14ec [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
11:34:20.0466 0x14ec i8042prt - ok
11:34:20.0485 0x14ec [ F7CE9BE72EDAC499B713ECA6DAE5D26F, AF158C8ADF0815C406435AB051C8D8DD0ECBDBA8644CB75D7611980D70662193 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
11:34:20.0500 0x14ec iaStor - ok
11:34:20.0531 0x14ec [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
11:34:20.0548 0x14ec iaStorV - ok
11:34:20.0608 0x14ec [ 5988FC40F8DB5B0739CD1E3A5D0D78BD, 2B9512324DBA4A97F6AC34E8067EE08E3B6874CD60F6CB4209AFC22A34D2BE99 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
11:34:20.0635 0x14ec idsvc - ok
11:34:20.0649 0x14ec IEEtwCollectorService - ok
11:34:20.0676 0x14ec [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
11:34:20.0685 0x14ec iirsp - ok
11:34:20.0727 0x14ec [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll
11:34:20.0767 0x14ec IKEEXT - ok
11:34:20.0807 0x14ec [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys
11:34:20.0815 0x14ec intelide - ok
11:34:20.0849 0x14ec [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
11:34:20.0869 0x14ec intelppm - ok
11:34:20.0918 0x14ec [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll
11:34:20.0951 0x14ec IPBusEnum - ok
11:34:20.0975 0x14ec [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:34:21.0003 0x14ec IpFilterDriver - ok
11:34:21.0046 0x14ec [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
11:34:21.0080 0x14ec iphlpsvc - ok
11:34:21.0100 0x14ec [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
11:34:21.0122 0x14ec IPMIDRV - ok
11:34:21.0165 0x14ec [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys
11:34:21.0201 0x14ec IPNAT - ok
11:34:21.0227 0x14ec [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys
11:34:21.0263 0x14ec IRENUM - ok
11:34:21.0280 0x14ec [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys
11:34:21.0288 0x14ec isapnp - ok
11:34:21.0325 0x14ec [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
11:34:21.0340 0x14ec iScsiPrt - ok
11:34:21.0350 0x14ec [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
11:34:21.0358 0x14ec kbdclass - ok
11:34:21.0404 0x14ec [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
11:34:21.0422 0x14ec kbdhid - ok
11:34:21.0454 0x14ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso C:\Windows\system32\lsass.exe
11:34:21.0463 0x14ec KeyIso - ok
11:34:21.0483 0x14ec [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
11:34:21.0492 0x14ec KSecDD - ok
11:34:21.0507 0x14ec [ 1C2D8E18AA8FD50CD04C15CC27F7F5AB, 4BA3B0F9F01BD47D66091D3AD86B69A523981D61DFB4D677F2CD39405B2DA989 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
11:34:21.0518 0x14ec KSecPkg - ok
11:34:21.0535 0x14ec [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
11:34:21.0568 0x14ec ksthunk - ok
11:34:21.0602 0x14ec [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll
11:34:21.0648 0x14ec KtmRm - ok
11:34:21.0683 0x14ec [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\System32\srvsvc.dll
11:34:21.0724 0x14ec LanmanServer - ok
11:34:21.0748 0x14ec [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
11:34:21.0780 0x14ec LanmanWorkstation - ok
11:34:21.0821 0x14ec [ FA4A45C179AB0E0F1A31B9751D4B18D7, 4356777C2608A65185C9CB8243F071EC9E11BCD152E0C0ACDE25B6BCFD75A7F4 ] LightScribeService c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
11:34:21.0827 0x14ec LightScribeService - detected UnsignedFile.Multi.Generic ( 1 )
11:34:27.0643 0x14ec Detect skipped due to KSN trusted
11:34:27.0643 0x14ec LightScribeService - ok
11:34:27.0686 0x14ec [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
11:34:27.0723 0x14ec lltdio - ok
11:34:27.0768 0x14ec [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll
11:34:27.0803 0x14ec lltdsvc - ok
11:34:27.0814 0x14ec [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll
11:34:27.0840 0x14ec lmhosts - ok
11:34:27.0871 0x14ec [ D5F9C50082FA5F82C35922998B3DAD6E, 4957FB1888EC69E16E6D019F2D984EE810F8532FAB504B30D32518E4D3F01FDB ] LMIGuardianSvc C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
11:34:27.0886 0x14ec LMIGuardianSvc - ok
11:34:27.0940 0x14ec [ 926EBA26A8B49D1597751CED06B50862, 886FC610E379BD77146ADDC376D77437D88B593C7F1C3FEE2B93D934A67310F8 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
11:34:27.0952 0x14ec LMS - ok
11:34:27.0993 0x14ec [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
11:34:28.0003 0x14ec LSI_FC - ok
11:34:28.0007 0x14ec [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
11:34:28.0017 0x14ec LSI_SAS - ok
11:34:28.0023 0x14ec [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
11:34:28.0031 0x14ec LSI_SAS2 - ok
11:34:28.0036 0x14ec [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
11:34:28.0046 0x14ec LSI_SCSI - ok
11:34:28.0073 0x14ec [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys
11:34:28.0105 0x14ec luafv - ok
11:34:28.0147 0x14ec [ F92B0E478C0FAA6D6661E6E977247E60, 8B26B57C2C60C98CD6273ACA126B2CD0356ADB13A59FEC12882357A6B973123C ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
11:34:28.0154 0x14ec MBAMProtector - ok
11:34:28.0212 0x14ec [ D84AEA3F3329D622DFC1297DDDF6163B, 316FE56CC30ED1473A917253F46B79EAA12F4ABD5B4B1ADB03929DFEE940F577 ] MBAMScheduler C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
11:34:28.0261 0x14ec MBAMScheduler - ok
11:34:28.0303 0x14ec [ 4F45ED469906494F9BF754E476390DBD, D8FF6AFD73D8C191F5732DF9737E6F83B2B52B06A3A6CD4CC6EAC9464CBB2772 ] MBAMService C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
11:34:28.0330 0x14ec MBAMService - ok
11:34:28.0367 0x14ec [ 8A50D5304E6AE48664CF5838EC32F647, C76943FABEE1B5E1B641AA610668CCD4227E2C4B191DD30B79D3AB31A9E8B5BE ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys
11:34:28.0376 0x14ec MBAMSwissArmy - ok
11:34:28.0389 0x14ec [ 15E8ABC06843672955CE26A009533BAD, E7221B7DE9DB45447C68E79C6BFD064713C5974F7E79925BD7DEEF71F73F3E83 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
11:34:28.0397 0x14ec MBAMWebAccessControl - ok
11:34:28.0424 0x14ec [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
11:34:28.0449 0x14ec Mcx2Svc - ok
11:34:28.0463 0x14ec [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
11:34:28.0471 0x14ec megasas - ok
11:34:28.0509 0x14ec [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
11:34:28.0523 0x14ec MegaSR - ok
11:34:28.0557 0x14ec [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
11:34:28.0564 0x14ec MEIx64 - ok
11:34:28.0645 0x14ec Microsoft SharePoint Workspace Audit Service - ok
11:34:28.0663 0x14ec [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll
11:34:28.0699 0x14ec MMCSS - ok
11:34:28.0708 0x14ec [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys
11:34:28.0747 0x14ec Modem - ok
11:34:28.0778 0x14ec [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
11:34:28.0796 0x14ec monitor - ok
11:34:28.0858 0x14ec [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\drivers\mouclass.sys
11:34:28.0866 0x14ec mouclass - ok
11:34:28.0873 0x14ec [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
11:34:28.0882 0x14ec mouhid - ok
11:34:28.0916 0x14ec [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
11:34:28.0925 0x14ec mountmgr - ok
11:34:28.0951 0x14ec [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys
11:34:28.0963 0x14ec mpio - ok
11:34:29.0092 0x14ec [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
11:34:29.0123 0x14ec mpsdrv - ok
11:34:29.0167 0x14ec [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll
11:34:29.0215 0x14ec MpsSvc - ok
11:34:29.0235 0x14ec [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
11:34:29.0278 0x14ec MRxDAV - ok
11:34:29.0301 0x14ec [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
11:34:29.0332 0x14ec mrxsmb - ok
11:34:29.0351 0x14ec [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:34:29.0377 0x14ec mrxsmb10 - ok
11:34:29.0391 0x14ec [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:34:29.0403 0x14ec mrxsmb20 - ok
11:34:29.0419 0x14ec [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys
11:34:29.0428 0x14ec msahci - ok
11:34:29.0454 0x14ec [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys
11:34:29.0465 0x14ec msdsm - ok
11:34:29.0517 0x14ec [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe
11:34:29.0540 0x14ec MSDTC - ok
11:34:29.0555 0x14ec [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys
11:34:29.0595 0x14ec Msfs - ok
11:34:29.0627 0x14ec [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
11:34:29.0659 0x14ec mshidkmdf - ok
11:34:29.0662 0x14ec [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
11:34:29.0669 0x14ec msisadrv - ok
11:34:29.0693 0x14ec [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
11:34:29.0724 0x14ec MSiSCSI - ok
11:34:29.0726 0x14ec msiserver - ok
11:34:29.0751 0x14ec [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
11:34:29.0789 0x14ec MSKSSRV - ok
11:34:29.0799 0x14ec [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
11:34:29.0825 0x14ec MSPCLOCK - ok
11:34:29.0827 0x14ec [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
11:34:29.0862 0x14ec MSPQM - ok
11:34:29.0888 0x14ec [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
11:34:29.0905 0x14ec MsRPC - ok
11:34:29.0911 0x14ec [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
11:34:29.0918 0x14ec mssmbios - ok
11:34:29.0921 0x14ec [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
11:34:29.0952 0x14ec MSTEE - ok
11:34:29.0959 0x14ec [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
11:34:29.0968 0x14ec MTConfig - ok
11:34:29.0972 0x14ec [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys
11:34:29.0980 0x14ec Mup - ok
11:34:30.0014 0x14ec [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll
11:34:30.0057 0x14ec napagent - ok
11:34:30.0106 0x14ec [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
11:34:30.0132 0x14ec NativeWifiP - ok
11:34:30.0195 0x14ec [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys
11:34:30.0225 0x14ec NDIS - ok
11:34:30.0236 0x14ec [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
11:34:30.0277 0x14ec NdisCap - ok
11:34:30.0313 0x14ec [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
11:34:30.0340 0x14ec NdisTapi - ok
11:34:30.0355 0x14ec [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
11:34:30.0382 0x14ec Ndisuio - ok
11:34:30.0398 0x14ec [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
11:34:30.0433 0x14ec NdisWan - ok
11:34:30.0451 0x14ec [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
11:34:30.0481 0x14ec NDProxy - ok
11:34:30.0526 0x14ec [ D4F51E88C71BF8F06EA1BE320B0BB75B, ABDA528F8159290BFDFBAAFC3BDA4484649FF612FD1D9E74284CA7DBA00A4B0D ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
11:34:30.0541 0x14ec Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
11:34:40.0591 0x14ec Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
11:34:46.0387 0x14ec [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
11:34:46.0422 0x14ec NetBIOS - ok
11:34:46.0445 0x14ec [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
11:34:46.0477 0x14ec NetBT - ok
11:34:46.0503 0x14ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon C:\Windows\system32\lsass.exe
11:34:46.0513 0x14ec Netlogon - ok
11:34:46.0578 0x14ec [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll
11:34:46.0627 0x14ec Netman - ok
11:34:46.0660 0x14ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:34:46.0672 0x14ec NetMsmqActivator - ok
11:34:46.0677 0x14ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:34:46.0688 0x14ec NetPipeActivator - ok
11:34:46.0731 0x14ec [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll
11:34:46.0786 0x14ec netprofm - ok
11:34:46.0791 0x14ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:34:46.0802 0x14ec NetTcpActivator - ok
11:34:46.0807 0x14ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:34:46.0817 0x14ec NetTcpPortSharing - ok
11:34:46.0849 0x14ec [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
11:34:46.0857 0x14ec nfrd960 - ok
11:34:46.0894 0x14ec [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc C:\Windows\System32\nlasvc.dll
11:34:46.0910 0x14ec NlaSvc - ok
11:34:46.0921 0x14ec [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys
11:34:46.0986 0x14ec Npfs - ok
11:34:47.0022 0x14ec [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll
11:34:47.0052 0x14ec nsi - ok
11:34:47.0054 0x14ec [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
11:34:47.0082 0x14ec nsiproxy - ok
11:34:47.0140 0x14ec [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
11:34:47.0189 0x14ec Ntfs - ok
11:34:47.0209 0x14ec [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys
11:34:47.0241 0x14ec Null - ok
11:34:47.0264 0x14ec [ E366A5681C50785D4ED04FCFD65C3415, 7FF7B4B8F09E773401AE879897E60BF494B57B9ACEE990204A4C98A3FB183A33 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
11:34:47.0277 0x14ec NVHDA - ok
11:34:47.0611 0x14ec [ 0AC797F70F2F3E5B69A34FF2F63496F3, 80A811F8234BA00779BA76AAF41E830FB6CED03667E6E8F430C14DEBF2E45DD9 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
11:34:47.0929 0x14ec nvlddmkm - ok
11:34:48.0027 0x14ec [ C22ADABFABBC2B7AC189C87D87B1ABD6, 20886F806C1C02FA8BAA8B76AFCC32C40FA51921ED8D97F592DF9F92BFA933EE ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
11:34:48.0068 0x14ec NvNetworkService - ok
11:34:48.0102 0x14ec [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys
11:34:48.0113 0x14ec nvraid - ok
11:34:48.0141 0x14ec [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys
11:34:48.0152 0x14ec nvstor - ok
11:34:48.0205 0x14ec [ C135A25E8CF21EB631AB041ABB1F73EA, D0A3DC0411E888D0934B7579EEB980FA7824E3F22F70819A33411D8B8BC9EE42 ] nvsvc C:\Windows\system32\nvvsvc.exe
11:34:48.0235 0x14ec nvsvc - ok
11:34:48.0262 0x14ec [ 75034A4D7C02327D150B617571D4196A, 8E7DAFEC4307E883D52BD0B5F0732E26E019C953770B52ACBBAD3074A66393CB ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
11:34:48.0270 0x14ec nvvad_WaveExtensible - ok
11:34:48.0302 0x14ec [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
11:34:48.0312 0x14ec nv_agp - ok
11:34:48.0328 0x14ec [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
11:34:48.0339 0x14ec ohci1394 - ok
11:34:48.0398 0x14ec [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:34:48.0408 0x14ec ose - ok
11:34:48.0555 0x14ec [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
11:34:48.0682 0x14ec osppsvc - ok
11:34:48.0707 0x14ec [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
11:34:48.0738 0x14ec p2pimsvc - ok
11:34:48.0759 0x14ec [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll
11:34:48.0780 0x14ec p2psvc - ok
11:34:48.0817 0x14ec [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\DRIVERS\parport.sys
11:34:48.0828 0x14ec Parport - ok
11:34:48.0849 0x14ec [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys
11:34:48.0858 0x14ec partmgr - ok
11:34:48.0872 0x14ec [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll
11:34:48.0889 0x14ec PcaSvc - ok
11:34:48.0905 0x14ec [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys
11:34:48.0916 0x14ec pci - ok
11:34:48.0952 0x14ec [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys
11:34:48.0960 0x14ec pciide - ok
11:34:48.0982 0x14ec [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
11:34:48.0995 0x14ec pcmcia - ok
11:34:48.0999 0x14ec [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys
11:34:49.0007 0x14ec pcw - ok
11:34:49.0051 0x14ec pdfcDispatcher - ok
11:34:49.0077 0x14ec [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys
11:34:49.0125 0x14ec PEAUTH - ok
11:34:49.0207 0x14ec [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe
11:34:49.0227 0x14ec PerfHost - ok
11:34:49.0273 0x14ec [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll
11:34:49.0336 0x14ec pla - ok
11:34:49.0385 0x14ec [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
11:34:49.0420 0x14ec PlugPlay - ok
11:34:49.0442 0x14ec [ 9A80707D8B6C1806531BFD7399B3CC76, C9996A265B0C461843DECE336314AEDD38D3F0644A8AA4D3F20D3496AD17956B ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
11:34:49.0448 0x14ec Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
11:34:55.0251 0x14ec Detect skipped due to KSN trusted
11:34:55.0252 0x14ec Pml Driver HPZ12 - ok
11:34:55.0268 0x14ec [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
11:34:55.0286 0x14ec PNRPAutoReg - ok
11:34:55.0298 0x14ec [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
11:34:55.0314 0x14ec PNRPsvc - ok
11:34:55.0356 0x14ec [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
11:34:55.0402 0x14ec PolicyAgent - ok
11:34:55.0430 0x14ec [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll
11:34:55.0460 0x14ec Power - ok
11:34:55.0490 0x14ec [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
11:34:55.0528 0x14ec PptpMiniport - ok
11:34:55.0550 0x14ec [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\DRIVERS\processr.sys
11:34:55.0572 0x14ec Processor - ok
11:34:55.0588 0x14ec [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc C:\Windows\system32\profsvc.dll
11:34:55.0617 0x14ec ProfSvc - ok
11:34:55.0628 0x14ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe
11:34:55.0637 0x14ec ProtectedStorage - ok
11:34:55.0678 0x14ec [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
11:34:55.0709 0x14ec Psched - ok
11:34:55.0754 0x14ec [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
11:34:55.0798 0x14ec ql2300 - ok
11:34:55.0812 0x14ec [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
11:34:55.0822 0x14ec ql40xx - ok
11:34:55.0853 0x14ec [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll
11:34:55.0872 0x14ec QWAVE - ok
11:34:55.0883 0x14ec [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
11:34:55.0900 0x14ec QWAVEdrv - ok
11:34:55.0921 0x14ec [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
11:34:55.0954 0x14ec RasAcd - ok
11:34:55.0987 0x14ec [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
11:34:56.0023 0x14ec RasAgileVpn - ok
11:34:56.0034 0x14ec [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll
11:34:56.0071 0x14ec RasAuto - ok
11:34:56.0082 0x14ec [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
11:34:56.0112 0x14ec Rasl2tp - ok
11:34:56.0135 0x14ec [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll
11:34:56.0170 0x14ec RasMan - ok
11:34:56.0184 0x14ec [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
11:34:56.0212 0x14ec RasPppoe - ok
11:34:56.0217 0x14ec [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
11:34:56.0253 0x14ec RasSstp - ok
11:34:56.0272 0x14ec [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
11:34:56.0312 0x14ec rdbss - ok
11:34:56.0328 0x14ec [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
11:34:56.0347 0x14ec rdpbus - ok
11:34:56.0352 0x14ec [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
11:34:56.0378 0x14ec RDPCDD - ok
11:34:56.0392 0x14ec [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
11:34:56.0431 0x14ec RDPENCDD - ok
11:34:56.0434 0x14ec [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
11:34:56.0471 0x14ec RDPREFMP - ok
11:34:56.0530 0x14ec [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
11:34:56.0551 0x14ec RdpVideoMiniport - ok
11:34:56.0569 0x14ec [ E61608AA35E98999AF9AAEEEA6114B0A, F754CDE89DC96786D2A3C4D19EE2AEF1008E634E4DE3C0CBF927436DE90C04A6 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
11:34:56.0609 0x14ec RDPWD - ok
11:34:56.0639 0x14ec [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
11:34:56.0651 0x14ec rdyboost - ok
11:34:56.0672 0x14ec [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll
11:34:56.0709 0x14ec RemoteAccess - ok
11:34:56.0752 0x14ec [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll
11:34:56.0786 0x14ec RemoteRegistry - ok
11:34:56.0796 0x14ec [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
11:34:56.0824 0x14ec RpcEptMapper - ok
11:34:56.0840 0x14ec [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe
11:34:56.0853 0x14ec RpcLocator - ok
11:34:56.0880 0x14ec [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll
11:34:56.0916 0x14ec RpcSs - ok
11:34:56.0937 0x14ec [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
11:34:56.0965 0x14ec rspndr - ok
11:34:57.0021 0x14ec [ AFC12DFA4C7B089673AD67402CA19EDB, 9CA430E8DFAE9B7A245FCD766CB60245418C80CEBCD2E9FACA9DE62E3E60ADDF ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
11:34:57.0038 0x14ec RTL8167 - ok
11:34:57.0081 0x14ec [ 2ADA9F126235A56EDC9F90C888E4D142, 4CE692D045F6F8A7A1D309376648E81066F6EBAF94580F2ED0B0FFC1FE6FE44E ] RZMAELSTROMVADService C:\Windows\system32\drivers\RzMaelstromVAD.sys
11:34:57.0104 0x14ec RZMAELSTROMVADService - ok
11:34:57.0268 0x14ec [ 0436A7489D3FB6D2BACB37415A6BF4C4, 2938240D828F7F67D51BAB2ACF9B6808013511B98C1AEC0D3755B66655329D31 ] RzMaelstromVADStreamingService C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
11:34:57.0393 0x14ec RzMaelstromVADStreamingService - detected UnsignedFile.Multi.Generic ( 1 )
11:35:03.0198 0x14ec Detect skipped due to KSN trusted
11:35:03.0199 0x14ec RzMaelstromVADStreamingService - ok
11:35:03.0211 0x14ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs C:\Windows\system32\lsass.exe
11:35:03.0219 0x14ec SamSs - ok
11:35:03.0249 0x14ec [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
11:35:03.0259 0x14ec sbp2port - ok
11:35:03.0297 0x14ec [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll
11:35:03.0334 0x14ec SCardSvr - ok
11:35:03.0341 0x14ec [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
11:35:03.0371 0x14ec scfilter - ok
11:35:03.0414 0x14ec [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll
11:35:03.0463 0x14ec Schedule - ok
11:35:03.0489 0x14ec [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll
11:35:03.0515 0x14ec SCPolicySvc - ok
11:35:03.0539 0x14ec [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll
11:35:03.0569 0x14ec SDRSVC - ok
11:35:03.0606 0x14ec [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
11:35:03.0640 0x14ec secdrv - ok
11:35:03.0651 0x14ec [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll
11:35:03.0682 0x14ec seclogon - ok
11:35:03.0700 0x14ec [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\system32\sens.dll
11:35:03.0738 0x14ec SENS - ok
11:35:03.0780 0x14ec [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll
11:35:03.0817 0x14ec SensrSvc - ok
11:35:03.0846 0x14ec [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
11:35:03.0861 0x14ec Serenum - ok
11:35:03.0874 0x14ec [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\DRIVERS\serial.sys
11:35:03.0885 0x14ec Serial - ok
11:35:03.0923 0x14ec [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
11:35:03.0933 0x14ec sermouse - ok
11:35:03.0958 0x14ec [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll
11:35:03.0995 0x14ec SessionEnv - ok
11:35:04.0007 0x14ec [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
11:35:04.0034 0x14ec sffdisk - ok
11:35:04.0037 0x14ec [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
11:35:04.0046 0x14ec sffp_mmc - ok
11:35:04.0048 0x14ec [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
11:35:04.0059 0x14ec sffp_sd - ok
11:35:04.0086 0x14ec [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
11:35:04.0095 0x14ec sfloppy - ok
11:35:04.0121 0x14ec [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll
11:35:04.0161 0x14ec SharedAccess - ok
11:35:04.0181 0x14ec [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
11:35:04.0222 0x14ec ShellHWDetection - ok
11:35:04.0258 0x14ec [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
11:35:04.0266 0x14ec SiSRaid2 - ok
11:35:04.0281 0x14ec [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
11:35:04.0290 0x14ec SiSRaid4 - ok
11:35:04.0314 0x14ec [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys
11:35:04.0343 0x14ec Smb - ok
11:35:04.0377 0x14ec [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
11:35:04.0397 0x14ec SNMPTRAP - ok
11:35:04.0418 0x14ec [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys
11:35:04.0426 0x14ec spldr - ok
11:35:04.0460 0x14ec [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe
11:35:04.0504 0x14ec Spooler - ok
11:35:04.0612 0x14ec [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe
11:35:04.0718 0x14ec sppsvc - ok
11:35:04.0749 0x14ec [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll
11:35:04.0788 0x14ec sppuinotify - ok
11:35:04.0819 0x14ec [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys
11:35:04.0852 0x14ec srv - ok
11:35:04.0863 0x14ec [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
11:35:04.0895 0x14ec srv2 - ok
11:35:04.0901 0x14ec [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
11:35:04.0918 0x14ec srvnet - ok
11:35:04.0960 0x14ec [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
11:35:04.0989 0x14ec SSDPSRV - ok
11:35:04.0998 0x14ec [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll
11:35:05.0026 0x14ec SstpSvc - ok
11:35:05.0065 0x14ec [ 605ECCCE95ACF7AF12CBCCDAB55B8DD0, 7B676B58C26D880320434066B93C7B8372421699C0006806D4E8E0E824124281 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe
11:35:05.0118 0x14ec STacSV - ok
11:35:05.0165 0x14ec [ FF97DC2772C86D3402F150B7C8C6AEC0, 2C34029C38B3D34D33F10F2B20DEFEBC97D720D6157E4D97206EB0C64CF5BDA0 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
11:35:11.0721 0x14ec Steam Client Service - ok
11:35:11.0771 0x14ec [ 718D79F2E7EC3AFFD3661DA81F93BBEA, BA2A4E58E5EE06392EE6F4C2E738DC807EC5A8B9F6DD4B7935FE27CBC648E390 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
11:35:11.0790 0x14ec Stereo Service - ok
11:35:11.0804 0x14ec [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
11:35:11.0813 0x14ec stexstor - ok
11:35:11.0860 0x14ec [ 5709F6AEECC9C43AD9D550FB1D882209, CF4681AE1D6B15340F5A0787E0EFB682AA3CFA15D25741364D8455C040A5997B ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys
11:35:11.0893 0x14ec STHDA - ok
11:35:11.0939 0x14ec [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll
11:35:11.0974 0x14ec stisvc - ok
11:35:11.0989 0x14ec [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys
11:35:11.0997 0x14ec swenum - ok
11:35:12.0024 0x14ec [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll
11:35:12.0066 0x14ec swprv - ok
11:35:12.0125 0x14ec [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll
11:35:12.0185 0x14ec SysMain - ok
11:35:12.0204 0x14ec [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
11:35:12.0218 0x14ec TabletInputService - ok
11:35:12.0241 0x14ec [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll
11:35:12.0284 0x14ec TapiSrv - ok
11:35:12.0308 0x14ec [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll
11:35:12.0335 0x14ec TBS - ok
11:35:12.0391 0x14ec [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
11:35:12.0444 0x14ec Tcpip - ok
11:35:12.0499 0x14ec [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
11:35:12.0542 0x14ec TCPIP6 - ok
11:35:12.0565 0x14ec [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
11:35:12.0581 0x14ec tcpipreg - ok
11:35:12.0597 0x14ec [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
11:35:12.0618 0x14ec TDPIPE - ok
11:35:12.0635 0x14ec [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
11:35:12.0655 0x14ec TDTCP - ok
11:35:12.0678 0x14ec [ DDAD5A7AB24D8B65F8D724F5C20FD806, B71F2967A4EE7395E4416C1526CB85368AEA988BDD1F2C9719C48B08FAFA9661 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
11:35:12.0710 0x14ec tdx - ok
11:35:12.0717 0x14ec [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys
11:35:12.0726 0x14ec TermDD - ok
11:35:12.0755 0x14ec [ 2E648163254233755035B46DD7B89123, 6FA0D07CE18A3A69D82EE49D875F141E39406E92C34EAC76AC4EB052E6EBCBCD ] TermService C:\Windows\System32\termsrv.dll
11:35:12.0816 0x14ec TermService - ok
11:35:12.0826 0x14ec [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll
11:35:12.0847 0x14ec Themes - ok
11:35:12.0853 0x14ec [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll
11:35:12.0881 0x14ec THREADORDER - ok
11:35:12.0892 0x14ec [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll
11:35:12.0921 0x14ec TrkWks - ok
11:35:12.0954 0x14ec [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
11:35:12.0986 0x14ec TrustedInstaller - ok
11:35:13.0002 0x14ec [ 4CE278FC9671BA81A138D70823FCAA09, CBE501436696E32A3701B9F377B823AC36647B6626595F76CC63E2396AD7D300 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
11:35:13.0021 0x14ec tssecsrv - ok
11:35:13.0064 0x14ec [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
11:35:13.0094 0x14ec TsUsbFlt - ok
11:35:13.0237 0x14ec [ 9E086EF6E461A8B065A40E9634A5FE4B, 5614969125C431FFC504D8A83C91E262CD138C05765C9FE719B2621B3BB41602 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
11:35:13.0295 0x14ec TuneUp.UtilitiesSvc - ok
11:35:13.0342 0x14ec [ 45427C4B8CAC6B241478F149B935CD80, 7F772D6D00D1ADD394F5907804661C75780EE9F8DF21EF0719D3E4ABA00092B7 ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys
11:35:13.0350 0x14ec TuneUpUtilitiesDrv - ok
11:35:13.0388 0x14ec [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
11:35:13.0424 0x14ec tunnel - ok
11:35:13.0441 0x14ec [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
11:35:13.0450 0x14ec uagp35 - ok
11:35:13.0477 0x14ec [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
11:35:13.0518 0x14ec udfs - ok
11:35:13.0538 0x14ec [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe
11:35:13.0549 0x14ec UI0Detect - ok
11:35:13.0587 0x14ec [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
11:35:13.0596 0x14ec uliagpkx - ok
11:35:13.0609 0x14ec [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\drivers\umbus.sys
11:35:13.0625 0x14ec umbus - ok
11:35:13.0644 0x14ec [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
11:35:13.0661 0x14ec UmPass - ok
11:35:13.0791 0x14ec [ FDF92EC84FECEE834FB10A2A0A19BCDA, F81FCA3BEC10C84335DBAD9D2CDAB98C62252A864F23BDD482F97F86D5FA0B15 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
11:35:13.0850 0x14ec UNS - ok
11:35:13.0878 0x14ec [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll
11:35:13.0931 0x14ec upnphost - ok
11:35:13.0966 0x14ec [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
11:35:14.0000 0x14ec usbaudio - ok
11:35:14.0030 0x14ec [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
11:35:14.0059 0x14ec usbccgp - ok
11:35:14.0088 0x14ec [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys
11:35:14.0123 0x14ec usbcir - ok
11:35:14.0133 0x14ec [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\drivers\usbehci.sys
11:35:14.0143 0x14ec usbehci - ok
11:35:14.0184 0x14ec [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
11:35:14.0209 0x14ec usbhub - ok
11:35:14.0223 0x14ec [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\drivers\usbohci.sys
11:35:14.0246 0x14ec usbohci - ok
11:35:14.0267 0x14ec [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
11:35:14.0286 0x14ec usbprint - ok
11:35:14.0311 0x14ec [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\drivers\USBSTOR.SYS
11:35:14.0330 0x14ec USBSTOR - ok
11:35:14.0366 0x14ec [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
11:35:14.0376 0x14ec usbuhci - ok
11:35:14.0389 0x14ec [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
11:35:14.0403 0x14ec usbvideo - ok
11:35:14.0420 0x14ec [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll
11:35:14.0456 0x14ec UxSms - ok
11:35:14.0491 0x14ec [ 48A2E7F4F624CCE76D81ABE125ADDD3A, B309CFA33BAA41BE52A7C4978183AFA205FFD3F375CCDCBA5DB455B7EF4FFA38 ] UxTuneUp C:\Windows\System32\uxtuneup.dll
11:35:14.0499 0x14ec UxTuneUp - ok
11:35:14.0511 0x14ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc C:\Windows\system32\lsass.exe
11:35:14.0519 0x14ec VaultSvc - ok
11:35:14.0531 0x14ec [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
11:35:14.0539 0x14ec vdrvroot - ok
11:35:14.0567 0x14ec [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe
11:35:14.0607 0x14ec vds - ok
11:35:14.0653 0x14ec [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
11:35:14.0664 0x14ec vga - ok
11:35:14.0676 0x14ec [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys
11:35:14.0712 0x14ec VgaSave - ok
11:35:14.0736 0x14ec [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
11:35:14.0749 0x14ec vhdmp - ok
11:35:14.0782 0x14ec [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys
11:35:14.0789 0x14ec viaide - ok
11:35:14.0805 0x14ec [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys
11:35:14.0814 0x14ec volmgr - ok
11:35:14.0847 0x14ec [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
11:35:14.0863 0x14ec volmgrx - ok
11:35:14.0872 0x14ec [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys
11:35:14.0886 0x14ec volsnap - ok
11:35:14.0901 0x14ec [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
11:35:14.0912 0x14ec vsmraid - ok
11:35:14.0968 0x14ec [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe
11:35:15.0040 0x14ec VSS - ok
11:35:15.0050 0x14ec [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
11:35:15.0071 0x14ec vwifibus - ok
11:35:15.0097 0x14ec [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll
11:35:15.0133 0x14ec W32Time - ok
11:35:15.0147 0x14ec [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
11:35:15.0167 0x14ec WacomPen - ok
11:35:15.0210 0x14ec [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
11:35:15.0241 0x14ec WANARP - ok
11:35:15.0244 0x14ec [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
11:35:15.0270 0x14ec Wanarpv6 - ok
11:35:15.0357 0x14ec [ 3CEC96DE223E49EAAE3651FCF8FAEA6C, 4150DAB33E8D61076F1D4767BCAFC9B4ECCCCBD58FD4FB3CFE5B8D27DCDCAB61 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
11:35:15.0395 0x14ec WatAdminSvc - ok
11:35:15.0456 0x14ec [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe
11:35:15.0521 0x14ec wbengine - ok
11:35:15.0548 0x14ec [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
11:35:15.0566 0x14ec WbioSrvc - ok
11:35:15.0593 0x14ec [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll
11:35:15.0625 0x14ec wcncsvc - ok
11:35:15.0637 0x14ec [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
11:35:15.0661 0x14ec WcsPlugInService - ok
11:35:15.0685 0x14ec [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\DRIVERS\wd.sys
11:35:15.0693 0x14ec Wd - ok
11:35:15.0728 0x14ec [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
11:35:15.0756 0x14ec Wdf01000 - ok
11:35:15.0783 0x14ec [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll
11:35:15.0835 0x14ec WdiServiceHost - ok
11:35:15.0839 0x14ec [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll
11:35:15.0854 0x14ec WdiSystemHost - ok
11:35:15.0881 0x14ec [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll
11:35:15.0904 0x14ec WebClient - ok
11:35:15.0931 0x14ec [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll
11:35:15.0964 0x14ec Wecsvc - ok
11:35:15.0971 0x14ec [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll
11:35:16.0002 0x14ec wercplsupport - ok
11:35:16.0030 0x14ec [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll
11:35:16.0057 0x14ec WerSvc - ok
11:35:16.0066 0x14ec [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
11:35:16.0092 0x14ec WfpLwf - ok
11:35:16.0111 0x14ec [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys
11:35:16.0119 0x14ec WIMMount - ok
11:35:16.0136 0x14ec WinDefend - ok
11:35:16.0139 0x14ec WinHttpAutoProxySvc - ok
11:35:16.0182 0x14ec [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
11:35:16.0218 0x14ec Winmgmt - ok
11:35:16.0288 0x14ec [ BCB1310604AA415C4508708975B3931E, 9D943F086D454345153A0DD426B4432532A44FD87950386B186E1CAD2AC70565 ] WinRM C:\Windows\system32\WsmSvc.dll
11:35:16.0380 0x14ec WinRM - ok
11:35:16.0426 0x14ec [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
11:35:16.0438 0x14ec WinUsb - ok
11:35:16.0475 0x14ec [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll
11:35:16.0514 0x14ec Wlansvc - ok
11:35:16.0608 0x14ec [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
11:35:16.0670 0x14ec wlidsvc - ok
11:35:16.0696 0x14ec [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
11:35:16.0717 0x14ec WmiAcpi - ok
11:35:16.0746 0x14ec [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
11:35:16.0771 0x14ec wmiApSrv - ok
11:35:16.0786 0x14ec WMPNetworkSvc - ok
11:35:16.0829 0x14ec [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll
11:35:16.0853 0x14ec WPCSvc - ok
11:35:16.0874 0x14ec [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
11:35:16.0887 0x14ec WPDBusEnum - ok
11:35:16.0905 0x14ec [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
11:35:16.0931 0x14ec ws2ifsl - ok
11:35:16.0943 0x14ec [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\system32\wscsvc.dll
11:35:16.0968 0x14ec wscsvc - ok
11:35:17.0006 0x14ec [ 8D918B1DB190A4D9B1753A66FA8C96E8, DB7D2714DC04D2D6999A207D7399A5647C8653E5A1AD80856A65C5B6065AEDFE ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
11:35:17.0028 0x14ec WSDPrintDevice - ok
11:35:17.0030 0x14ec WSearch - ok
11:35:17.0104 0x14ec [ D9EF901DCA379CFE914E9FA13B73B4C4, 3BE9693B7B2AFEE23D72AF5DA211379724D752F0EC18ACB7D3DE3DDFC5AE0004 ] wuauserv C:\Windows\system32\wuaueng.dll
11:35:17.0159 0x14ec wuauserv - ok
11:35:17.0178 0x14ec [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
11:35:17.0193 0x14ec WudfPf - ok
11:35:17.0233 0x14ec [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
11:35:17.0250 0x14ec WUDFRd - ok
11:35:17.0260 0x14ec [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
11:35:17.0279 0x14ec wudfsvc - ok
11:35:17.0298 0x14ec [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll
11:35:17.0327 0x14ec WwanSvc - ok
11:35:17.0331 0x14ec ================ Scan global ===============================
11:35:17.0351 0x14ec [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll
11:35:17.0373 0x14ec [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
11:35:17.0383 0x14ec [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll
11:35:17.0402 0x14ec [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
11:35:17.0422 0x14ec [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe
11:35:17.0429 0x14ec [ Global ] - ok
11:35:17.0430 0x14ec ================ Scan MBR ==================================
11:35:17.0441 0x14ec [ 8D64D58275DA2BFEC42D8DC53B93FD78 ] \Device\Harddisk0\DR0
11:35:17.0817 0x14ec \Device\Harddisk0\DR0 - ok
11:35:17.0817 0x14ec ================ Scan VBR ==================================
11:35:17.0818 0x14ec [ E275EC11FAEF4EC8B20711597ACAABC9 ] \Device\Harddisk0\DR0\Partition1
11:35:17.0861 0x14ec \Device\Harddisk0\DR0\Partition1 - ok
11:35:17.0863 0x14ec [ 19C19F4592D85F27113AFA4D23FFD2A0 ] \Device\Harddisk0\DR0\Partition2
11:35:17.0903 0x14ec \Device\Harddisk0\DR0\Partition2 - ok
11:35:17.0905 0x14ec [ F171B3F11EA3E55749DCDADD69E91C84 ] \Device\Harddisk0\DR0\Partition3
11:35:17.0906 0x14ec \Device\Harddisk0\DR0\Partition3 - ok
11:35:17.0906 0x14ec ================ Scan generic autorun ======================
11:35:17.0962 0x14ec [ 554A50B5310E702029D3A675459108FF, 4757D5FFFAC7E73D4A3D931DB1399DDFDBD5811639BDA4517F886C21CC7F2574 ] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
11:35:17.0968 0x14ec hpsysdrv - ok
11:35:18.0012 0x14ec [ 74260F0ABFA90A22A964B6BDE690AAA2, 183E6601AB5740F4C0B46E3414D7B683594D2223C7F8FE67F7F4A97F95031181 ] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
11:35:18.0032 0x14ec SmartMenu - ok
11:35:18.0114 0x14ec [ 44FE94FCDF97E574B6986C5A81758628, D950CF92623CA2AD053F7DCC44B483176D02E721C716255957DA90A083D0F1B9 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
11:35:18.0174 0x14ec NvBackend - ok
11:35:18.0323 0x14ec [ 4D97DB3508FA1742B5F2C9F89E45A4B1, 98894115842EA89D81C90857967C93CE953DE8408D940EA8763BF02146325FE4 ] C:\Program Files\ESET\ESET Smart Security\egui.exe
11:35:18.0464 0x14ec egui - ok
11:35:18.0507 0x14ec [ 48C3EBD6D5E52AFCB1A0FA9B7F9802FA, 4F2E27AA8305FFC94F65C65C5FDB8462C92ED02A7B37627404382C3CAB65AC59 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
11:35:18.0514 0x14ec iCloudServices - ok
11:35:18.0528 0x14ec [ 799BCC829F48F19C5689478179060435, 495C6E363982F7BE1785A46C12ED4AC99E0AF98F340F1CE3C55D39EBE6FE33AA ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
11:35:18.0535 0x14ec ApplePhotoStreams - ok
11:35:18.0741 0x14ec [ 52FD61AFC3D2BF55226A7E5AC8C06673, 4D3E022FF7627416F88D56F6ED5C3481A70C32506A8F9FC0B88FE4AB0341F08C ] C:\Users\Dávid\AppData\Roaming\Spotify\Spotify.exe
11:35:18.0902 0x14ec Spotify - ok
11:35:18.0974 0x14ec [ 6FA1F6B8090F04D581E16212886BD861, 1A0D90C6BC9EBE319BF4524FA0EA326073A256252377B860AF48AECE46B6DAC2 ] C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
11:35:19.0009 0x14ec Spotify Web Helper - ok
11:35:19.0010 0x14ec Waiting for KSN requests completion. In queue: 103
11:35:20.0010 0x14ec Waiting for KSN requests completion. In queue: 103
11:35:21.0010 0x14ec Waiting for KSN requests completion. In queue: 103
11:35:22.0010 0x14ec Waiting for KSN requests completion. In queue: 103
11:35:23.0010 0x14ec Waiting for KSN requests completion. In queue: 103
11:35:24.0010 0x14ec Waiting for KSN requests completion. In queue: 103
11:35:25.0040 0x14ec AV detected via SS2: ESET Smart Security 7.0, C:\Program Files\ESET\ESET Smart Security\ecmd.exe ( 7.0.317.0 ), 0x41000 ( enabled : updated )
11:35:25.0041 0x14ec FW detected via SS2: ESET personal firewall, C:\Program Files\ESET\ESET Smart Security\ecmd.exe ( 7.0.317.0 ), 0x41010 ( enabled )
11:35:30.0788 0x14ec ============================================================
11:35:30.0788 0x14ec Scan finished
11:35:30.0788 0x14ec ============================================================
11:35:30.0794 0x0e80 Detected object count: 1
11:35:30.0794 0x0e80 Actual detected object count: 1
11:35:46.0776 0x0e80 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
11:35:46.0776 0x0e80 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip

Xperrience píše:Vyzerá to že to pomohlo!

Bohuzel to jeste neni dobre, drzi se to tam jako kliste. Neco se povedlo dat pryc, ale porad tam jeste neco zbyva

Xperrience píše:alej som si niekde (možno len podmetovo) všimol že sa odstránil ten súbor kde bolo po francúzsky napísané správca systému

Ano, ten jsem odstrelil.

Xperrience píše:takže jediné čo mi teraz vadí je asi iba to, že pri štarte počítač hučí

To nevim, jestli se vyresi, jestli to ma souvislost se softwarem. Uvidime.

Xperrience píše:nejaký AV so silným Firewallom

To je tezke, zadny neni 100% a kdyz to nekdo umi a je odhodlany, stejne se vam tam dostane. Ja treba pouzivam jen Avast free a firewall od Windows Zatim jsem nemel zadny problem a uz to tak mam radu let. A naopak, byly tady stroje totalne zavirovane se spickovym placenym zabezpecenim. Jinak tady je vyber. Datum prispevku je sice hodne stary, ale on se aktualizuje a vetsina stale plati http://forum.viry.cz/viewtopic.php?f=29&t=6152

Xperrience píše:myslím že jediné čo som nespravil podľa postupu bolo to, že som nedokázal nájsť umiestnenie Combofixu, tak som tam hodil iba odkaz a do neho hodil ten .txt

Ano, to jsem mel na mysli Vetsinou, kdyz nejsou CF a script na stejnem miste, nefunguje to. A na plose to byt nemohlo, protoze mate v nazvu uctu carku a to del problemy




TDSSKiller je cisty, coz je moc dobre

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1012

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.17207

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.793000 GHz
Memory total: 4276662272, free: 1330634752

Downloaded database version: v2014.07.12.01
Downloaded database version: v2014.07.09.01
=======================================
Initializing...
Done!
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: A6461A41

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 204800
Partition file system is NTFS
Partition is bootable

Partition 1 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 206848 Numsec = 1924126720

Partition 2 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 1924333568 Numsec = 29188096

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 1000204886016 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-1953505168-1953525168)...
Done!
Scan finished
=======================================


Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-i.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removal finished

Fajn, dejte novy log z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by Dávid at 2014-07-12 11:58:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 811 GB (86%) free of 940 GB
Total RAM: 4079 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:58:22, on 12. 7. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Users\Dávid\AppData\Roaming\Spotify\spotify.exe
C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe
C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe
C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Dávid.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (file missing)
O4 - HKLM\..\Run: [BATINDICATOR] C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe
O4 - HKLM\..\Run: [LaunchHPOSIAPP] C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKCU\..\Run: [Spotify] "C:\Users\Dávid\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - Startup: Curse.lnk = ?
O4 - Startup: Obrazovková spinka a spúšťač programu OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Razer Surround Audio Service (RzMaelstromVADStreamingService) - Unknown owner - C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10129 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13149 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {1EDC916E-0DCC-4BA2-A98A-58DE0DE8A21E}
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe"
"c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
taskeng.exe {322BB4F7-26C9-462F-9BDA-294061767FD4}
"taskhost.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\svchost.exe -k HPZ12
"C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2972
"C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe" /TUStart /pid:2916
"C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe"
"C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" /background
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe"
"C:\Users\Dávid\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
"C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"C:\Users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe" /startup
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe"
"C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe" -Embedding
"C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="3792.0.67496420\1668641182" /prefetch:673131151
"C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="3792.1.1987768054\467659337" /prefetch:673131151
"C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="3792.2.817503150\1985309981" /prefetch:673131151
"C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="3792.3.1222569123\1272265695" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19,22 --gpu-vendor-id=0x10de --gpu-device-id=0x1244 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3788 --lang=en-US --log-severity=disable /prefetch:822062411
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4042d340-fd54-4f34-a44e-71be21f962ad -SystemEventPortName:HostProcess-512ffa6e-c214-4046-a8f8-96be9ab122af -IoCancelEventPortName:HostProcess-5dbadcc8-24c0-4480-8a7b-eae2b859071c -NonStateChangingEventPortName:HostProcess-77ca35f6-0bf7-4faa-8cd2-3cacc0ffe12e -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:b02347d3-8a3d-4c16-8086-e5f02c02a437 -DeviceGroupId:WpdFsGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5148.0.1688949374\495131870" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,15,39 --gpu-vendor-id=0x10de --gpu-device-id=0x1244 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3788 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="5148.2.752128343\1473169128" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="5148.3.1733654326\1562000583" /prefetch:673131151
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5148.4.563904670\1518400842" --ppapi-flash-args=enable_hw_video_decode=1 --lang=sk --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/FlashHardwareVideoDecode/HwVideo/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_30/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --disable-client-side-phishing-detection --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-software-compositing --channel="5148.7.251215834\810944599" /prefetch:673131151
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Dávid\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf8b583d8bd57f.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\HPCeeScheduleForDAVIDPC$.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForDAVIDPC$ (null)
C:\Windows\tasks\HPCeeScheduleForDávid.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForDávid (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-06-29 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"=c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [2008-11-20 62768]
"SmartMenu"=C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-09-15 611896]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-04-30 2199840]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2014-02-24 5581888]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-09-30 825184]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-04-24 1425408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]
"ApplePhotoStreams"=C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [2013-11-20 59720]
"Spotify"=C:\Users\Dávid\AppData\Roaming\Spotify\Spotify.exe [2014-07-07 6162488]
"Spotify Web Helper"=C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-07-07 1178168]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
""= []
"BATINDICATOR"=C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe [2009-05-09 2068992]
"LaunchHPOSIAPP"=C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe [2009-04-04 385024]
"Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2010-08-30 61112]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2014-06-23 3816272]

C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Curse.lnk - C:\Users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe
Obrazovková spinka a spúšťač programu OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2011-03-30 52920]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"EnableShellExecuteHooks"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-07-12 11:39:01 ----D---- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-07-12 11:33:38 ----A---- C:\TDSSKiller.3.0.0.40_12.07.2014_11.33.38_log.txt
2014-07-12 11:24:01 ----SHD---- C:\$RECYCLE.BIN
2014-07-12 11:22:56 ----A---- C:\ComboFix.txt
2014-07-12 10:42:34 ----A---- C:\ComboFix - odkaz.lnk
2014-07-12 09:24:01 ----A---- C:\Windows\zip.exe
2014-07-12 09:24:01 ----A---- C:\Windows\SWSC.exe
2014-07-12 09:24:01 ----A---- C:\Windows\SWREG.exe
2014-07-12 09:24:01 ----A---- C:\Windows\sed.exe
2014-07-12 09:24:01 ----A---- C:\Windows\PEV.exe
2014-07-12 09:24:01 ----A---- C:\Windows\NIRCMD.exe
2014-07-12 09:24:01 ----A---- C:\Windows\MBR.exe
2014-07-12 09:24:01 ----A---- C:\Windows\grep.exe
2014-07-12 09:23:55 ----D---- C:\Qoobox
2014-07-12 09:23:43 ----D---- C:\Windows\erdnt
2014-07-11 13:42:06 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-07-11 13:41:50 ----D---- C:\ProgramData\Malwarebytes
2014-07-11 13:41:50 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-11 13:41:50 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-07-11 13:41:50 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-07-11 13:41:50 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-07-11 11:32:56 ----D---- C:\rsit
2014-07-11 11:32:56 ----D---- C:\Program Files\trend micro
2014-07-10 07:49:41 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-07-10 07:49:41 ----A---- C:\Windows\system32\rdpcorets.dll
2014-07-10 07:49:40 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-07-10 07:49:40 ----A---- C:\Windows\system32\mstscax.dll
2014-07-10 07:45:05 ----A---- C:\Users\Dávid\AppData\Roaming\igfxsrvc.exe.tmp
2014-07-09 20:07:03 ----D---- C:\Users\Dávid\AppData\Roaming\Curse Client
2014-07-09 20:06:41 ----D---- C:\Users\Dávid\AppData\Roaming\Curse
2014-07-09 15:44:13 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-09 15:44:11 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-07-09 15:44:11 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-07-09 15:44:11 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-07-09 15:44:11 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-07-09 15:44:11 ----A---- C:\Windows\system32\wksprtPS.dll
2014-07-09 15:44:11 ----A---- C:\Windows\system32\wksprt.exe
2014-07-09 15:44:11 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-07-09 15:44:11 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-09 15:44:11 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-09 15:44:11 ----A---- C:\Windows\system32\tsgqec.dll
2014-07-09 15:44:11 ----A---- C:\Windows\system32\mstsc.exe
2014-07-09 15:44:11 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-07-09 15:44:11 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-07-09 15:44:10 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-07-09 15:44:10 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-07-09 15:40:11 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-07-09 15:40:11 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-07-09 15:40:10 ----A---- C:\Windows\system32\rdpudd.dll
2014-07-09 15:40:10 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-07-09 15:37:13 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-07-09 15:37:12 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-07-09 15:37:09 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-07-09 15:37:09 ----A---- C:\Windows\system32\qdvd.dll
2014-07-09 10:08:16 ----A---- C:\Windows\system32\aepdu.dll
2014-07-09 10:08:16 ----A---- C:\Windows\system32\aeinv.dll
2014-07-09 10:08:12 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 10:08:11 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-07-09 10:08:11 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-07-09 10:08:11 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 10:08:11 ----A---- C:\Windows\system32\osk.exe
2014-07-09 10:08:11 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 10:08:09 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-07-09 10:08:09 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-07-09 10:08:09 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-07-09 10:08:09 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-07-09 10:08:09 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-07-09 10:08:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-07-09 10:08:09 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-07-09 10:08:09 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 10:08:09 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 10:08:09 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 10:08:09 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 10:08:09 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 10:08:09 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 10:08:09 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 10:08:06 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-07-09 10:08:06 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-07-09 10:08:05 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-07-09 10:08:05 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 10:08:05 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 10:08:05 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 10:08:04 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-07-09 10:08:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-07-09 10:08:04 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-07-09 10:08:04 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-07-09 10:08:04 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-07-09 10:08:04 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-07-09 10:08:04 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 10:08:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 10:08:04 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 10:08:04 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 10:08:04 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 10:08:03 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-07-09 10:08:03 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 10:08:03 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 10:08:03 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-07-09 10:08:02 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-07-09 10:08:02 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 10:08:02 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 10:08:01 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 10:08:01 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 10:08:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 10:08:01 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 10:08:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 10:08:01 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 10:08:01 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 10:08:00 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 10:08:00 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 10:08:00 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 10:08:00 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 10:08:00 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 10:07:59 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 10:07:59 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 10:07:35 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-09 10:07:35 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-07-09 10:07:35 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-07 21:48:50 ----D---- C:\Users\Dávid\AppData\Roaming\.minecraft
2014-07-07 16:32:00 ----D---- C:\Users\Dávid\AppData\Roaming\Spotify
2014-07-02 17:45:51 ----D---- C:\Users\Dávid\AppData\Roaming\TeamViewer
2014-06-29 17:00:20 ----D---- C:\ProgramData\Oracle
2014-06-29 17:00:17 ----D---- C:\ProgramData\Sun
2014-06-29 17:00:10 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-06-29 16:59:59 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-06-29 16:59:59 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-06-29 16:59:59 ----A---- C:\Windows\SYSWOW64\java.exe
2014-06-29 16:59:35 ----D---- C:\Program Files (x86)\Java
2014-06-27 11:39:49 ----D---- C:\Users\Dávid\AppData\Roaming\Apple Computer
2014-06-27 11:39:12 ----D---- C:\Program Files\Common Files\Apple
2014-06-27 11:38:21 ----D---- C:\Program Files (x86)\Apple Software Update
2014-06-27 11:38:14 ----D---- C:\ProgramData\Apple
2014-06-27 11:38:14 ----D---- C:\Program Files\Bonjour
2014-06-27 11:38:14 ----D---- C:\Program Files (x86)\Bonjour
2014-06-25 20:26:03 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2014-06-24 13:41:28 ----A---- C:\Windows\SYSWOW64\uxtuneup.dll
2014-06-24 13:41:28 ----A---- C:\Windows\system32\uxtuneup.dll
2014-06-23 07:00:42 ----AH---- C:\Windows\system32\hamachi.sys
2014-06-20 13:46:50 ----D---- C:\Users\Dávid\AppData\Roaming\PDAppFlex
2014-06-20 13:46:36 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-06-20 13:43:06 ----D---- C:\Program Files\Adobe
2014-06-20 13:38:08 ----D---- C:\Program Files\Common Files\Adobe
2014-06-20 13:26:48 ----D---- C:\ProgramData\Adobe
2014-06-20 13:24:13 ----D---- C:\ProgramData\Package Cache
2014-06-20 13:22:59 ----D---- C:\Program Files (x86)\Adobe
2014-06-18 15:18:29 ----D---- C:\Users\Dávid\AppData\Roaming\poclbm
2014-06-18 12:13:07 ----D---- C:\Users\Dávid\AppData\Roaming\HP Support Assistant
2014-06-18 12:13:00 ----D---- C:\Users\Dávid\AppData\Roaming\HpUpdate
2014-06-17 22:20:38 ----D---- C:\Users\Dávid\AppData\Roaming\Bitcoin
2014-06-17 16:51:38 ----D---- C:\Program Files\Microsoft Xbox 360 Accessories
2014-06-17 16:28:45 ----D---- C:\ProgramData\Origin
2014-06-17 16:25:31 ----D---- C:\ProgramData\Electronic Arts
2014-06-17 14:03:56 ----D---- C:\Program Files (x86)\FIFA 14
2014-06-17 14:01:28 ----D---- C:\ProgramData\AskPartnerNetwork
2014-06-17 14:01:28 ----D---- C:\Program Files (x86)\VNT
2014-06-17 14:01:28 ----D---- C:\Program Files (x86)\AskPartnerNetwork
2014-06-17 14:00:51 ----D---- C:\ProgramData\APN
2014-06-17 14:00:42 ----D---- C:\Users\Dávid\AppData\Roaming\uTorrent
2014-06-16 16:12:49 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-06-16 16:12:49 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-06-16 16:12:49 ----A---- C:\Windows\system32\WMPhoto.dll
2014-06-16 16:12:49 ----A---- C:\Windows\explorer.exe
2014-06-16 16:12:47 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-06-16 16:12:47 ----A---- C:\Windows\system32\d3d10warp.dll
2014-06-16 16:12:46 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-06-16 16:12:46 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-06-16 16:12:46 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-06-16 16:12:46 ----A---- C:\Windows\system32\d2d1.dll
2014-06-16 16:12:45 ----A---- C:\Windows\system32\spoolsv.exe
2014-06-16 16:12:45 ----A---- C:\Windows\splwow64.exe
2014-06-16 15:56:10 ----SD---- C:\Windows\system32\CompatTel
2014-06-16 15:48:55 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-06-16 15:48:55 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-06-16 15:48:55 ----A---- C:\Windows\system32\wmploc.DLL
2014-06-16 15:48:54 ----A---- C:\Windows\system32\wmp.dll
2014-06-16 15:40:39 ----D---- C:\Windows\Migration
2014-06-16 15:36:20 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-06-16 15:31:43 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-06-16 15:31:36 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-06-16 15:31:36 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-06-16 15:31:36 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-06-16 15:31:36 ----A---- C:\Windows\system32\elshyph.dll
2014-06-16 15:31:30 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-06-16 15:31:29 ----A---- C:\Windows\SYSWOW64\url.dll
2014-06-16 15:31:28 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-06-16 15:31:28 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-06-16 15:31:28 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-06-16 15:31:28 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-06-16 15:31:28 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-06-16 15:31:28 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-06-16 15:31:28 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-06-16 15:31:26 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-06-16 15:31:23 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-16 15:31:23 ----A---- C:\Windows\system32\jsIntl.dll
2014-06-16 15:31:22 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-06-16 15:31:22 ----A---- C:\Windows\system32\msls31.dll
2014-06-16 15:31:22 ----A---- C:\Windows\system32\msfeedssync.exe
2014-06-16 15:31:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-06-16 15:31:22 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-06-16 15:31:21 ----A---- C:\Windows\system32\mshtmler.dll
2014-06-16 15:31:21 ----A---- C:\Windows\system32\iesysprep.dll
2014-06-16 15:31:20 ----A---- C:\Windows\system32\url.dll
2014-06-16 15:31:20 ----A---- C:\Windows\system32\ieapfltr.dat
2014-06-16 15:31:20 ----A---- C:\Windows\system32\icardie.dll
2014-06-16 15:31:19 ----A---- C:\Windows\system32\wextract.exe
2014-06-16 15:31:19 ----A---- C:\Windows\system32\webcheck.dll
2014-06-16 15:31:19 ----A---- C:\Windows\system32\licmgr10.dll
2014-06-16 15:31:19 ----A---- C:\Windows\system32\inseng.dll
2014-06-16 15:31:18 ----A---- C:\Windows\system32\iexpress.exe
2014-06-16 15:31:16 ----A---- C:\Windows\system32\pngfilt.dll
2014-06-16 15:31:16 ----A---- C:\Windows\system32\occache.dll
2014-06-16 15:31:16 ----A---- C:\Windows\system32\mshta.exe
2014-06-16 15:31:15 ----A---- C:\Windows\system32\jscript.dll
2014-06-16 15:31:15 ----A---- C:\Windows\system32\imgutil.dll
2014-06-16 15:31:15 ----A---- C:\Windows\system32\iepeers.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-16 15:29:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-16 15:29:09 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-06-16 15:29:09 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-06-16 15:29:09 ----A---- C:\Windows\system32\XpsPrint.dll
2014-06-16 15:29:08 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-06-16 15:29:08 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-06-16 15:29:08 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-06-16 15:29:07 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-06-16 15:29:07 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-06-16 15:29:07 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-06-16 15:29:07 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-06-16 15:29:07 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-06-16 15:29:07 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-06-16 15:29:07 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-06-16 15:29:07 ----A---- C:\Windows\system32\FntCache.dll
2014-06-16 15:29:07 ----A---- C:\Windows\system32\dxgi.dll
2014-06-16 15:29:07 ----A---- C:\Windows\system32\DWrite.dll
2014-06-16 15:29:06 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-06-16 15:29:06 ----A---- C:\Windows\system32\d3d10level9.dll
2014-06-16 15:29:06 ----A---- C:\Windows\system32\d3d10core.dll
2014-06-16 15:29:06 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-06-16 15:29:06 ----A---- C:\Windows\system32\d3d10_1.dll
2014-06-16 15:29:06 ----A---- C:\Windows\system32\d3d10.dll
2014-06-16 15:29:05 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-06-16 15:29:05 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-06-16 15:29:02 ----A---- C:\Windows\system32\UIAnimation.dll
2014-06-16 07:43:21 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-06-16 07:43:21 ----A---- C:\Windows\system32\wwansvc.dll
2014-06-16 07:43:21 ----A---- C:\Windows\system32\msieftp.dll
2014-06-16 07:43:20 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-06-16 07:43:20 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-06-16 07:43:20 ----A---- C:\Windows\system32\comctl32.dll
2014-06-16 07:43:15 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-06-16 07:43:15 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-06-16 07:43:15 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-06-16 07:43:15 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-06-16 07:43:14 ----A---- C:\Windows\system32\shell32.dll
2014-06-16 07:43:13 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-06-16 07:43:09 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-06-16 07:43:09 ----A---- C:\Windows\system32\wintrust.dll
2014-06-16 07:43:02 ----A---- C:\Windows\system32\consent.exe
2014-06-16 07:43:01 ----A---- C:\Windows\system32\appinfo.dll
2014-06-16 07:42:57 ----A---- C:\Windows\system32\usp10.dll
2014-06-16 07:42:56 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-06-16 07:42:48 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-06-16 07:42:48 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-06-16 07:42:48 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-06-16 07:42:48 ----A---- C:\Windows\system32\cryptsvc.dll
2014-06-16 07:42:48 ----A---- C:\Windows\system32\cryptnet.dll
2014-06-16 07:42:48 ----A---- C:\Windows\system32\crypt32.dll
2014-06-16 07:42:45 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-06-16 07:42:45 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-06-16 07:42:45 ----A---- C:\Windows\system32\wer.dll
2014-06-16 07:42:45 ----A---- C:\Windows\system32\imagehlp.dll
2014-06-16 07:42:45 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-16 07:42:44 ----A---- C:\Windows\system32\drivers\netio.sys
2014-06-16 07:42:44 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-16 07:42:43 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-06-16 07:42:43 ----A---- C:\Windows\system32\tzres.dll
2014-06-16 07:42:38 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-06-16 07:42:38 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-06-16 07:42:38 ----A---- C:\Windows\system32\msxml6.dll
2014-06-16 07:42:38 ----A---- C:\Windows\system32\msxml3.dll
2014-06-16 07:42:37 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-06-16 07:42:37 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-06-16 07:42:37 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-16 07:42:37 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-16 07:42:24 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-06-16 07:42:24 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-06-16 07:42:23 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-06-16 07:42:20 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-06-16 07:42:20 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-06-16 07:42:20 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-06-16 07:42:20 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-06-16 07:42:20 ----A---- C:\Windows\system32\credui.dll
2014-06-16 07:42:20 ----A---- C:\Windows\system32\authui.dll
2014-06-16 07:42:17 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-06-16 07:42:17 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-06-16 07:42:17 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-06-16 07:42:17 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-06-16 07:42:17 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-06-16 07:42:17 ----A---- C:\Windows\system32\lpk.dll
2014-06-16 07:42:17 ----A---- C:\Windows\system32\fontsub.dll
2014-06-16 07:42:17 ----A---- C:\Windows\system32\dciman32.dll
2014-06-16 07:42:17 ----A---- C:\Windows\system32\atmlib.dll
2014-06-16 07:42:17 ----A---- C:\Windows\system32\atmfd.dll
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-06-16 07:42:15 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-06-16 07:42:15 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-06-16 07:42:15 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-06-16 07:42:15 ----A---- C:\Windows\system32\secproc_isv.dll
2014-06-16 07:42:15 ----A---- C:\Windows\system32\secproc.dll
2014-06-16 07:42:15 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-16 07:42:15 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-06-16 07:42:15 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-06-16 07:42:15 ----A---- C:\Windows\system32\RMActivate.exe
2014-06-16 07:42:15 ----A---- C:\Windows\system32\msdrm.dll
2014-06-16 07:42:13 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-06-16 07:42:13 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-06-16 07:42:13 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-06-16 07:42:13 ----A---- C:\Windows\system32\drivers\usbohci.sys
2014-06-16 07:42:13 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-06-16 07:42:13 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-06-16 07:42:13 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-06-16 07:42:13 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-06-16 07:42:13 ----A---- C:\Windows\system32\d3d11.dll
2014-06-16 07:42:09 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-06-16 07:42:09 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-06-16 07:42:08 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-06-16 07:42:08 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-06-16 07:42:07 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-06-16 07:42:06 ----A---- C:\Windows\system32\rpcrt4.dll
2014-06-16 07:42:05 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-06-16 07:42:05 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-06-16 07:42:05 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-06-16 07:42:05 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys
2014-06-16 07:42:04 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-06-16 07:42:04 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-06-16 07:42:04 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-06-16 07:42:04 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-06-16 07:42:04 ----A---- C:\Windows\system32\nlasvc.dll
2014-06-16 07:42:04 ----A---- C:\Windows\system32\nlaapi.dll
2014-06-16 07:42:04 ----A---- C:\Windows\system32\netevent.dll
2014-06-16 07:42:04 ----A---- C:\Windows\system32\netcorehc.dll
2014-06-16 07:42:04 ----A---- C:\Windows\system32\ncsi.dll
2014-06-16 07:42:04 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-06-16 07:42:04 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-06-16 07:42:01 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-06-16 07:42:01 ----A---- C:\Windows\system32\WebClnt.dll
2014-06-16 07:42:01 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-06-16 07:42:01 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-06-16 07:42:00 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-06-16 07:42:00 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-06-16 07:42:00 ----A---- C:\Windows\system32\davclnt.dll
2014-06-16 07:41:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-16 07:41:58 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-06-16 07:41:57 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-06-16 07:41:57 ----A---- C:\Windows\system32\winlogon.exe
2014-06-16 07:41:57 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-16 07:41:56 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-06-16 07:41:56 ----A---- C:\Windows\system32\objsel.dll
2014-06-16 07:41:56 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-16 07:41:56 ----A---- C:\Windows\system32\drivers\cng.sys
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-06-16 07:41:55 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\wincredprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\sspicli.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\smss.exe
2014-06-16 07:41:55 ----A---- C:\Windows\system32\secur32.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\lsass.exe
2014-06-16 07:41:55 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-16 07:41:55 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\dimsroam.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\csrsrv.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\cngprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\capiprovider.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\apisetschema.dll
2014-06-16 07:41:55 ----A---- C:\Windows\system32\adprovider.dll
2014-06-16 07:41:47 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-06-16 07:41:32 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-06-16 07:41:31 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-06-16 07:41:31 ----A---- C:\Windows\system32\mswsock.dll
2014-06-16 07:41:20 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-06-16 07:41:20 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-06-16 07:41:20 ----A---- C:\Windows\system32\tdh.dll
2014-06-16 07:41:20 ----A---- C:\Windows\system32\ntdll.dll
2014-06-16 07:41:20 ----A---- C:\Windows\system32\advapi32.dll
2014-06-16 07:41:19 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-06-16 07:41:11 ----A---- C:\Windows\system32\drivers\storport.sys
2014-06-16 07:41:11 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-06-16 07:41:10 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-06-16 07:41:10 ----A---- C:\Windows\system32\iologmsg.dll
2014-06-16 07:41:10 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-06-16 07:41:03 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-06-16 07:41:03 ----A---- C:\Windows\system32\shdocvw.dll
2014-06-16 07:40:56 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-06-16 07:40:56 ----A---- C:\Windows\system32\win32spl.dll
2014-06-16 07:40:55 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-06-16 07:40:55 ----A---- C:\Windows\system32\gdi32.dll
2014-06-16 07:40:54 ----A---- C:\Windows\system32\taskhost.exe
2014-06-16 07:40:53 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-06-16 07:40:53 ----A---- C:\Windows\system32\cryptdlg.dll
2014-06-16 07:40:49 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-16 07:40:49 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-06-16 07:40:49 ----A---- C:\Windows\system32\wow64win.dll
2014-06-16 07:40:49 ----A---- C:\Windows\system32\wow64.dll
2014-06-16 07:40:49 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-16 07:40:49 ----A---- C:\Windows\system32\kernel32.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-06-16 07:40:48 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-06-16 07:40:48 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-06-16 07:40:48 ----A---- C:\Windows\SYSWOW64\user.exe
2014-06-16 07:40:48 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-06-16 07:40:48 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-06-16 07:40:48 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-06-16 07:40:48 ----A---- C:\Windows\system32\wow64cpu.dll
2014-06-16 07:40:48 ----A---- C:\Windows\system32\winsrv.dll
2014-06-16 07:40:48 ----A---- C:\Windows\system32\ntvdm64.dll
2014-06-16 07:40:48 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-06-16 07:40:48 ----A---- C:\Windows\system32\conhost.exe
2014-06-16 07:40:46 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-06-16 07:40:46 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-06-16 07:40:46 ----A---- C:\Windows\system32\certutil.exe
2014-06-16 07:40:46 ----A---- C:\Windows\system32\certenc.dll
2014-06-16 07:40:41 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-06-16 07:40:41 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-06-16 07:40:41 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-06-16 07:40:41 ----A---- C:\Windows\system32\wscript.exe
2014-06-16 07:40:41 ----A---- C:\Windows\system32\scrrun.dll
2014-06-16 07:40:41 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-06-16 07:40:41 ----A---- C:\Windows\system32\cscript.exe
2014-06-16 07:40:40 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-06-16 07:40:40 ----A---- C:\Windows\system32\cdd.dll
2014-06-16 07:40:34 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-06-16 07:40:34 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-06-16 07:40:34 ----A---- C:\Windows\system32\nshwfp.dll
2014-06-16 07:40:34 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-06-16 07:40:34 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-06-16 07:36:45 ----A---- C:\Windows\system32\scavengeui.dll
2014-06-16 07:05:56 ----D---- C:\Windows\system32\SPReview
2014-06-16 07:05:18 ----D---- C:\Windows\system32\EventProviders
2014-06-16 03:41:17 ----A---- C:\Windows\system32\netfxperf.dll
2014-06-16 03:41:17 ----A---- C:\Windows\system32\dfshim.dll
2014-06-16 03:41:13 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-06-16 03:41:07 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2014-06-16 03:41:07 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2014-06-16 03:41:07 ----A---- C:\Windows\system32\sysmain.dll
2014-06-16 03:41:06 ----A---- C:\Windows\system32\MSVidCtl.dll
2014-06-16 03:41:04 ----A---- C:\Windows\system32\mscoree.dll
2014-06-16 03:41:04 ----A---- C:\Windows\system32\mmcndmgr.dll
2014-06-16 03:41:04 ----A---- C:\Windows\system32\mf.dll
2014-06-16 03:41:03 ----A---- C:\Windows\system32\xpsservices.dll
2014-06-16 03:41:02 ----A---- C:\Windows\system32\schedsvc.dll
2014-06-16 03:41:02 ----A---- C:\Windows\system32\ole32.dll
2014-06-16 03:41:01 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2014-06-16 03:41:01 ----A---- C:\Windows\system32\taskschd.dll
2014-06-16 03:41:01 ----A---- C:\Windows\system32\spwizui.dll
2014-06-16 03:41:01 ----A---- C:\Windows\system32\RacEngn.dll
2014-06-16 03:41:00 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-06-16 03:41:00 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2014-06-16 03:41:00 ----A---- C:\Windows\system32\wevtsvc.dll
2014-06-16 03:41:00 ----A---- C:\Windows\system32\vssapi.dll
2014-06-16 03:41:00 ----A---- C:\Windows\system32\ExplorerFrame.dll
2014-06-16 03:41:00 ----A---- C:\Windows\system32\diagperf.dll
2014-06-16 03:40:59 ----A---- C:\Windows\system32\UIRibbon.dll
2014-06-16 03:40:59 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2014-06-16 03:40:59 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2014-06-16 03:40:58 ----A---- C:\Windows\system32\WsmSvc.dll
2014-06-16 03:40:58 ----A---- C:\Windows\system32\WMVCORE.DLL
2014-06-16 03:40:57 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2014-06-16 03:40:57 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2014-06-16 03:40:57 ----A---- C:\Windows\system32\WinSAT.exe
2014-06-16 03:40:57 ----A---- C:\Windows\system32\spreview.exe
2014-06-16 03:40:57 ----A---- C:\Windows\system32\spinstall.exe
2014-06-16 03:40:57 ----A---- C:\Windows\system32\rdpdd.dll
2014-06-16 03:40:57 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2014-06-16 03:40:57 ----A---- C:\Windows\system32\PresentationHost.exe
2014-06-16 03:40:57 ----A---- C:\Windows\system32\MPSSVC.dll
2014-06-16 03:40:57 ----A---- C:\Windows\system32\CertEnroll.dll
2014-06-16 03:40:56 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2014-06-16 03:40:56 ----A---- C:\Windows\system32\SearchFolder.dll
2014-06-16 03:40:56 ----A---- C:\Windows\system32\d3d9.dll
2014-06-16 03:40:55 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2014-06-16 03:40:55 ----A---- C:\Windows\system32\VSSVC.exe
2014-06-16 03:40:55 ----A---- C:\Windows\system32\gpsvc.dll
2014-06-16 03:40:55 ----A---- C:\Windows\system32\dwmcore.dll
2014-06-16 03:40:55 ----A---- C:\Windows\system32\drivers\http.sys
2014-06-16 03:40:55 ----A---- C:\Windows\system32\dbgeng.dll
2014-06-16 03:40:55 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2014-06-16 03:40:54 ----A---- C:\Windows\SYSWOW64\ole32.dll
2014-06-16 03:40:54 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2014-06-16 03:40:54 ----A---- C:\Windows\system32\actxprxy.dll
2014-06-16 03:40:53 ----A---- C:\Windows\system32\termsrv.dll
2014-06-16 03:40:53 ----A---- C:\Windows\system32\qmgr.dll
2014-06-16 03:40:53 ----A---- C:\Windows\system32\netlogon.dll
2014-06-16 03:40:53 ----A---- C:\Windows\system32\imapi2fs.dll
2014-06-16 03:40:53 ----A---- C:\Windows\system32\audiosrv.dll
2014-06-16 03:40:52 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2014-06-16 03:40:52 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2014-06-16 03:40:52 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2014-06-16 03:40:52 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2014-06-16 03:40:52 ----A---- C:\Windows\system32\winhttp.dll
2014-06-16 03:40:52 ----A---- C:\Windows\system32\wbengine.exe
2014-06-16 03:40:52 ----A---- C:\Windows\system32\setupapi.dll
2014-06-16 03:40:52 ----A---- C:\Windows\system32\rpcss.dll
2014-06-16 03:40:52 ----A---- C:\Windows\system32\QAGENTRT.DLL
2014-06-16 03:40:52 ----A---- C:\Windows\system32\propsys.dll
2014-06-16 03:40:51 ----A---- C:\Windows\system32\WSDApi.dll
2014-06-16 03:40:51 ----A---- C:\Windows\system32\werconcpl.dll
2014-06-16 03:40:51 ----A---- C:\Windows\system32\user32.dll
2014-06-16 03:40:51 ----A---- C:\Windows\system32\taskeng.exe
2014-06-16 03:40:51 ----A---- C:\Windows\system32\odbc32.dll
2014-06-16 03:40:51 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-06-16 03:40:51 ----A---- C:\Windows\system32\dhcpcore.dll
2014-06-16 03:40:51 ----A---- C:\Windows\system32\certmgr.dll
2014-06-16 03:40:50 ----A---- C:\Windows\SYSWOW64\certcli.dll
2014-06-16 03:40:50 ----A---- C:\Windows\system32\tsmf.dll
2014-06-16 03:40:50 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2014-06-16 03:40:50 ----A---- C:\Windows\system32\drivers\netbt.sys
2014-06-16 03:40:49 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2014-06-16 03:40:49 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2014-06-16 03:40:49 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2014-06-16 03:40:49 ----A---- C:\Windows\system32\ws2_32.dll
2014-06-16 03:40:49 ----A---- C:\Windows\system32\wmicmiplugin.dll
2014-06-16 03:40:49 ----A---- C:\Windows\system32\shlwapi.dll
2014-06-16 03:40:49 ----A---- C:\Windows\system32\netshell.dll
2014-06-16 03:40:49 ----A---- C:\Windows\system32\netcfgx.dll
2014-06-16 03:40:49 ----A---- C:\Windows\system32\msdtctm.dll
2014-06-16 03:40:49 ----A---- C:\Windows\system32\framedynos.dll
2014-06-16 03:40:48 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2014-06-16 03:40:48 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2014-06-16 03:40:48 ----A---- C:\Windows\system32\wpdshext.dll
2014-06-16 03:40:48 ----A---- C:\Windows\system32\wmpps.dll
2014-06-16 03:40:48 ----A---- C:\Windows\system32\Query.dll
2014-06-16 03:40:48 ----A---- C:\Windows\system32\lsm.exe
2014-06-16 03:40:48 ----A---- C:\Windows\system32\drvstore.dll
2014-06-16 03:40:48 ----A---- C:\Windows\system32\comdlg32.dll
2014-06-16 03:40:48 ----A---- C:\Windows\system32\azroles.dll
2014-06-16 03:40:48 ----A---- C:\Windows\system32\apphelp.dll
2014-06-16 03:40:47 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2014-06-16 03:40:47 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2014-06-16 03:40:47 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2014-06-16 03:40:47 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2014-06-16 03:40:47 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2014-06-16 03:40:47 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2014-06-16 03:40:47 ----A---- C:\Windows\system32\Vault.dll
2014-06-16 03:40:47 ----A---- C:\Windows\system32\samsrv.dll
2014-06-16 03:40:47 ----A---- C:\Windows\system32\QAGENT.DLL
2014-06-16 03:40:47 ----A---- C:\Windows\system32\lpksetup.exe
2014-06-16 03:40:47 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2014-06-16 03:40:47 ----A---- C:\Windows\system32\cmd.exe
2014-06-16 03:40:47 ----A---- C:\Windows\system32\BFE.DLL
2014-06-16 03:40:46 ----A---- C:\Windows\SYSWOW64\Query.dll
2014-06-16 03:40:46 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2014-06-16 03:40:46 ----A---- C:\Windows\system32\sxs.dll
2014-06-16 03:40:46 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2014-06-16 03:40:45 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-06-16 03:40:45 ----A---- C:\Windows\SYSWOW64\upnp.dll
2014-06-16 03:40:45 ----A---- C:\Windows\system32\Wldap32.dll
2014-06-16 03:40:45 ----A---- C:\Windows\system32\taskcomp.dll
2014-06-16 03:40:45 ----A---- C:\Windows\system32\pnidui.dll
2014-06-16 03:40:45 ----A---- C:\Windows\system32\mfds.dll
2014-06-16 03:40:45 ----A---- C:\Windows\system32\mcbuilder.exe
2014-06-16 03:40:44 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2014-06-16 03:40:44 ----A---- C:\Windows\system32\ipsmsnap.dll
2014-06-16 03:40:43 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2014-06-16 03:40:43 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2014-06-16 03:40:43 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2014-06-16 03:40:43 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2014-06-16 03:40:43 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2014-06-16 03:40:43 ----A---- C:\Windows\system32\winsta.dll
2014-06-16 03:40:43 ----A---- C:\Windows\system32\webservices.dll
2014-06-16 03:40:43 ----A---- C:\Windows\system32\sqlsrv32.dll
2014-06-16 03:40:43 ----A---- C:\Windows\system32\SessEnv.dll
2014-06-16 03:40:43 ----A---- C:\Windows\system32\hgprint.dll
2014-06-16 03:40:43 ----A---- C:\Windows\system32\fveapi.dll
2014-06-16 03:40:43 ----A---- C:\Windows\system32\dot3api.dll
2014-06-16 03:40:42 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2014-06-16 03:40:42 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2014-06-16 03:40:42 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2014-06-16 03:40:42 ----A---- C:\Windows\system32\WMNetMgr.dll
2014-06-16 03:40:42 ----A---- C:\Windows\system32\schtasks.exe
2014-06-16 03:40:42 ----A---- C:\Windows\system32\prncache.dll
2014-06-16 03:40:42 ----A---- C:\Windows\system32\mcmde.dll
2014-06-16 03:40:42 ----A---- C:\Windows\system32\drivers\volsnap.sys
2014-06-16 03:40:42 ----A---- C:\Windows\system32\drivers\msrpc.sys
2014-06-16 03:40:41 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2014-06-16 03:40:41 ----A---- C:\Windows\SYSWOW64\userenv.dll
2014-06-16 03:40:41 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2014-06-16 03:40:41 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2014-06-16 03:40:41 ----A---- C:\Windows\SYSWOW64\cmd.exe
2014-06-16 03:40:41 ----A---- C:\Windows\system32\wmpmde.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\wlanpref.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\vpnike.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\userenv.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\sppobjs.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\photowiz.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\IPSECSVC.DLL
2014-06-16 03:40:41 ----A---- C:\Windows\system32\FXSSVC.exe
2014-06-16 03:40:41 ----A---- C:\Windows\system32\framedyn.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\evr.dll
2014-06-16 03:40:41 ----A---- C:\Windows\system32\drivers\rdbss.sys
2014-06-16 03:40:41 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2014-06-16 03:40:41 ----A---- C:\Windows\system32\AudioSes.dll
2014-06-16 03:40:40 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2014-06-16 03:40:40 ----A---- C:\Windows\system32\WMPEncEn.dll
2014-06-16 03:40:40 ----A---- C:\Windows\system32\wmpeffects.dll
2014-06-16 03:40:40 ----A---- C:\Windows\system32\SyncCenter.dll
2014-06-16 03:40:40 ----A---- C:\Windows\system32\srvsvc.dll
2014-06-16 03:40:40 ----A---- C:\Windows\system32\shsvcs.dll
2014-06-16 03:40:40 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-06-16 03:40:40 ----A---- C:\Windows\system32\fde.dll
2014-06-16 03:40:39 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2014-06-16 03:40:39 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-06-16 03:40:39 ----A---- C:\Windows\SYSWOW64\propsys.dll
2014-06-16 03:40:39 ----A---- C:\Windows\SYSWOW64\mfds.dll
2014-06-16 03:40:39 ----A---- C:\Windows\SYSWOW64\azroles.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\WinSATAPI.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\tcpipcfg.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\stobject.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\spp.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\QSHVHOST.DLL
2014-06-16 03:40:39 ----A---- C:\Windows\system32\netid.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\netdiagfx.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\localsec.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\inetpp.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\imapi2.dll
2014-06-16 03:40:39 ----A---- C:\Windows\system32\drivers\udfs.sys
2014-06-16 03:40:39 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2014-06-16 03:40:39 ----A---- C:\Windows\system32\bcryptprimitives.dll
2014-06-16 03:40:38 ----A---- C:\Windows\SYSWOW64\themeui.dll
2014-06-16 03:40:38 ----A---- C:\Windows\system32\scansetting.dll
2014-06-16 03:40:38 ----A---- C:\Windows\system32\printui.dll
2014-06-16 03:40:38 ----A---- C:\Windows\system32\pla.dll
2014-06-16 03:40:38 ----A---- C:\Windows\system32\mspbda.dll
2014-06-16 03:40:38 ----A---- C:\Windows\system32\msinfo32.exe
2014-06-16 03:40:38 ----A---- C:\Windows\system32\biocpl.dll
2014-06-16 03:40:37 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2014-06-16 03:40:37 ----A---- C:\Windows\SYSWOW64\spp.dll
2014-06-16 03:40:37 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2014-06-16 03:40:37 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2014-06-16 03:40:37 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2014-06-16 03:40:37 ----A---- C:\Windows\system32\wusa.exe
2014-06-16 03:40:37 ----A---- C:\Windows\system32\wiaservc.dll
2014-06-16 03:40:37 ----A---- C:\Windows\system32\vds.exe
2014-06-16 03:40:37 ----A---- C:\Windows\system32\rpchttp.dll
2014-06-16 03:40:37 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2014-06-16 03:40:37 ----A---- C:\Windows\system32\msdri.dll
2014-06-16 03:40:37 ----A---- C:\Windows\system32\mscms.dll
2014-06-16 03:40:37 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2014-06-16 03:40:37 ----A---- C:\Windows\system32\drivers\pci.sys
2014-06-16 03:40:37 ----A---- C:\Windows\system32\aitagent.exe
2014-06-16 03:40:36 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2014-06-16 03:40:36 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2014-06-16 03:40:36 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-06-16 03:40:36 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2014-06-16 03:40:36 ----A---- C:\Windows\system32\XpsRasterService.dll
2014-06-16 03:40:36 ----A---- C:\Windows\system32\wisptis.exe
2014-06-16 03:40:36 ----A---- C:\Windows\system32\PkgMgr.exe
2014-06-16 03:40:36 ----A---- C:\Windows\system32\ocsetup.exe
2014-06-16 03:40:36 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2014-06-16 03:40:36 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2014-06-16 03:40:35 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2014-06-16 03:40:35 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2014-06-16 03:40:35 ----A---- C:\Windows\SYSWOW64\calc.exe
2014-06-16 03:40:35 ----A---- C:\Windows\system32\wpdbusenum.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\wcncsvc.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\upnp.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\sppwinob.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\Robocopy.exe
2014-06-16 03:40:35 ----A---- C:\Windows\system32\ocsetapi.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\mprapi.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\eapphost.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\eapp3hst.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\DXP.dll
2014-06-16 03:40:35 ----A---- C:\Windows\system32\drivers\volmgr.sys
2014-06-16 03:40:35 ----A---- C:\Windows\system32\drivers\msdsm.sys
2014-06-16 03:40:35 ----A---- C:\Windows\system32\ci.dll
2014-06-16 03:40:34 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2014-06-16 03:40:34 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2014-06-16 03:40:34 ----A---- C:\Windows\SYSWOW64\sxs.dll
2014-06-16 03:40:34 ----A---- C:\Windows\SYSWOW64\stobject.dll
2014-06-16 03:40:34 ----A---- C:\Windows\SYSWOW64\netshell.dll
2014-06-16 03:40:34 ----A---- C:\Windows\system32\thumbcache.dll
2014-06-16 03:40:34 ----A---- C:\Windows\system32\t2embed.dll
2014-06-16 03:40:34 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2014-06-16 03:40:34 ----A---- C:\Windows\system32\hal.dll
2014-06-16 03:40:34 ----A---- C:\Windows\system32\DxpTaskSync.dll
2014-06-16 03:40:34 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2014-06-16 03:40:33 ----A---- C:\Windows\SYSWOW64\prncache.dll
2014-06-16 03:40:33 ----A---- C:\Windows\SYSWOW64\printui.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\themeui.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\scecli.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\puiobj.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\onex.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2014-06-16 03:40:33 ----A---- C:\Windows\system32\msasn1.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\iasrad.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\dwmredir.dll
2014-06-16 03:40:33 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2014-06-16 03:40:33 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2014-06-16 03:40:32 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2014-06-16 03:40:32 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2014-06-16 03:40:32 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2014-06-16 03:40:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2014-06-16 03:40:32 ----A---- C:\Windows\SYSWOW64\net1.exe
2014-06-16 03:40:32 ----A---- C:\Windows\system32\wdc.dll
2014-06-16 03:40:31 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2014-06-16 03:40:31 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2014-06-16 03:40:31 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\wscapi.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\wlangpui.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\wiadefui.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\VAN.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\StructuredQuery.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\SndVol.exe
2014-06-16 03:40:31 ----A---- C:\Windows\system32\sdengin2.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\scesrv.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\samcli.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\regapi.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\rasmans.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\netcenter.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\msftedit.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\iasacct.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\dskquoui.dll
2014-06-16 03:40:31 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2014-06-16 03:40:30 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2014-06-16 03:40:30 ----A---- C:\Windows\SYSWOW64\webservices.dll
2014-06-16 03:40:30 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2014-06-16 03:40:30 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2014-06-16 03:40:30 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2014-06-16 03:40:30 ----A---- C:\Windows\SYSWOW64\fde.dll
2014-06-16 03:40:30 ----A---- C:\Windows\system32\TabSvc.dll
2014-06-16 03:40:30 ----A---- C:\Windows\system32\srchadmin.dll
2014-06-16 03:40:30 ----A---- C:\Windows\system32\setupcl.exe
2014-06-16 03:40:30 ----A---- C:\Windows\system32\QUTIL.DLL
2014-06-16 03:40:30 ----A---- C:\Windows\system32\drivers\termdd.sys
2014-06-16 03:40:30 ----A---- C:\Windows\system32\drivers\msahci.sys

2014-06-16 03:40:29 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-06-16 03:40:29 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2014-06-16 03:40:29 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2014-06-16 03:40:29 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2014-06-16 03:40:29 ----A---- C:\Windows\SYSWOW64\pla.dll
2014-06-16 03:40:29 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2014-06-16 03:40:29 ----A---- C:\Windows\system32\tapisrv.dll
2014-06-16 03:40:29 ----A---- C:\Windows\system32\rastls.dll
2014-06-16 03:40:29 ----A---- C:\Windows\system32\netiohlp.dll
2014-06-16 03:40:29 ----A---- C:\Windows\system32\msconfig.exe
2014-06-16 03:40:29 ----A---- C:\Windows\system32\mimefilt.dll
2014-06-16 03:40:29 ----A---- C:\Windows\system32\ListSvc.dll
2014-06-16 03:40:29 ----A---- C:\Windows\system32\hgcpl.dll
2014-06-16 03:40:29 ----A---- C:\Windows\system32\drivers\raspptp.sys
2014-06-16 03:40:29 ----A---- C:\Windows\system32\drivers\acpi.sys
2014-06-16 03:40:28 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-06-16 03:40:28 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2014-06-16 03:40:28 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2014-06-16 03:40:28 ----A---- C:\Windows\system32\mtxclu.dll
2014-06-16 03:40:28 ----A---- C:\Windows\system32\lsmproxy.dll
2014-06-16 03:40:28 ----A---- C:\Windows\system32\fdeploy.dll
2014-06-16 03:40:28 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2014-06-16 03:40:28 ----A---- C:\Windows\system32\drivers\ks.sys
2014-06-16 03:40:28 ----A---- C:\Windows\system32\clusapi.dll
2014-06-16 03:40:28 ----A---- C:\Windows\system32\basecsp.dll
2014-06-16 03:40:28 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2014-06-16 03:40:27 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2014-06-16 03:40:27 ----A---- C:\Windows\SYSWOW64\winmm.dll
2014-06-16 03:40:27 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2014-06-16 03:40:27 ----A---- C:\Windows\SYSWOW64\onex.dll
2014-06-16 03:40:27 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2014-06-16 03:40:27 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\themecpl.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\sharemediacpl.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\RpcRtRemote.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\riched20.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\powercpl.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\nci.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\logoncli.dll
2014-06-16 03:40:27 ----A---- C:\Windows\system32\dnscmmc.dll
2014-06-16 03:40:26 ----A---- C:\Windows\SYSWOW64\samcli.dll
2014-06-16 03:40:26 ----A---- C:\Windows\SYSWOW64\proquota.exe
2014-06-16 03:40:26 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2014-06-16 03:40:26 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2014-06-16 03:40:26 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2014-06-16 03:40:26 ----A---- C:\Windows\SYSWOW64\autochk.exe
2014-06-16 03:40:26 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2014-06-16 03:40:26 ----A---- C:\Windows\system32\wkssvc.dll
2014-06-16 03:40:26 ----A---- C:\Windows\system32\vpnikeapi.dll
2014-06-16 03:40:26 ----A---- C:\Windows\system32\sppcomapi.dll
2014-06-16 03:40:26 ----A---- C:\Windows\system32\SensorsCpl.dll
2014-06-16 03:40:26 ----A---- C:\Windows\system32\netjoin.dll
2014-06-16 03:40:26 ----A---- C:\Windows\system32\Narrator.exe
2014-06-16 03:40:26 ----A---- C:\Windows\system32\Faultrep.dll
2014-06-16 03:40:26 ----A---- C:\Windows\system32\eudcedit.exe
2014-06-16 03:40:26 ----A---- C:\Windows\system32\cabview.dll
2014-06-16 03:40:26 ----A---- C:\Windows\system32\autochk.exe
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\regapi.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\msutb.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2014-06-16 03:40:25 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\wwanconn.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\wpd_ci.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\wlanui.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\shsetup.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\sdclt.exe
2014-06-16 03:40:25 ----A---- C:\Windows\system32\prntvpt.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\nshipsec.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\mscorier.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\fms.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\drivers\winusb.sys
2014-06-16 03:40:25 ----A---- C:\Windows\system32\drivers\wanarp.sys
2014-06-16 03:40:25 ----A---- C:\Windows\system32\drivers\scsiport.sys
2014-06-16 03:40:25 ----A---- C:\Windows\system32\bcdsrv.dll
2014-06-16 03:40:25 ----A---- C:\Windows\system32\autofmt.exe
2014-06-16 03:40:25 ----A---- C:\Windows\system32\autoconv.exe
2014-06-16 03:40:25 ----A---- C:\Windows\system32\audiodg.exe
2014-06-16 03:40:24 ----A---- C:\Windows\SYSWOW64\wdc.dll
2014-06-16 03:40:24 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2014-06-16 03:40:24 ----A---- C:\Windows\SYSWOW64\netid.dll
2014-06-16 03:40:24 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-06-16 03:40:24 ----A---- C:\Windows\system32\SmiEngine.dll
2014-06-16 03:40:24 ----A---- C:\Windows\system32\mprddm.dll
2014-06-16 03:40:24 ----A---- C:\Windows\system32\mblctr.exe
2014-06-16 03:40:24 ----A---- C:\Windows\system32\fontext.dll
2014-06-16 03:40:24 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2014-06-16 03:40:24 ----A---- C:\Windows\system32\dps.dll
2014-06-16 03:40:24 ----A---- C:\Windows\system32\Display.dll
2014-06-16 03:40:24 ----A---- C:\Windows\system32\batmeter.dll
2014-06-16 03:40:24 ----A---- C:\Windows\system32\AxInstSv.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\Vault.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\untfs.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-06-16 03:40:23 ----A---- C:\Windows\SYSWOW64\nci.dll
2014-06-16 03:40:23 ----A---- C:\Windows\system32\wmpsrcwp.dll
2014-06-16 03:40:23 ----A---- C:\Windows\system32\usercpl.dll
2014-06-16 03:40:23 ----A---- C:\Windows\system32\rtutils.dll
2014-06-16 03:40:23 ----A---- C:\Windows\system32\provsvc.dll
2014-06-16 03:40:23 ----A---- C:\Windows\system32\DiagCpl.dll
2014-06-16 03:40:23 ----A---- C:\Windows\system32\bootres.dll
2014-06-16 03:40:22 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2014-06-16 03:40:22 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2014-06-16 03:40:22 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2014-06-16 03:40:22 ----A---- C:\Windows\SYSWOW64\Display.dll
2014-06-16 03:40:22 ----A---- C:\Windows\system32\wpccpl.dll
2014-06-16 03:40:22 ----A---- C:\Windows\system32\sppsvc.exe
2014-06-16 03:40:22 ----A---- C:\Windows\system32\SndVolSSO.dll
2014-06-16 03:40:22 ----A---- C:\Windows\system32\rasppp.dll
2014-06-16 03:40:22 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2014-06-16 03:40:22 ----A---- C:\Windows\system32\dxdiagn.dll
2014-06-16 03:40:22 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2014-06-16 03:40:22 ----A---- C:\Windows\system32\dot3cfg.dll
2014-06-16 03:40:21 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2014-06-16 03:40:21 ----A---- C:\Windows\SYSWOW64\userinit.exe
2014-06-16 03:40:21 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2014-06-16 03:40:21 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2014-06-16 03:40:21 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2014-06-16 03:40:21 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2014-06-16 03:40:21 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2014-06-16 03:40:21 ----A---- C:\Windows\system32\untfs.dll
2014-06-16 03:40:21 ----A---- C:\Windows\system32\taskmgr.exe
2014-06-16 03:40:21 ----A---- C:\Windows\system32\proquota.exe
2014-06-16 03:40:21 ----A---- C:\Windows\system32\prnfldr.dll
2014-06-16 03:40:21 ----A---- C:\Windows\system32\pdh.dll
2014-06-16 03:40:21 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2014-06-16 03:40:21 ----A---- C:\Windows\system32\hbaapi.dll
2014-06-16 03:40:21 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2014-06-16 03:40:20 ----A---- C:\Windows\SYSWOW64\cabview.dll
2014-06-16 03:40:20 ----A---- C:\Windows\system32\userinit.exe
2014-06-16 03:40:20 ----A---- C:\Windows\system32\accessibilitycpl.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\scecli.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\mscms.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\localsec.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\fontext.dll
2014-06-16 03:40:19 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2014-06-16 03:40:19 ----A---- C:\Windows\system32\zipfldr.dll
2014-06-16 03:40:19 ----A---- C:\Windows\system32\sud.dll
2014-06-16 03:40:19 ----A---- C:\Windows\system32\slui.exe
2014-06-16 03:40:19 ----A---- C:\Windows\system32\DeviceCenter.dll
2014-06-16 03:40:19 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2014-06-16 03:40:18 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2014-06-16 03:40:18 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2014-06-16 03:40:18 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2014-06-16 03:40:18 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2014-06-16 03:40:18 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2014-06-16 03:40:18 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2014-06-16 03:40:18 ----A---- C:\Windows\system32\twext.dll
2014-06-16 03:40:18 ----A---- C:\Windows\system32\taskbarcpl.dll
2014-06-16 03:40:18 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2014-06-16 03:40:18 ----A---- C:\Windows\system32\networkmap.dll
2014-06-16 03:40:18 ----A---- C:\Windows\system32\dot3svc.dll
2014-06-16 03:40:18 ----A---- C:\Windows\system32\cryptui.dll
2014-06-16 03:40:18 ----A---- C:\Windows\system32\ActionCenter.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\VAN.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2014-06-16 03:40:17 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\uxlib.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\tzutil.exe
2014-06-16 03:40:17 ----A---- C:\Windows\system32\syncui.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\sisbkup.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\sdcpl.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\recovery.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\recdisc.exe
2014-06-16 03:40:17 ----A---- C:\Windows\system32\OobeFldr.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\isoburn.exe
2014-06-16 03:40:17 ----A---- C:\Windows\system32\efscore.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\dsuiext.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2014-06-16 03:40:17 ----A---- C:\Windows\system32\cca.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\bcdedit.exe
2014-06-16 03:40:17 ----A---- C:\Windows\system32\azroleui.dll
2014-06-16 03:40:17 ----A---- C:\Windows\system32\asycfilt.dll
2014-06-16 03:40:16 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2014-06-16 03:40:16 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2014-06-16 03:40:16 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2014-06-16 03:40:16 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2014-06-16 03:40:16 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-06-16 03:40:16 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\wlanmsm.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\systemcpl.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\sysclass.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\shwebsvc.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\sdrsvc.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\netplwiz.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\ncryptui.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\httpapi.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\drivers\mpio.sys
2014-06-16 03:40:16 ----A---- C:\Windows\system32\certcli.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\autoplay.dll
2014-06-16 03:40:16 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\wusa.exe
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\sud.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2014-06-16 03:40:15 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\vdsutil.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\termmgr.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\spwizeng.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\sethc.exe
2014-06-16 03:40:15 ----A---- C:\Windows\system32\ReAgent.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\ntlanman.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\msvidc32.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\msscp.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\MFPlay.dll
2014-06-16 03:40:15 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\syncui.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\ftp.exe
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\efscore.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2014-06-16 03:40:14 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\ssText3d.scr
2014-06-16 03:40:14 ----A---- C:\Windows\system32\sqlcese30.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\slwga.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\rdpd3d.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\iyuv_32.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\iTVData.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\iprtrmgr.dll
2014-06-16 03:40:14 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\sethc.exe
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\riched20.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2014-06-16 03:40:13 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\wavemsp.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\srvcli.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\srrstr.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\ntprint.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\nslookup.exe
2014-06-16 03:40:13 ----A---- C:\Windows\system32\NAPHLPR.DLL
2014-06-16 03:40:13 ----A---- C:\Windows\system32\msiexec.exe
2014-06-16 03:40:13 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2014-06-16 03:40:13 ----A---- C:\Windows\system32\bcdboot.exe
2014-06-16 03:40:13 ----A---- C:\Windows\system32\acppage.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\migisol.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\fms.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\dpx.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-06-16 03:40:12 ----A---- C:\Windows\SYSWOW64\activeds.dll
2014-06-16 03:40:12 ----A---- C:\Windows\system32\sppnp.dll
2014-06-16 03:40:12 ----A---- C:\Windows\system32\remotepg.dll
2014-06-16 03:40:12 ----A---- C:\Windows\system32\networkexplorer.dll
2014-06-16 03:40:12 ----A---- C:\Windows\system32\certprop.dll
2014-06-16 03:40:12 ----A---- C:\Windows\system32\cabinet.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2014-06-16 03:40:11 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2014-06-16 03:40:11 ----A---- C:\Windows\system32\wvc.dll
2014-06-16 03:40:11 ----A---- C:\Windows\system32\wsqmcons.exe
2014-06-16 03:40:11 ----A---- C:\Windows\system32\wsnmp32.dll
2014-06-16 03:40:11 ----A---- C:\Windows\system32\wmpdxm.dll
2014-06-16 03:40:11 ----A---- C:\Windows\system32\wmdrmdev.dll
2014-06-16 03:40:11 ----A---- C:\Windows\system32\wkscli.dll
2014-06-16 03:40:11 ----A---- C:\Windows\system32\WinSCard.dll
2014-06-16 03:40:11 ----A---- C:\Windows\system32\WerFaultSecure.exe
2014-06-16 03:40:11 ----A---- C:\Windows\system32\net1.exe
2014-06-16 03:40:11 ----A---- C:\Windows\system32\ftp.exe
2014-06-16 03:40:11 ----A---- C:\Windows\system32\dfrgui.exe
2014-06-16 03:40:11 ----A---- C:\Windows\system32\blackbox.dll
2014-06-16 03:40:10 ----A---- C:\Windows\twain_32.dll
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\wvc.dll
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\twext.dll
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\qcap.dll
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\qasf.dll
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2014-06-16 03:40:10 ----A---- C:\Windows\SYSWOW64\mstask.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\unimdmat.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\OpcServices.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\msyuv.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\msrle32.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\mfps.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\mapistub.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\mapi32.dll
2014-06-16 03:40:10 ----A---- C:\Windows\system32\Bubbles.scr
2014-06-16 03:40:09 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2014-06-16 03:40:09 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2014-06-16 03:40:09 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-06-16 03:40:09 ----A---- C:\Windows\system32\tsbyuv.dll
2014-06-16 03:40:09 ----A---- C:\Windows\system32\seclogon.dll
2014-06-16 03:40:09 ----A---- C:\Windows\system32\Ribbons.scr
2014-06-16 03:40:09 ----A---- C:\Windows\system32\Mystify.scr
2014-06-16 03:40:09 ----A---- C:\Windows\system32\iscsium.dll
2014-06-16 03:40:09 ----A---- C:\Windows\system32\ifsutil.dll
2014-06-16 03:40:09 ----A---- C:\Windows\system32\diskraid.exe
2014-06-16 03:40:08 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2014-06-16 03:40:08 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2014-06-16 03:40:08 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2014-06-16 03:40:08 ----A---- C:\Windows\system32\drivers\umbus.sys
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\raschap.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2014-06-16 03:40:07 ----A---- C:\Windows\SYSWOW64\acppage.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\wmpshell.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2014-06-16 03:40:07 ----A---- C:\Windows\system32\umb.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\tlscsp.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\runonce.exe
2014-06-16 03:40:07 ----A---- C:\Windows\system32\rdpencom.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\raschap.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\qasf.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\perfmon.exe
2014-06-16 03:40:07 ----A---- C:\Windows\system32\netutils.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2014-06-16 03:40:07 ----A---- C:\Windows\system32\muifontsetup.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\FXSAPI.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\dbghelp.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\AzSqlExt.dll
2014-06-16 03:40:07 ----A---- C:\Windows\system32\ActionQueue.dll
2014-06-16 03:40:07 ----A---- C:\Windows\bfsvc.exe
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\onexui.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\input.dll
2014-06-16 03:40:06 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-06-16 03:40:06 ----A---- C:\Windows\system32\wpdwcn.dll
2014-06-16 03:40:06 ----A---- C:\Windows\system32\WMVSDECD.DLL
2014-06-16 03:40:06 ----A---- C:\Windows\system32\WMADMOD.DLL
2014-06-16 03:40:06 ----A---- C:\Windows\system32\wiavideo.dll
2014-06-16 03:40:06 ----A---- C:\Windows\system32\vdsbas.dll
2014-06-16 03:40:06 ----A---- C:\Windows\system32\syssetup.dll
2014-06-16 03:40:06 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2014-06-16 03:40:06 ----A---- C:\Windows\system32\MdSched.exe
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\shacct.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\runonce.exe
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\logagent.exe
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2014-06-16 03:40:05 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2014-06-16 03:40:05 ----A---- C:\Windows\system32\WPDSp.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\wmdrmnet.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\vss_ps.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\tabcal.exe
2014-06-16 03:40:05 ----A---- C:\Windows\system32\shacct.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2014-06-16 03:40:05 ----A---- C:\Windows\system32\qcap.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\nltest.exe
2014-06-16 03:40:05 ----A---- C:\Windows\system32\mstask.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\msnetobj.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\Mcx2Svc.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\logman.exe
2014-06-16 03:40:05 ----A---- C:\Windows\system32\drivers\rmcast.sys
2014-06-16 03:40:05 ----A---- C:\Windows\system32\cscapi.dll
2014-06-16 03:40:05 ----A---- C:\Windows\system32\bitsadmin.exe
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\pdh.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\logman.exe
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2014-06-16 03:40:04 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2014-06-16 03:40:04 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2014-06-16 03:40:04 ----A---- C:\Windows\system32\spbcd.dll
2014-06-16 03:40:04 ----A---- C:\Windows\system32\qdv.dll
2014-06-16 03:40:04 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2014-06-16 03:40:04 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2014-06-16 03:40:04 ----A---- C:\Windows\system32\fphc.dll
2014-06-16 03:40:04 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2014-06-16 03:40:04 ----A---- C:\Windows\system32\dot3ui.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\utildll.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\takeown.exe
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\fphc.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2014-06-16 03:40:03 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2014-06-16 03:40:03 ----A---- C:\Windows\system32\vfwwdm32.dll
2014-06-16 03:40:03 ----A---- C:\Windows\system32\takeown.exe
2014-06-16 03:40:03 ----A---- C:\Windows\system32\shimgvw.dll
2014-06-16 03:40:03 ----A---- C:\Windows\system32\QCLIPROV.DLL
2014-06-16 03:40:03 ----A---- C:\Windows\system32\PnPUnattend.exe
2014-06-16 03:40:03 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2014-06-16 03:40:03 ----A---- C:\Windows\system32\EhStorAPI.dll
2014-06-16 03:40:03 ----A---- C:\Windows\system32\djoin.exe
2014-06-16 03:40:03 ----A---- C:\Windows\system32\cmstp.exe
2014-06-16 03:40:03 ----A---- C:\Windows\system32\amstream.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\qdv.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2014-06-16 03:40:02 ----A---- C:\Windows\SYSWOW64\cca.dll
2014-06-16 03:40:02 ----A---- C:\Windows\system32\WavDest.dll
2014-06-16 03:40:02 ----A---- C:\Windows\system32\nrpsrv.dll
2014-06-16 03:40:02 ----A---- C:\Windows\system32\MultiDigiMon.exe
2014-06-16 03:40:02 ----A---- C:\Windows\system32\KMSVC.DLL
2014-06-16 03:40:02 ----A---- C:\Windows\system32\iasrecst.dll
2014-06-16 03:40:02 ----A---- C:\Windows\system32\fdProxy.dll
2014-06-16 03:40:02 ----A---- C:\Windows\system32\drivers\pacer.sys
2014-06-16 03:40:02 ----A---- C:\Windows\system32\CertPolEng.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\resutils.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\relog.exe
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\itircl.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2014-06-16 03:40:01 ----A---- C:\Windows\SYSWOW64\amstream.dll
2014-06-16 03:40:01 ----A---- C:\Windows\system32\sscore.dll
2014-06-16 03:40:01 ----A---- C:\Windows\system32\relog.exe
2014-06-16 03:40:01 ----A---- C:\Windows\system32\mydocs.dll
2014-06-16 03:40:01 ----A---- C:\Windows\system32\msdmo.dll
2014-06-16 03:40:01 ----A---- C:\Windows\system32\mobsync.exe
2014-06-16 03:40:01 ----A---- C:\Windows\system32\itircl.dll
2014-06-16 03:40:01 ----A---- C:\Windows\system32\iscsicli.exe
2014-06-16 03:40:01 ----A---- C:\Windows\system32\dot3msm.dll
2014-06-16 03:40:01 ----A---- C:\Windows\system32\diskpart.exe
2014-06-16 03:40:01 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\netutils.dll
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\findstr.exe
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2014-06-16 03:40:00 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\sppc.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\schedcli.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\onexui.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\mciqtz32.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\manage-bde.exe
2014-06-16 03:40:00 ----A---- C:\Windows\system32\luainstall.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\choice.exe
2014-06-16 03:40:00 ----A---- C:\Windows\system32\FXSTIFF.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\findstr.exe
2014-06-16 03:40:00 ----A---- C:\Windows\system32\eappgnui.dll
2014-06-16 03:40:00 ----A---- C:\Windows\system32\drivers\tunnel.sys
2014-06-16 03:40:00 ----A---- C:\Windows\system32\drivers\dfsc.sys
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\sppc.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\spopk.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2014-06-16 03:39:59 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\UIRibbonRes.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\TRAPI.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\spopk.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\repair-bde.exe
2014-06-16 03:39:59 ----A---- C:\Windows\system32\RDPENCDD.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\odbcconf.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\inetmib1.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\FXSMON.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\fixmapi.exe
2014-06-16 03:39:59 ----A---- C:\Windows\system32\elsTrans.dll
2014-06-16 03:39:59 ----A---- C:\Windows\system32\drivers\tdi.sys
2014-06-16 03:39:58 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2014-06-16 03:39:58 ----A---- C:\Windows\SYSWOW64\perfts.dll
2014-06-16 03:39:58 ----A---- C:\Windows\SYSWOW64\imm32.dll
2014-06-16 03:39:58 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2014-06-16 03:39:58 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2014-06-16 03:39:58 ----A---- C:\Windows\system32\wshbth.dll
2014-06-16 03:39:58 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2014-06-16 03:39:58 ----A---- C:\Windows\system32\napdsnap.dll
2014-06-16 03:39:58 ----A---- C:\Windows\system32\LogonUI.exe
2014-06-16 03:39:58 ----A---- C:\Windows\system32\FXSUNATD.exe
2014-06-16 03:39:58 ----A---- C:\Windows\system32\dsauth.dll
2014-06-16 03:39:58 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2014-06-16 03:39:58 ----A---- C:\Windows\system32\cscdll.dll
2014-06-16 03:39:58 ----A---- C:\Windows\system32\bitsperf.dll
2014-06-16 03:39:57 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2014-06-16 03:39:57 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2014-06-16 03:39:57 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2014-06-16 03:39:57 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2014-06-16 03:39:57 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2014-06-16 03:39:57 ----A---- C:\Windows\system32\wsdchngr.dll
2014-06-16 03:39:57 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2014-06-16 03:39:56 ----A---- C:\Windows\SYSWOW64\sscore.dll
2014-06-16 03:39:55 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2014-06-16 03:39:55 ----A---- C:\Windows\SYSWOW64\shgina.dll
2014-06-16 03:39:55 ----A---- C:\Windows\SYSWOW64\riched32.dll
2014-06-16 03:39:55 ----A---- C:\Windows\system32\shgina.dll
2014-06-16 03:39:54 ----A---- C:\Windows\system32\wshirda.dll
2014-06-16 03:39:54 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2014-06-16 03:39:54 ----A---- C:\Windows\system32\drivers\hidusb.sys
2014-06-16 03:39:54 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2014-06-16 03:39:54 ----A---- C:\Windows\system32\drivers\appid.sys
2014-06-16 03:39:53 ----A---- C:\Windows\system32\rdpcfgex.dll
2014-06-16 03:39:52 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2014-06-16 03:39:52 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-06-16 03:39:52 ----A---- C:\Windows\SYSWOW64\browseui.dll
2014-06-16 03:39:52 ----A---- C:\Windows\system32\spwmp.dll
2014-06-16 03:39:52 ----A---- C:\Windows\system32\riched32.dll
2014-06-16 03:39:52 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2014-06-16 03:39:52 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2014-06-16 03:39:52 ----A---- C:\Windows\system32\C_ISCII.DLL
2014-06-16 03:39:52 ----A---- C:\Windows\system32\browseui.dll
2014-06-16 03:39:51 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-06-16 03:39:51 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\shunimpl.dll
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDTUQ.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDTUF.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDSG.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDSF.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDPO.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDNEPR.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\kbdlk41a.dll
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDINTAM.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDINBEN.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDGR1.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\KBDGKL.DLL
2014-06-16 03:39:51 ----A---- C:\Windows\system32\dxmasf.dll
2014-06-16 03:39:51 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2014-06-16 03:39:51 ----A---- C:\Windows\system32\drivers\scfilter.sys
2014-06-16 03:39:51 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2014-06-16 03:39:51 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2014-06-16 03:39:51 ----A---- C:\Windows\system32\drivers\cdrom.sys
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\spwizres.dll
2014-06-16 03:39:50 ----A---- C:\Windows\system32\pifmgr.dll
2014-06-16 03:39:50 ----A---- C:\Windows\system32\nlsbres.dll
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDUS.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDTURME.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDMON.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDMAORI.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDLT1.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDINTEL.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDINORI.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDINMAR.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDINKAN.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDINHIN.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDGEO.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDCZ1.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDBULG.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDBLR.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-06-16 03:39:50 ----A---- C:\Windows\system32\BlbEvents.dll
2014-06-16 03:39:46 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2014-06-16 03:39:46 ----A---- C:\Windows\system32\dpx.dll
2014-06-16 03:39:42 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2014-06-16 03:39:33 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2014-06-16 03:37:59 ----A---- C:\Windows\system32\wbemcomn.dll
2014-06-16 03:37:51 ----A---- C:\Windows\system32\sqmapi.dll
2014-06-16 03:00:24 ----D---- C:\Program Files (x86)\MSXML 4.0
2014-06-15 22:14:33 ----D---- C:\ProgramData\LogMeIn
2014-06-15 21:19:13 ----D---- C:\ProgramData\Recovery
2014-06-15 21:08:55 ----D---- C:\Users\Dávid\AppData\Roaming\Mozilla
2014-06-15 21:07:49 ----A---- C:\Windows\SYSWOW64\CmdLineExt_x64.dll
2014-06-15 21:05:37 ----D---- C:\Windows\system32\MRT
2014-06-15 21:05:36 ----A---- C:\Windows\system32\MRT.exe
2014-06-15 21:05:06 ----D---- C:\Users\Dávid\AppData\Roaming\WinRAR
2014-06-15 21:04:41 ----D---- C:\Program Files\WinRAR
2014-06-15 20:58:17 ----D---- C:\Users\Dávid\AppData\Roaming\Leadertech
2014-06-15 20:50:03 ----D---- C:\Program Files (x86)\EA Sports
2014-06-15 20:20:16 ----SHD---- C:\System Volume Information
2014-06-15 20:20:16 ----ASH---- C:\pagefile.sys
2014-06-15 20:20:14 ----ASH---- C:\hiberfil.sys
2014-06-15 19:04:00 ----D---- C:\Users\Dávid\AppData\Roaming\LolClient
2014-06-15 16:14:19 ----D---- C:\Program Files (x86)\Hearthstone
2014-06-15 16:06:38 ----D---- C:\Users\Dávid\AppData\Roaming\NVIDIA
2014-06-15 16:06:29 ----D---- C:\Users\Dávid\AppData\Roaming\Battle.net
2014-06-15 16:06:20 ----D---- C:\ProgramData\Blizzard Entertainment
2014-06-15 16:06:20 ----D---- C:\Program Files (x86)\Battle.net
2014-06-15 16:05:12 ----D---- C:\ProgramData\Battle.net
2014-06-15 15:57:21 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-06-15 15:57:21 ----A---- C:\Windows\system32\esent.dll
2014-06-15 15:57:21 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-06-15 15:57:21 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-06-15 15:57:21 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-06-15 15:57:20 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-06-15 15:57:20 ----A---- C:\Windows\system32\fsutil.exe
2014-06-15 15:57:20 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-06-15 15:57:20 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-06-15 15:57:20 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-06-15 15:43:14 ----D---- C:\ProgramData\HP
2014-06-15 15:42:55 ----A---- C:\Windows\SYSWOW64\hppccompio.dll
2014-06-15 15:42:55 ----A---- C:\Windows\system32\hppdcompio.dll
2014-06-15 15:42:51 ----A---- C:\Windows\SYSWOW64\hpcdmc32.dll
2014-06-15 15:42:51 ----A---- C:\Windows\system32\hpcpn103.dll
2014-06-15 15:42:50 ----A---- C:\Windows\SYSWOW64\hpcc3103.dll
2014-06-15 15:39:20 ----A---- C:\Windows\AutoKMS.ini
2014-06-15 15:35:31 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2014-06-15 15:35:16 ----D---- C:\Program Files (x86)\Microsoft Sync Framework
2014-06-15 15:33:54 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-06-15 15:33:31 ----D---- C:\Program Files\Microsoft Office
2014-06-15 15:33:03 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-06-15 15:32:18 ----D---- C:\ProgramData\Microsoft Help
2014-06-15 15:31:59 ----RD---- C:\MSOCache
2014-06-15 15:07:42 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-06-15 15:07:42 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-06-15 15:07:42 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-06-15 15:07:42 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-06-15 15:07:41 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-06-15 15:07:41 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-06-15 15:07:41 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-06-15 15:07:41 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-06-15 15:07:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-06-15 15:07:41 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-06-15 15:07:41 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-06-15 15:07:41 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-06-15 15:07:41 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-06-15 15:07:41 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-06-15 15:07:40 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-06-15 15:07:40 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-06-15 15:07:39 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-06-15 15:07:39 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-06-15 15:07:39 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-06-15 15:07:39 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-06-15 15:07:38 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-06-15 15:07:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-06-15 15:07:38 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-06-15 15:07:38 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-06-15 15:07:38 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-06-15 15:07:37 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-06-15 15:07:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-06-15 15:07:37 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-06-15 15:07:37 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-06-15 15:07:36 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-06-15 15:07:36 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-06-15 15:07:36 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-06-15 15:07:36 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-06-15 15:07:35 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-06-15 15:07:35 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-06-15 15:07:35 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-06-15 15:07:35 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-06-15 15:07:34 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-06-15 15:07:34 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-06-15 15:07:34 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-06-15 15:07:34 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-06-15 15:07:34 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-06-15 15:07:33 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-06-15 15:07:33 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-06-15 15:07:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-06-15 15:07:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-06-15 15:07:33 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-06-15 15:07:33 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-06-15 15:07:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-06-15 15:07:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-06-15 15:07:32 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-06-15 15:07:32 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-06-15 15:07:32 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-06-15 15:07:32 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-06-15 15:07:32 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-06-15 15:07:32 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-06-15 15:07:31 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-06-15 15:07:31 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-06-15 15:07:31 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-06-15 15:07:31 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-06-15 15:07:31 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-06-15 15:07:31 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-06-15 15:07:30 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-06-15 15:07:30 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-06-15 15:07:29 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-06-15 15:07:29 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-06-15 15:07:28 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-06-15 15:07:27 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-06-15 15:07:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-06-15 15:07:27 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-06-15 15:07:27 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-06-15 15:07:27 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-06-15 15:07:27 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-06-15 15:07:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-06-15 15:07:26 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-06-15 15:07:26 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-06-15 15:07:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-06-15 15:07:26 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-06-15 15:07:26 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-06-15 15:07:26 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-06-15 15:07:26 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-06-15 15:07:25 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-06-15 15:07:25 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-06-15 15:07:25 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-06-15 15:07:25 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-06-15 15:07:24 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-06-15 15:07:24 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-06-15 15:07:24 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-06-15 15:07:24 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-06-15 15:07:24 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-06-15 15:07:24 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-06-15 15:07:24 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-06-15 15:07:24 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-06-15 15:07:23 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-06-15 15:07:23 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-06-15 15:07:22 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-06-15 15:07:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-06-15 15:07:22 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-06-15 15:07:22 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-06-15 15:07:21 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-06-15 15:07:21 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-06-15 15:07:20 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-06-15 15:07:20 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-06-15 15:07:20 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-06-15 15:07:20 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-06-15 15:07:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-06-15 15:07:17 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-06-15 15:07:16 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-06-15 15:07:16 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-06-15 15:07:15 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-06-15 15:07:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-06-15 15:07:15 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-06-15 15:07:15 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-06-15 15:07:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-06-15 15:07:15 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-06-15 15:07:15 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-06-15 15:07:15 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-06-15 15:07:15 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-06-15 15:07:15 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-06-15 15:07:14 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-06-15 15:07:14 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-06-15 15:07:14 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-06-15 15:07:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-06-15 15:07:14 ----A---- C:\Windows\system32\xinput1_3.dll
2014-06-15 15:07:14 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-06-15 15:07:14 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-06-15 15:07:14 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-06-15 15:07:13 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-06-15 15:07:13 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-06-15 15:07:13 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-06-15 15:07:13 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-06-15 15:07:12 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-06-15 15:07:12 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-06-15 15:07:12 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-06-15 15:07:12 ----A---- C:\Windows\system32\d3dx10.dll
2014-06-15 15:07:11 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-06-15 15:07:11 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-06-15 15:07:11 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-06-15 15:07:11 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-06-15 15:07:11 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-06-15 15:07:11 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-06-15 15:07:10 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-06-15 15:07:10 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-06-15 15:07:07 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-06-15 15:07:07 ----A---- C:\Windows\system32\xinput1_2.dll
2014-06-15 15:07:06 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-06-15 15:07:06 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-06-15 15:07:06 ----A---- C:\Windows\system32\xinput1_1.dll
2014-06-15 15:07:06 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-06-15 15:07:05 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-06-15 15:07:05 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-06-15 15:06:52 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-06-15 15:06:52 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-06-15 15:06:51 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-06-15 15:06:51 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-06-15 15:06:51 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-06-15 15:06:51 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-06-15 15:06:51 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-06-15 15:06:51 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-06-15 15:06:50 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-06-15 15:06:50 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-06-15 15:06:49 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-06-15 15:06:49 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-06-15 15:06:49 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-06-15 15:06:49 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-06-15 15:06:48 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-06-15 15:06:48 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-06-15 15:06:48 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-06-15 15:06:48 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-06-15 14:22:49 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-06-15 14:22:49 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-06-15 14:22:49 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-06-15 14:22:49 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-06-15 14:22:48 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-06-15 14:22:01 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2014-06-15 14:21:50 ----D---- C:\Riot Games
2014-06-15 14:21:17 ----D---- C:\ProgramData\PMB Files
2014-06-15 14:21:12 ----D---- C:\Program Files (x86)\Pando Networks
2014-06-15 14:20:51 ----D---- C:\Users\Dávid\AppData\Roaming\Riot Games
2014-06-15 13:22:15 ----D---- C:\Windows\SYSWOW64\Wat
2014-06-15 13:22:15 ----D---- C:\Windows\system32\Wat
2014-06-15 13:00:06 ----D---- C:\ProgramData\RzMaelstromVAD_1.1.58.1854
2014-06-15 12:59:58 ----A---- C:\Windows\system32\RzMaelstromVADAudioDeviceManager_log.txt
2014-06-15 12:59:57 ----A---- C:\Windows\SYSWOW64\RzMaelstromVADAudioDeviceManager_log.txt
2014-06-15 12:53:34 ----D---- C:\Program Files (x86)\Razer
2014-06-15 12:52:18 ----A---- C:\Windows\system32\Wdfres.dll
2014-06-15 12:52:18 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-06-15 12:43:17 ----D---- C:\ProgramData\Razer
2014-06-15 12:40:36 ----D---- C:\Program Files (x86)\Steam
2014-06-15 12:38:32 ----D---- C:\Users\Dávid\AppData\Roaming\TS3Client
2014-06-15 12:38:26 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-06-15 12:32:42 ----A---- C:\Windows\system32\browserchoice.exe
2014-06-15 12:23:03 ----A---- C:\Windows\system32\WUDFx.dll
2014-06-15 12:23:03 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-06-15 12:23:03 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-06-15 12:23:03 ----A---- C:\Windows\system32\WUDFHost.exe
2014-06-15 12:23:03 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-06-15 12:23:03 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-06-15 12:23:03 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-06-15 12:19:26 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-06-15 12:19:26 ----A---- C:\Windows\system32\wmi.dll
2014-06-15 12:19:26 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-06-15 12:13:19 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-06-15 12:13:19 ----A---- C:\Windows\system32\Wpc.dll
2014-06-15 12:13:19 ----A---- C:\Windows\system32\gameux.dll
2014-06-15 12:13:18 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-06-15 12:12:33 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-06-15 12:12:33 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-06-15 12:12:33 ----A---- C:\Windows\system32\tquery.dll
2014-06-15 12:12:33 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-06-15 12:12:33 ----A---- C:\Windows\system32\mssrch.dll
2014-06-15 12:12:32 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-06-15 12:12:32 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-06-15 12:12:32 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-06-15 12:12:32 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-06-15 12:12:32 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-06-15 12:12:32 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-06-15 12:12:32 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-06-15 12:12:32 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-06-15 12:12:32 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-06-15 12:12:32 ----A---- C:\Windows\system32\mssvp.dll
2014-06-15 12:12:32 ----A---- C:\Windows\system32\mssphtb.dll
2014-06-15 12:12:32 ----A---- C:\Windows\system32\mssph.dll
2014-06-15 12:12:32 ----A---- C:\Windows\system32\msscntrs.dll
2014-06-15 12:12:12 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-06-15 12:12:11 ----A---- C:\Windows\system32\cdosys.dll
2014-06-15 12:12:06 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-06-15 12:12:06 ----A---- C:\Windows\system32\ntshrui.dll
2014-06-15 12:11:48 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-06-15 12:11:48 ----A---- C:\Windows\system32\poqexec.exe
2014-06-15 12:11:47 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-06-15 12:11:47 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-06-15 12:11:47 ----A---- C:\Windows\system32\drivers\srv.sys
2014-06-15 12:11:46 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-06-15 12:11:46 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-06-15 12:11:46 ----A---- C:\Windows\system32\sbe.dll
2014-06-15 12:11:46 ----A---- C:\Windows\system32\CPFilters.dll
2014-06-15 12:11:44 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-06-15 12:11:44 ----A---- C:\Windows\system32\webio.dll
2014-06-15 12:11:32 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-06-15 12:11:32 ----A---- C:\Windows\system32\psisdecd.dll
2014-06-15 12:11:31 ----A---- C:\Windows\system32\winresume.exe
2014-06-15 12:11:31 ----A---- C:\Windows\system32\winload.exe
2014-06-15 12:11:30 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-06-15 12:11:30 ----A---- C:\Windows\system32\kdusb.dll
2014-06-15 12:11:30 ----A---- C:\Windows\system32\kdcom.dll
2014-06-15 12:11:30 ----A---- C:\Windows\system32\kd1394.dll
2014-06-15 12:11:23 ----A---- C:\Windows\system32\odbccu32.dll
2014-06-15 12:11:23 ----A---- C:\Windows\system32\odbccr32.dll
2014-06-15 12:11:22 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-06-15 12:11:22 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-06-15 12:11:22 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-06-15 12:11:22 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-06-15 12:11:22 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-06-15 12:11:22 ----A---- C:\Windows\system32\odbctrac.dll
2014-06-15 12:11:22 ----A---- C:\Windows\system32\odbccp32.dll
2014-06-15 12:11:22 ----A---- C:\Windows\system32\mfc42u.dll
2014-06-15 12:11:22 ----A---- C:\Windows\system32\mfc42.dll
2014-06-15 12:11:21 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-06-15 12:11:21 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-06-15 12:11:18 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-06-15 12:11:18 ----A---- C:\Windows\system32\msi.dll
2014-06-15 12:11:16 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-06-15 12:11:16 ----A---- C:\Windows\system32\quartz.dll
2014-06-15 12:11:12 ----A---- C:\Windows\system32\localspl.dll
2014-06-15 12:11:11 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-06-15 12:11:11 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-06-15 12:11:11 ----A---- C:\Windows\system32\oleaut32.dll
2014-06-15 12:11:11 ----A---- C:\Windows\system32\oleacc.dll
2014-06-15 12:11:10 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-06-15 12:11:10 ----A---- C:\Windows\system32\msvcrt.dll
2014-06-15 12:11:04 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-06-15 12:11:04 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-06-15 12:11:04 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-06-15 12:11:04 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-06-15 12:11:04 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-06-15 12:11:04 ----A---- C:\Windows\system32\profsvc.dll
2014-06-15 12:11:04 ----A---- C:\Windows\system32\profprov.dll
2014-06-15 12:11:04 ----A---- C:\Windows\system32\cfgmgr32.dll
2014-06-15 12:11:02 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-06-15 12:11:02 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-06-15 12:11:02 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-06-15 12:11:02 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-06-15 12:11:02 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-06-15 12:11:02 ----A---- C:\Windows\system32\dnsapi.dll
2014-06-15 12:11:00 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-06-15 12:11:00 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-06-15 12:11:00 ----A---- C:\Windows\system32\inetcomm.dll
2014-06-15 12:11:00 ----A---- C:\Windows\system32\EncDec.dll
2014-06-15 12:10:56 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-06-15 12:10:56 ----A---- C:\Windows\system32\srcore.dll
2014-06-15 12:10:56 ----A---- C:\Windows\system32\rstrui.exe
2014-06-15 12:10:55 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-06-15 12:10:55 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-06-15 12:10:55 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-06-15 12:10:55 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-06-15 12:10:54 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-06-15 12:10:54 ----A---- C:\Windows\system32\rdpwsx.dll
2014-06-15 12:10:54 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-06-15 12:10:53 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-06-15 12:10:52 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-06-15 12:10:51 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-06-15 12:10:51 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-06-15 12:10:51 ----A---- C:\Windows\system32\netapi32.dll
2014-06-15 12:10:51 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-06-15 12:10:51 ----A---- C:\Windows\system32\browser.dll
2014-06-15 12:10:51 ----A---- C:\Windows\system32\browcli.dll
2014-06-15 12:10:50 ----A---- C:\Windows\system32\WFS.exe
2014-06-15 12:10:50 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-06-15 12:10:49 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-06-15 12:10:49 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-06-15 12:10:49 ----A---- C:\Windows\system32\xmllite.dll
2014-06-15 12:10:49 ----A---- C:\Windows\system32\synceng.dll
2014-06-15 12:10:47 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-06-15 12:10:47 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2014-06-15 12:10:47 ----A---- C:\Windows\system32\dpnet.dll
2014-06-15 12:10:47 ----A---- C:\Windows\system32\dpnaddr.dll
2014-06-15 12:10:45 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-06-15 12:10:45 ----A---- C:\Windows\system32\prevhost.exe
2014-06-15 12:01:55 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-06-15 12:01:55 ----A---- C:\Windows\system32\packager.dll
2014-06-15 11:59:00 ----A---- C:\Windows\system32\TURegOpt.exe
2014-06-15 11:59:00 ----A---- C:\Windows\system32\authuitu.dll
2014-06-15 11:58:58 ----A---- C:\Windows\SYSWOW64\authuitu.dll
2014-06-15 11:58:45 ----N---- C:\Windows\system32\MpSigStub.exe
2014-06-15 11:58:38 ----D---- C:\Users\Dávid\AppData\Roaming\TuneUp Software
2014-06-15 11:58:26 ----D---- C:\Program Files (x86)\TuneUp Utilities 2014
2014-06-15 11:57:57 ----D---- C:\ProgramData\TuneUp Software
2014-06-15 11:57:49 ----SHD---- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-15 11:57:48 ----HD---- C:\ProgramData\Common Files
2014-06-15 11:56:52 ----D---- C:\Users\Dávid\AppData\Roaming\ESET
2014-06-15 11:56:14 ----D---- C:\ProgramData\ESET
2014-06-15 11:56:14 ----D---- C:\Program Files\ESET
2014-06-15 11:49:03 ----RD---- C:\Program Files (x86)\Skype
2014-06-15 11:44:14 ----D---- C:\Users\Dávid\AppData\Roaming\Skype
2014-06-15 11:44:07 ----D---- C:\ProgramData\Skype
2014-06-15 11:43:04 ----D---- C:\Program Files (x86)\Google
2014-06-15 11:39:43 ----D---- C:\Program Files (x86)\AGEIA Technologies
2014-06-15 11:39:22 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2014-06-15 11:37:42 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-06-15 11:36:48 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-06-15 11:36:21 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvumdshimx.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvopencl.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvoglv64.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvoglshim64.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvinitx.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\NvIFR64.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\NvFBC64.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvdispgenco6433788.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvdispco6433788.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvcuvid.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvcuda.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvcompiler.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\nvapi64.dll
2014-06-15 11:36:21 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-06-15 11:35:14 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-06-15 11:35:12 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-06-15 11:35:12 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-06-15 11:30:27 ----D---- C:\Users\Dávid\AppData\Roaming\Macromedia
2014-06-15 11:29:50 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-06-15 11:29:50 ----A---- C:\Windows\system32\rdpcore.dll
2014-06-15 11:29:50 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-06-15 11:29:12 ----D---- C:\Users\Dávid\AppData\Roaming\Adobe
2014-06-15 11:27:18 ----D---- C:\Users\Dávid\AppData\Roaming\Identities
2014-06-15 11:26:51 ----A---- C:\Windows\system32\wups2.dll
2014-06-15 11:26:51 ----A---- C:\Windows\system32\wucltux.dll
2014-06-15 11:26:51 ----A---- C:\Windows\system32\wuaueng.dll
2014-06-15 11:26:51 ----A---- C:\Windows\system32\wuauclt.exe
2014-06-15 11:26:48 ----A---- C:\Windows\system32\wups.dll
2014-06-15 11:26:48 ----A---- C:\Windows\system32\wudriver.dll
2014-06-15 11:26:48 ----A---- C:\Windows\system32\wuapi.dll
2014-06-15 11:26:47 ----A---- C:\Windows\system32\wuwebv.dll
2014-06-15 11:26:47 ----A---- C:\Windows\system32\wuapp.exe
2014-06-15 11:24:50 ----D---- C:\Users\Dávid\AppData\Roaming\Hewlett-Packard
2014-06-15 11:24:36 ----AH---- C:\Windows\SYSWOW64\ezsidmv.dat
2014-06-15 11:24:06 ----SD---- C:\Users\Dávid\AppData\Roaming\Microsoft
2014-06-15 11:24:06 ----D---- C:\Users\Dávid\AppData\Roaming\Media Center Programs

======List of files/folders modified in the last 1 month======

2014-07-12 11:57:11 ----A---- C:\Windows\SYSWOW64\log.txt
2014-07-12 11:56:14 ----D---- C:\Windows\Temp
2014-07-12 11:56:10 ----D---- C:\Windows\system32\config
2014-07-12 11:54:48 ----D---- C:\ProgramData\NVIDIA
2014-07-12 11:39:01 ----D---- C:\ProgramData
2014-07-12 11:33:41 ----D---- C:\Windows\system32\drivers
2014-07-12 11:00:56 ----AD---- C:\Windows
2014-07-12 11:00:56 ----A---- C:\Windows\system.ini
2014-07-12 11:00:14 ----D---- C:\Windows\system32\drivers\etc
2014-07-12 10:48:31 ----D---- C:\Windows\SYSWOW64\drivers
2014-07-12 10:48:31 ----D---- C:\Windows\AppPatch
2014-07-12 10:48:31 ----AD---- C:\Windows\SysWOW64
2014-07-12 10:48:30 ----D---- C:\Program Files (x86)\Common Files
2014-07-12 10:40:44 ----RD---- C:\Program Files (x86)
2014-07-12 09:56:42 ----D---- C:\Windows\Tasks
2014-07-12 09:56:42 ----D---- C:\Windows\system32\Tasks
2014-07-12 09:54:41 ----D---- C:\Windows\Prefetch
2014-07-12 00:11:37 ----D---- C:\Windows\rescache
2014-07-11 23:45:20 ----D---- C:\Windows\schemas
2014-07-11 20:43:07 ----SHD---- C:\Windows\Installer
2014-07-11 19:05:28 ----D---- C:\Windows\Vss
2014-07-11 11:32:56 ----RD---- C:\Program Files
2014-07-10 22:35:55 ----D---- C:\Windows\winsxs
2014-07-10 22:35:52 ----D---- C:\Windows\System32
2014-07-10 22:35:41 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-07-10 22:35:41 ----D---- C:\Windows\system32\sk-SK
2014-07-10 08:57:56 ----D---- C:\Windows\system32\drivers\UMDF
2014-07-10 07:49:35 ----D---- C:\Windows\system32\catroot2
2014-07-10 07:49:35 ----D---- C:\Windows\system32\catroot
2014-07-09 15:49:59 ----D---- C:\Program Files\Windows Journal
2014-07-09 15:49:58 ----D---- C:\Windows\SYSWOW64\wbem
2014-07-09 15:49:58 ----D---- C:\Windows\system32\wbem
2014-07-09 15:49:58 ----D---- C:\Windows\system32\en-US
2014-07-09 15:49:58 ----D---- C:\Windows\system32\drivers\en-US
2014-07-09 15:49:57 ----D---- C:\Windows\SYSWOW64\Dism
2014-07-09 15:49:57 ----D---- C:\Windows\system32\Dism
2014-07-09 15:49:56 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-09 15:49:56 ----D---- C:\Windows\PolicyDefinitions
2014-07-09 15:49:56 ----D---- C:\Windows\ehome
2014-07-09 15:49:55 ----D---- C:\Program Files\Internet Explorer
2014-07-09 15:49:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-09 15:49:53 ----D---- C:\Windows\system32\DriverStore
2014-07-09 15:49:52 ----D---- C:\Windows\inf
2014-07-09 15:43:53 ----D---- C:\Program Files\IDT
2014-07-06 11:35:59 ----D---- C:\ProgramData\PDFC
2014-07-06 10:07:34 ----D---- C:\Windows\system32\NDF
2014-07-01 20:46:15 ----D---- C:\ProgramData\NVIDIA Corporation
2014-06-29 21:20:42 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-29 17:58:21 ----RSD---- C:\Windows\Fonts
2014-06-29 12:21:11 ----D---- C:\Windows\system32\wdi
2014-06-27 17:48:53 ----RSD---- C:\Windows\assembly
2014-06-27 11:39:12 ----D---- C:\Program Files\Common Files
2014-06-18 07:01:16 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-06-17 07:47:46 ----D---- C:\Windows\Microsoft.NET
2014-06-16 15:56:36 ----D---- C:\Program Files\Windows Media Player
2014-06-16 15:56:36 ----D---- C:\Program Files (x86)\Windows Media Player
2014-06-16 15:56:32 ----D---- C:\Windows\SYSWOW64\migration
2014-06-16 15:56:32 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-06-16 15:56:30 ----D---- C:\Windows\system32\migration
2014-06-16 15:56:30 ----D---- C:\Windows\system32\cs-CZ
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\it-IT
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\es-ES
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\el-GR
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\de-DE
2014-06-16 15:56:28 ----D---- C:\Windows\SYSWOW64\da-DK
2014-06-16 15:56:27 ----D---- C:\Windows\system32\zh-TW
2014-06-16 15:56:27 ----D---- C:\Windows\system32\zh-HK
2014-06-16 15:56:27 ----D---- C:\Windows\system32\zh-CN
2014-06-16 15:56:27 ----D---- C:\Windows\system32\tr-TR
2014-06-16 15:56:27 ----D---- C:\Windows\system32\sv-SE
2014-06-16 15:56:27 ----D---- C:\Windows\system32\ru-RU
2014-06-16 15:56:27 ----D---- C:\Windows\system32\pt-PT
2014-06-16 15:56:27 ----D---- C:\Windows\system32\pt-BR
2014-06-16 15:56:27 ----D---- C:\Windows\system32\pl-PL
2014-06-16 15:56:27 ----D---- C:\Windows\system32\nl-NL
2014-06-16 15:56:27 ----D---- C:\Windows\system32\nb-NO
2014-06-16 15:56:27 ----D---- C:\Windows\system32\ko-KR
2014-06-16 15:56:27 ----D---- C:\Windows\system32\ja-JP
2014-06-16 15:56:27 ----D---- C:\Windows\system32\it-IT
2014-06-16 15:56:27 ----D---- C:\Windows\system32\hu-HU
2014-06-16 15:56:27 ----D---- C:\Windows\system32\fr-FR
2014-06-16 15:56:27 ----D---- C:\Windows\system32\fi-FI
2014-06-16 15:56:27 ----D---- C:\Windows\system32\es-ES
2014-06-16 15:56:27 ----D---- C:\Windows\system32\el-GR
2014-06-16 15:56:27 ----D---- C:\Windows\system32\de-DE
2014-06-16 15:56:27 ----D---- C:\Windows\system32\da-DK
2014-06-16 15:56:19 ----D---- C:\Program Files\Windows Defender
2014-06-16 15:56:19 ----D---- C:\Program Files (x86)\Windows Defender
2014-06-16 15:40:39 ----SD---- C:\ProgramData\Microsoft
2014-06-16 15:36:20 ----D---- C:\Windows\Logs
2014-06-16 07:17:59 ----D---- C:\Program Files (x86)\Windows Sidebar
2014-06-16 07:17:59 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-06-16 07:17:59 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-06-16 07:17:59 ----D---- C:\Program Files (x86)\Windows Mail
2014-06-16 07:17:58 ----D---- C:\Program Files\Windows Sidebar
2014-06-16 07:17:58 ----D---- C:\Program Files\Windows Portable Devices
2014-06-16 07:17:58 ----D---- C:\Program Files\Windows Photo Viewer
2014-06-16 07:17:58 ----D---- C:\Program Files\Windows Mail
2014-06-16 07:17:58 ----D---- C:\Program Files\DVD Maker
2014-06-16 07:17:58 ----D---- C:\Program Files\Common Files\System
2014-06-16 07:17:57 ----D---- C:\Windows\servicing
2014-06-16 07:17:52 ----D---- C:\Windows\SYSWOW64\sppui
2014-06-16 07:17:52 ----D---- C:\Windows\SYSWOW64\Setup
2014-06-16 07:17:52 ----D---- C:\Windows\SYSWOW64\oobe
2014-06-16 07:17:52 ----D---- C:\Windows\SYSWOW64\migwiz
2014-06-16 07:17:52 ----D---- C:\Windows\SYSWOW64\manifeststore
2014-06-16 07:17:52 ----D---- C:\Windows\SYSWOW64\en
2014-06-16 07:17:52 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2014-06-16 07:17:41 ----D---- C:\Windows\system32\oobe
2014-06-16 07:17:40 ----D---- C:\Windows\system32\sppui
2014-06-16 07:17:40 ----D---- C:\Windows\system32\Setup
2014-06-16 07:17:40 ----D---- C:\Windows\system32\manifeststore
2014-06-16 07:17:40 ----D---- C:\Windows\system32\AdvancedInstallers
2014-06-16 07:17:39 ----D---- C:\Windows\system32\migwiz
2014-06-16 07:17:20 ----D---- C:\Windows\system32\Boot
2014-06-16 07:13:20 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2014-06-16 07:13:20 ----A---- C:\Windows\system32\msclmd.dll
2014-06-15 22:08:27 ----D---- C:\Windows\SYSWOW64\winrm
2014-06-15 22:08:27 ----D---- C:\Windows\SYSWOW64\slmgr
2014-06-15 22:08:18 ----D---- C:\Windows\SYSWOW64\WCN
2014-06-15 22:08:18 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2014-06-15 22:08:18 ----D---- C:\Windows\SYSWOW64\MUI
2014-06-15 22:08:18 ----D---- C:\Windows\SYSWOW64\DriverStore
2014-06-15 22:08:18 ----D---- C:\Windows\SYSWOW64\com
2014-06-15 22:08:18 ----D---- C:\Windows\IME
2014-06-15 22:08:17 ----D---- C:\Windows\system32\winrm
2014-06-15 22:08:17 ----D---- C:\Windows\system32\sysprep
2014-06-15 22:08:17 ----D---- C:\Windows\system32\slmgr
2014-06-15 22:08:07 ----D---- C:\Windows\system32\WCN
2014-06-15 22:08:07 ----D---- C:\Windows\system32\MUI
2014-06-15 22:08:05 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2014-06-15 22:08:04 ----D---- C:\Windows\system32\com
2014-06-15 22:07:53 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2014-06-15 22:07:45 ----D---- C:\Windows\en-US
2014-06-15 22:07:39 ----D---- C:\Windows\Speech
2014-06-15 21:09:09 ----D---- C:\Program Files (x86)\Bing Bar Installer
2014-06-15 21:09:08 ----D---- C:\Program Files (x86)\Microsoft
2014-06-15 21:05:37 ----D---- C:\Windows\debug
2014-06-15 15:44:04 ----D---- C:\Windows\system32\LogFiles
2014-06-15 15:43:22 ----D---- C:\ProgramData\Hewlett-Packard
2014-06-15 15:35:58 ----D---- C:\Windows\ShellNew
2014-06-15 15:35:49 ----D---- C:\Program Files (x86)\MSBuild
2014-06-15 15:35:16 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-06-15 15:35:16 ----D---- C:\Program Files (x86)\Microsoft Office
2014-06-15 15:34:19 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-06-15 15:33:29 ----A---- C:\Windows\win.ini
2014-06-15 13:14:19 ----D---- C:\ProgramData\Norton
2014-06-15 12:23:36 ----D---- C:\ProgramData\{D13C0989-F3EC-4F44-A33D-B3F83DF90FAF}
2014-06-15 11:41:15 ----D---- C:\Windows\system32\restore
2014-06-15 11:39:45 ----D---- C:\Program Files\NVIDIA Corporation
2014-06-15 11:29:52 ----D---- C:\Windows\SoftwareDistribution
2014-06-15 11:27:14 ----AD---- C:\swsetup
2014-06-15 11:27:10 ----D---- C:\SYSTEM.SAV
2014-06-15 11:24:47 ----RD---- C:\Program Files (x86)\Online Services
2014-06-15 11:24:06 ----RD---- C:\Users
2014-06-15 11:24:05 ----D---- C:\Windows\Panther

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-09-13 437272]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 25816]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-07-12 122584]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 63704]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2014-05-20 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-29 412776]
R3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service; C:\Windows\system32\drivers\RzMaelstromVAD.sys [2014-05-23 32768]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10329; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-04-24 536576]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [2014-03-26 14112]
R3 WSDPrintDevice;WSD Print Support via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2014-02-24 1343408]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-09-18 126008]
R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-08-06 291896]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-08-21 92216]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-11-22 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-04-30 1617696]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-05-20 927520]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 RzMaelstromVADStreamingService;Razer Surround Audio Service; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [2014-05-23 4250624]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10129; C:\Program Files\IDT\WDM\STacSV64.exe [2012-04-24 318464]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-05-20 413128]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2014-06-16 2145080]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-15 116648]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-15 116648]
S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2010-08-21 707128]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 111616]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-07-10 542912]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-15 1255736]
S4 GameConsoleService;GameConsoleService; C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe [2010-06-19 246520]
S4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2014-06-23 2524496]
S4 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-04-15 377616]
S4 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2010-09-28 1119768]

-----------------EOF-----------------

Posledni sken a budem mazat.


Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Tak som zistil po hodine, že sa mi to buglo a som tu, ako prvý sem hodím OTL.Txt

OTL logfile created on: 7/12/2014 6:29:07 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dávid\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000409 | Country: Slovensko | Language: SKY | Date Format: d. M. yyyy

3.98 Gb Total Physical Memory | 2.07 Gb Available Physical Memory | 51.85% Memory free
7.96 Gb Paging File | 4.77 Gb Available in Paging File | 59.91% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.50 Gb Total Space | 790.27 Gb Free Space | 86.13% Space Free | Partition Type: NTFS
Drive D: | 13.92 Gb Total Space | 1.72 Gb Free Space | 12.33% Space Free | Partition Type: NTFS

Computer Name: DAVIDPC | User Name: Dávid | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/07/12 17:23:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dávid\Desktop\OTL.exe
PRC - [2014/07/12 09:05:01 | 008,492,296 | ---- | M] (Curse, Inc) -- C:\Users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe
PRC - [2014/07/10 11:57:28 | 009,786,416 | ---- | M] (Blizzard Entertainment) -- C:\Program Files (x86)\Battle.net\Battle.net.4826\Battle.net.exe
PRC - [2014/07/10 11:56:56 | 009,246,256 | ---- | M] (Blizzard Entertainment) -- C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
PRC - [2014/07/07 22:10:22 | 006,162,488 | ---- | M] (Spotify Ltd) -- C:\Users\Dávid\AppData\Roaming\Spotify\spotify.exe
PRC - [2014/07/07 22:10:22 | 001,178,168 | ---- | M] (Spotify Ltd) -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2014/07/07 22:10:20 | 000,601,144 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
PRC - [2014/07/02 23:53:40 | 000,354,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech Gaming Software\LU_1\LULnchr.exe
PRC - [2014/07/02 23:53:14 | 002,067,736 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech Gaming Software\LU_1\LogitechUpdate.exe
PRC - [2014/06/05 15:58:39 | 000,860,488 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014/05/20 01:10:40 | 000,413,128 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014/05/12 07:24:34 | 006,970,168 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014/04/30 20:28:45 | 002,199,840 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2014/04/30 20:28:32 | 001,617,696 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2014/02/24 16:27:06 | 001,343,408 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2013/11/20 15:43:26 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
PRC - [2013/11/20 15:43:14 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
PRC - [2013/11/01 09:22:46 | 000,059,720 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
PRC - [2012/09/13 00:38:44 | 000,204,136 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
PRC - [2012/09/13 00:38:20 | 000,264,040 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
PRC - [2010/10/05 16:08:46 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010/10/05 16:08:42 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010/08/21 02:57:28 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2010/04/23 21:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010/04/23 21:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010/04/23 21:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2009/05/09 01:39:48 | 002,068,992 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe
PRC - [2009/05/09 01:11:00 | 002,068,992 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe
PRC - [2009/02/28 04:13:04 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe
PRC - [2008/11/20 19:47:28 | 000,062,768 | ---- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe


========== Modules (No Company Name) ==========

MOD - [2014/07/10 11:57:25 | 000,739,840 | ---- | M] () -- C:\Program Files (x86)\Battle.net\Battle.net.4826\libGLESv2.dll
MOD - [2014/07/10 11:57:25 | 000,130,048 | ---- | M] () -- C:\Program Files (x86)\Battle.net\Battle.net.4826\libEGL.dll
MOD - [2014/07/10 11:57:24 | 026,065,408 | ---- | M] () -- C:\Program Files (x86)\Battle.net\Battle.net.4826\libcef.dll
MOD - [2014/07/07 22:10:21 | 036,966,968 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\libcef.dll
MOD - [2014/07/07 22:10:20 | 000,886,840 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\libglesv2.dll
MOD - [2014/07/07 22:10:20 | 000,867,896 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\ffmpegsumo.dll
MOD - [2014/07/07 22:10:20 | 000,601,144 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
MOD - [2014/07/07 22:10:20 | 000,108,600 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Spotify\Data\libegl.dll
MOD - [2014/06/17 07:40:29 | 000,530,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\d7a1bbd56dc15a29c2450b177f9468d7\System.Net.Http.ni.dll
MOD - [2014/06/17 07:40:27 | 019,693,056 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\24bf0c88c0465485f4b842df043b3f45\System.ServiceModel.ni.dll
MOD - [2014/06/17 07:40:12 | 000,399,872 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\b6c7a1ca929c1b10f36b683c9f1a0517\System.Xml.Linq.ni.dll
MOD - [2014/06/17 07:39:49 | 000,190,976 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\75b6a68103e1b76063d9f69b8275ae61\UIAutomationTypes.ni.dll
MOD - [2014/06/16 23:18:19 | 018,813,440 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\a4b45c44490c75bc2fb22780e7ef087d\PresentationFramework.ni.dll
MOD - [2014/06/16 23:18:19 | 013,620,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\921861ef36355e6f12a981a188f99b8a\System.Web.ni.dll
MOD - [2014/06/16 23:18:14 | 000,785,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Ente96d83b35#\ee550c3d485d44c7fbeeafe12a3e318b\System.EnterpriseServices.ni.dll
MOD - [2014/06/16 23:18:14 | 000,660,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\2053b0e14f1e64a5c5d6d1c4d01485a2\System.Transactions.ni.dll
MOD - [2014/06/16 23:18:14 | 000,250,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Ente96d83b35#\ee550c3d485d44c7fbeeafe12a3e318b\System.EnterpriseServices.Wrapper.dll
MOD - [2014/06/16 23:18:14 | 000,241,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Comp46f2b404#\2526b5a3ab48717e858a08c3a4a8000c\System.ComponentModel.DataAnnotations.ni.dll
MOD - [2014/06/16 23:18:13 | 001,889,792 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\3fe705796c6a41d4889d9001d1c56af8\System.Xaml.ni.dll
MOD - [2014/06/16 23:18:12 | 012,894,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f4f6ee0df2aa4189bf36e6335cb92761\System.Windows.Forms.ni.dll
MOD - [2014/06/16 23:18:12 | 000,805,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\04824fdbd5dce32530ba44ae012e4fb9\System.Runtime.Remoting.ni.dll
MOD - [2014/06/16 23:18:09 | 007,409,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\6bbed231aec6fd82547e09474da0b2f9\System.Data.ni.dll
MOD - [2014/06/16 23:18:08 | 011,025,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\a74542efbeb46445949a39026c501132\PresentationCore.ni.dll
MOD - [2014/06/16 23:18:06 | 001,644,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5cd2aee5e7c07227c694d89219688ab3\System.Drawing.ni.dll
MOD - [2014/06/16 23:18:06 | 001,046,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Compba577418#\cc50d2e812a40e7932c04af96578de25\System.ComponentModel.Composition.ni.dll
MOD - [2014/06/16 23:18:05 | 001,947,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\ae18426916e4acf912f54aefb8cd00c7\Microsoft.VisualBasic.ni.dll
MOD - [2014/06/16 23:18:05 | 000,806,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\34b53ecafa1d7ccc7ca961d722b5d983\System.ServiceModel.Internals.ni.dll
MOD - [2014/06/16 23:18:05 | 000,122,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\78652b7fa68ee058bff6a118c657f565\SMDiagnostics.ni.dll
MOD - [2014/06/16 23:18:03 | 006,990,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\dce99d8de14d8a015313db98c72552ee\System.Core.ni.dll
MOD - [2014/06/16 23:18:03 | 002,825,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f6d7bb59f318c130d68816a89335d05e\System.Runtime.Serialization.ni.dll
MOD - [2014/06/16 23:18:02 | 007,662,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\bada32953bb6b16a53d653eae23d78dc\System.Xml.ni.dll
MOD - [2014/06/16 23:18:01 | 003,950,080 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\acf97bfe2a931d4a47253b26b7218991\WindowsBase.ni.dll
MOD - [2014/06/16 23:18:00 | 000,470,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\75f8bc4cf08030c4a53b6d5e0ae20046\PresentationFramework.Aero.ni.dll
MOD - [2014/06/16 23:17:59 | 000,976,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bbc48ec4245e502ae19b0601d3799c9e\System.Configuration.ni.dll
MOD - [2014/06/16 23:17:58 | 010,060,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff26cc03e6d57d8abd13b990332e67c6\System.ni.dll
MOD - [2014/06/16 23:17:54 | 000,147,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\4c8a153aa66fcd62db6fff269a2ef2b4\System.Numerics.ni.dll
MOD - [2014/06/16 23:17:53 | 016,953,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll
MOD - [2014/06/05 15:58:38 | 000,414,536 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppgooglenaclpluginchrome.dll
MOD - [2014/06/05 15:58:36 | 004,217,672 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
MOD - [2014/06/05 15:58:32 | 000,716,616 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
MOD - [2014/06/05 15:58:31 | 000,126,280 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
MOD - [2014/06/05 15:58:30 | 001,732,424 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
MOD - [2014/06/04 08:48:14 | 000,437,248 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Curse Client\Bin\WebRTC_CSharpWrapper.dll
MOD - [2013/12/13 08:12:44 | 000,307,712 | ---- | M] () -- C:\Users\Dávid\AppData\Roaming\Curse Client\Bin\opus.dll
MOD - [2013/09/14 01:51:02 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
MOD - [2013/09/14 01:50:36 | 001,242,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
MOD - [2012/09/13 00:39:18 | 000,336,232 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
MOD - [2012/09/13 00:38:52 | 007,955,304 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTGui4.dll
MOD - [2012/09/13 00:38:52 | 000,341,352 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTXml4.dll
MOD - [2012/09/13 00:38:52 | 000,127,336 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll
MOD - [2012/09/13 00:38:52 | 000,028,008 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll
MOD - [2012/09/13 00:38:44 | 002,144,104 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTCore4.dll
MOD - [2012/09/13 00:38:20 | 000,264,040 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
MOD - [2010/01/30 02:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009/02/28 04:13:04 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe
MOD - [2009/02/20 02:22:50 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\WMINPUT.dll


========== Services (SafeList) ==========

SRV:64bit: - [2014/06/19 02:24:12 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014/06/16 13:13:48 | 000,043,320 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2014/02/24 16:27:06 | 001,343,408 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012/04/24 20:38:30 | 000,318,464 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:64bit: - [2010/08/06 04:51:08 | 000,291,896 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
SRV:64bit: - [2009/03/02 18:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
SRV - [2014/07/10 20:21:02 | 000,542,912 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014/06/23 11:43:02 | 002,524,496 | ---- | M] (LogMeIn Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2014/06/16 13:13:52 | 002,145,080 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2014/06/16 13:13:48 | 000,036,152 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2014/05/23 12:33:52 | 004,250,624 | ---- | M] (A-Volute) [Auto | Running] -- C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe -- (RzMaelstromVADStreamingService)
SRV - [2014/05/20 01:10:40 | 000,413,128 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/04/30 20:28:32 | 001,617,696 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2014/04/15 16:07:54 | 000,377,616 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2014/04/03 20:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/09/11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/10/05 16:08:46 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010/10/05 16:08:42 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010/09/28 17:09:28 | 001,119,768 | ---- | M] (PDF Complete Inc) [Disabled | Stopped] -- C:\Program Files (x86)\PDF Complete\pdfsvc.exe -- (pdfcDispatcher)
SRV - [2010/08/21 02:57:28 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2010/06/19 03:59:12 | 000,246,520 | ---- | M] (WildTangent, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/07/12 17:57:27 | 000,122,584 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV:64bit: - [2014/05/23 12:34:46 | 000,032,768 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzMaelstromVAD.sys -- (RZMAELSTROMVADService)
DRV:64bit: - [2014/05/20 04:44:03 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2014/05/12 07:26:10 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV:64bit: - [2014/05/12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2014/03/31 18:42:44 | 000,040,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2013/10/02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013/09/17 14:17:38 | 000,239,320 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2013/09/17 14:17:38 | 000,220,232 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:64bit: - [2013/09/17 14:17:38 | 000,168,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2013/09/17 14:17:38 | 000,062,136 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:64bit: - [2013/09/17 14:17:38 | 000,044,120 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV:64bit: - [2013/05/30 17:16:40 | 000,064,280 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)
DRV:64bit: - [2012/09/21 21:04:22 | 004,763,680 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:64bit: - [2012/09/21 21:04:22 | 000,351,520 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2012/08/23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012/04/24 20:38:30 | 000,536,576 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/12/29 11:45:54 | 000,412,776 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/10/19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2010/09/13 15:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009/11/24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009/11/24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/14 02:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/03/18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2014/03/26 09:03:04 | 000,014,112 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://sk.wikipedia.org/wiki/Special:Se ... earchTerms}
IE:64bit: - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://sk.wikipedia.org/wiki/Special:Se ... earchTerms}
IE - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2218101656-138915150-639098689-1000\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
IE - HKU\S-1-5-21-2218101656-138915150-639098689-1000\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF
IE - HKU\S-1-5-21-2218101656-138915150-639098689-1000\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://sk.wikipedia.org/wiki/Special:Se ... earchTerms}
IE - HKU\S-1-5-21-2218101656-138915150-639098689-1000\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE - HKU\S-1-5-21-2218101656-138915150-639098689-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2218101656-138915150-639098689-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect_x86_64: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.60.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.60.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2014/06/15 11:56:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014/06/15 11:56:15 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - plugin: Error reading preferences file
CHR - Extension: Dokumenty Google = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_1\
CHR - Extension: Disk Google = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\
CHR - Extension: YouTube = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
CHR - Extension: HÄľadaĹĄ v Google = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
CHR - Extension: AdBlock = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.7_0\
CHR - Extension: PeňaĹľenka Google = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: Gmail = C:\Users\Dávid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2014/07/12 11:00:14 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll File not found
O3 - HKU\S-1-5-21-2218101656-138915150-639098689-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [BATINDICATOR] C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe (Hewlett-Packard)
O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS)
O4 - HKLM..\Run: [LaunchHPOSIAPP] C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\LaunchApp.exe (Hewlett-Packard)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKU\S-1-5-21-2218101656-138915150-639098689-1000..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKU\S-1-5-21-2218101656-138915150-639098689-1000..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKU\S-1-5-21-2218101656-138915150-639098689-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\system32\StikyNot.exe File not found
O4 - HKU\S-1-5-21-2218101656-138915150-639098689-1000..\Run: [Spotify] C:\Users\Dávid\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-2218101656-138915150-639098689-1000..\Run: [Spotify Web Helper] C:\Users\Dávid\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - Startup: C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk = C:\Users\Dávid\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
O4 - Startup: C:\Users\Dávid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Registrácia výrobku.lnk = C:\Program Files (x86)\Logitech\Ereg\eReg.exe (Leader Technologies/Logitech)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2218101656-138915150-639098689-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2218101656-138915150-639098689-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7E3629EC-E460-4FA2-B7B2-F71E0E7E0264}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/07/12 17:23:00 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Dávid\Desktop\OTL.exe
[2014/07/12 13:07:50 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\Logitech
[2014/07/12 13:07:17 | 000,018,960 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys
[2014/07/12 13:06:05 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech Gaming Software
[2014/07/12 13:04:38 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Logitech
[2014/07/12 13:04:38 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Logishrd
[2014/07/12 12:35:32 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\Logitech® Webcam Software
[2014/07/12 12:31:12 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
[2014/07/12 12:29:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd
[2014/07/12 12:29:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2014/07/12 12:29:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logitech
[2014/07/12 12:29:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LogiShrd
[2014/07/12 12:28:03 | 074,637,872 | ---- | C] (Logitech, Inc.) -- C:\Users\Dávid\Desktop\lws251.exe
[2014/07/12 12:22:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2014/07/12 12:22:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2014/07/12 12:22:46 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2014/07/12 12:21:48 | 001,677,928 | ---- | C] (Skype Technologies S.A.) -- C:\Users\Dávid\Desktop\SkypeSetup.exe
[2014/07/12 12:15:47 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Skype
[2014/07/12 11:39:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2014/07/12 11:38:11 | 000,000,000 | ---D | C] -- C:\Users\Dávid\Desktop\mbar
[2014/07/12 11:37:25 | 014,349,744 | ---- | C] (Malwarebytes Corp.) -- C:\Users\Dávid\Desktop\mbar-1.07.0.1012.exe
[2014/07/12 11:24:01 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2014/07/12 09:24:01 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2014/07/12 09:24:01 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2014/07/12 09:24:01 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2014/07/12 09:23:55 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014/07/12 09:23:43 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2014/07/12 09:21:31 | 005,218,570 | R--- | C] (Swearware) -- C:\Users\Dávid\Desktop\ComboFix.exe
[2014/07/11 13:42:06 | 000,122,584 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014/07/11 13:41:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/07/11 13:41:50 | 000,092,888 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
[2014/07/11 13:41:50 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
[2014/07/11 13:41:50 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2014/07/11 13:41:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2014/07/11 13:41:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/07/11 13:40:45 | 017,292,760 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Dávid\Desktop\mbam-setup-2.0.2.1012.exe
[2014/07/11 11:32:56 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014/07/11 11:32:56 | 000,000,000 | ---D | C] -- C:\rsit
[2014/07/10 08:52:00 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\Apple Computer
[2014/07/10 07:49:41 | 003,178,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2014/07/10 07:49:41 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpGroupPolicyExtension.dll
[2014/07/10 07:49:40 | 006,574,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2014/07/10 07:49:40 | 005,694,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2014/07/09 20:07:03 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Curse Client
[2014/07/09 20:06:41 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Curse
[2014/07/09 15:44:13 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2014/07/09 15:44:11 | 001,147,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2014/07/09 15:44:11 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2014/07/09 15:44:11 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
[2014/07/09 15:44:11 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWbPrxy.exe
[2014/07/09 15:44:11 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2014/07/09 15:44:11 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2014/07/09 15:44:11 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsRdpWebAccess.dll
[2014/07/09 15:44:11 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2014/07/09 15:44:11 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsRdpWebAccess.dll
[2014/07/09 15:44:11 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprtPS.dll
[2014/07/09 15:44:11 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wksprtPS.dll
[2014/07/09 15:44:11 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2014/07/09 15:44:11 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2014/07/09 15:44:10 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvidcrl.dll
[2014/07/09 15:44:10 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvidcrl.dll
[2014/07/09 15:43:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
[2014/07/09 15:40:11 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp_winip.dll
[2014/07/09 15:40:11 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2014/07/09 15:40:10 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
[2014/07/09 15:40:10 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp_winip.dll
[2014/07/09 15:37:13 | 001,030,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2014/07/09 15:37:12 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2014/07/09 15:37:09 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2014/07/09 15:37:09 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2014/07/09 10:08:16 | 000,519,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2014/07/09 10:08:16 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2014/07/09 10:08:11 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osk.exe
[2014/07/09 10:08:11 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osk.exe
[2014/07/09 10:08:11 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2014/07/09 10:08:11 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2014/07/09 10:08:09 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2014/07/09 10:08:06 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2014/07/09 10:08:06 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2014/07/09 10:08:05 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014/07/09 10:08:05 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2014/07/09 10:08:05 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2014/07/09 10:08:05 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2014/07/09 10:08:05 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2014/07/09 10:08:05 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2014/07/09 10:08:04 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014/07/09 10:08:04 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014/07/09 10:08:04 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2014/07/09 10:08:04 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2014/07/09 10:08:04 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2014/07/09 10:08:04 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014/07/09 10:08:04 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2014/07/09 10:08:03 | 002,040,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014/07/09 10:08:03 | 000,608,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014/07/09 10:08:03 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2014/07/09 10:08:02 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2014/07/09 10:08:02 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014/07/09 10:08:02 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2014/07/09 10:08:02 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2014/07/09 10:08:02 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2014/07/09 10:08:02 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2014/07/09 10:08:01 | 005,721,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014/07/09 10:08:01 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2014/07/09 10:08:01 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014/07/09 10:08:01 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2014/07/09 10:08:01 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2014/07/09 10:08:01 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2014/07/09 10:08:00 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014/07/09 10:08:00 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2014/07/09 10:08:00 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2014/07/09 10:08:00 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2014/07/09 10:07:59 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2014/07/09 10:07:35 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2014/07/07 21:48:50 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\.minecraft
[2014/07/07 16:32:27 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\Spotify
[2014/07/07 16:32:00 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Spotify
[2014/07/02 17:45:51 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\TeamViewer
[2014/07/02 17:44:48 | 006,255,544 | ---- | C] (TeamViewer GmbH) -- C:\Users\Dávid\Desktop\TeamViewer_Setup_sk.exe
[2014/07/02 15:18:23 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\AskPartnerNetwork
[2014/06/29 17:00:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2014/06/29 17:00:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2014/06/29 17:00:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2014/06/29 17:00:10 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2014/06/29 16:59:59 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2014/06/29 16:59:59 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2014/06/29 16:59:59 | 000,098,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2014/06/29 16:59:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014/06/29 16:59:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2014/06/27 11:40:57 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\10247C08-3383-45BB-92F9-66F670E57FE6.aplzod
[2014/06/27 11:40:42 | 000,000,000 | ---D | C] -- C:\Users\Dávid\Documents\Súbory Outlooku
[2014/06/27 11:39:49 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Apple Computer
[2014/06/27 11:39:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
[2014/06/27 11:39:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2014/06/27 11:39:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2014/06/27 11:38:23 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\Apple
[2014/06/27 11:38:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2014/06/27 11:38:14 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2014/06/27 11:38:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2014/06/27 11:38:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2014/06/25 20:26:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2014/06/25 20:26:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2014/06/24 13:41:28 | 000,043,320 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll
[2014/06/24 13:41:28 | 000,036,152 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll
[2014/06/23 07:00:42 | 000,033,856 | -H-- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\hamachi.sys
[2014/06/20 13:46:50 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\PDAppFlex
[2014/06/20 13:46:36 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2014/06/20 13:43:06 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2014/06/20 13:38:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2014/06/20 13:28:29 | 000,000,000 | R--D | C] -- C:\Users\Dávid\Creative Cloud Files
[2014/06/20 13:26:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2014/06/20 13:24:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2014/06/20 13:22:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2014/06/20 13:22:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2014/06/20 13:21:02 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\Adobe
[2014/06/20 13:20:48 | 003,103,624 | ---- | C] (Adobe Systems Incorporated) -- C:\Users\Dávid\Desktop\CreativeCloudSet-Up.exe
[2014/06/19 14:46:29 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\CrashDumps
[2014/06/18 15:18:29 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\poclbm
[2014/06/18 12:13:07 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\HP Support Assistant
[2014/06/18 12:13:00 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\HpUpdate
[2014/06/17 22:20:38 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\Bitcoin
[2014/06/17 16:51:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
[2014/06/17 16:51:38 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Xbox 360 Accessories
[2014/06/17 16:28:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
[2014/06/17 16:25:46 | 000,000,000 | ---D | C] -- C:\Users\Dávid\Documents\FIFA 14
[2014/06/17 16:25:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2014/06/17 14:10:31 | 000,000,000 | ---D | C] -- C:\Users\Dávid\Documents\DayZ
[2014/06/17 14:10:31 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\DayZ
[2014/06/17 14:03:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FIFA 14
[2014/06/17 14:01:30 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Local\VNT
[2014/06/17 14:01:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VNT
[2014/06/17 14:01:28 | 000,000,000 | ---D | C] -- C:\ProgramData\AskPartnerNetwork
[2014/06/17 14:01:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AskPartnerNetwork
[2014/06/17 14:00:51 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
[2014/06/17 14:00:42 | 000,000,000 | ---D | C] -- C:\Users\Dávid\AppData\Roaming\uTorrent
[2014/06/17 14:00:26 | 001,302,096 | ---- | C] (BitTorrent Inc.) -- C:\Users\Dávid\Desktop\uTorrent.exe
[2014/06/16 16:12:49 | 002,871,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2014/06/16 16:12:49 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2014/06/16 16:12:49 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2014/06/16 16:12:49 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2014/06/16 16:12:47 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2014/06/16 16:12:46 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2014/06/16 16:12:46 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2014/06/16 16:12:45 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2014/06/16 15:56:10 | 000,000,000 | --SD | C] -- C:\Windows\SysNative\CompatTel
[2014/06/16 15:48:55 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2014/06/16 15:48:55 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2014/06/16 15:48:55 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2014/06/16 15:48:54 | 014,631,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2014/06/16 15:40:39 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2014/06/16 15:36:20 | 000,028,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEUDINIT.EXE
[2014/06/16 15:31:43 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2014/06/16 15:31:36 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll
[2014/06/16 15:31:36 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2014/06/16 15:31:36 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2014/06/16 15:31:31 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2014/06/16 15:31:30 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2014/06/16 15:31:30 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2014/06/16 15:31:29 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2014/06/16 15:31:28 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2014/06/16 15:31:28 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2014/06/16 15:31:28 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2014/06/16 15:31:28 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2014/06/16 15:31:28 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2014/06/16 15:31:28 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2014/06/16 15:31:26 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2014/06/16 15:31:26 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2014/06/16 15:31:26 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2014/06/16 15:31:26 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2014/06/16 15:31:26 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2014/06/16 15:31:26 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2014/06/16 15:31:26 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2014/06/16 15:31:26 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2014/06/16 15:31:23 | 000,942,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll
[2014/06/16 15:31:23 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2014/06/16 15:31:22 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2014/06/16 15:31:22 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2014/06/16 15:31:22 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2014/06/16 15:31:22 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2014/06/16 15:31:21 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2014/06/16 15:31:21 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2014/06/16 15:31:20 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2014/06/16 15:31:20 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2014/06/16 15:31:20 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2014/06/16 15:31:20 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2014/06/16 15:31:20 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2014/06/16 15:31:19 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2014/06/16 15:31:19 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2014/06/16 15:31:19 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2014/06/16 15:31:18 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2014/06/16 15:31:16 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2014/06/16 15:31:16 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2014/06/16 15:31:16 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2014/06/16 15:31:15 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2014/06/16 15:31:15 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2014/06/16 15:31:15 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2014/06/16 15:29:09 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2014/06/16 15:29:09 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2014/06/16 15:29:09 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2014/06/16 15:29:09 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2014/06/16 15:29:09 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2014/06/16 15:29:09 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2014/06/16 15:29:09 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2014/06/16 15:29:09 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2014/06/16 15:29:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2014/06/16 15:29:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2014/06/16 15:29:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2014/06/16 15:29:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2014/06/16 15:29:09 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2014/06/16 15:29:09 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2014/06/16 15:29:08 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2014/06/16 15:29:08 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2014/06/16 15:29:08 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2014/06/16 15:29:07 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2014/06/16 15:29:07 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2014/06/16 15:29:06 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2014/06/16 15:29:06 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2014/06/16 15:29:06 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2014/06/16 15:29:06 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2014/06/16 15:29:06 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2014/06/16 15:29:06 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2014/06/16 15:29:05 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2014/06/16 15:29:02 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2014/06/16 07:43:21 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2014/06/16 07:43:21 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2014/06/16 07:43:20 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2014/06/16 07:43:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2014/06/16 07:43:15 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll
[2014/06/16 07:43:15 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcore6.dll
[2014/06/16 07:43:15 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll
[2014/06/16 07:43:09 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2014/06/16 07:43:02 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2014/06/16 07:42:57 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2014/06/16 07:42:48 | 001,474,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2014/06/16 07:42:48 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2014/06/16 07:42:45 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll
[2014/06/16 07:42:45 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2014/06/16 07:42:45 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2014/06/16 07:42:44 | 000,376,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2014/06/16 07:42:44 | 000,288,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2014/06/16 07:42:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll
[2014/06/16 07:42:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll
[2014/06/16 07:42:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2014/06/16 07:42:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2014/06/16 07:42:24 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys
[2014/06/16 07:42:24 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys
[2014/06/16 07:42:23 | 000,155,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2014/06/16 07:42:20 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2014/06/16 07:42:20 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2014/06/16 07:42:20 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2014/06/16 07:42:20 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2014/06/16 07:42:20 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2014/06/16 07:42:17 | 000,368,128 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2014/06/16 07:42:17 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2014/06/16 07:42:17 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2014/06/16 07:42:17 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2014/06/16 07:42:17 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2014/06/16 07:42:17 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2014/06/16 07:42:17 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2014/06/16 07:42:17 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2014/06/16 07:42:15 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2014/06/16 07:42:15 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2014/06/16 07:42:15 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2014/06/16 07:42:15 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2014/06/16 07:42:15 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2014/06/16 07:42:15 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2014/06/16 07:42:15 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2014/06/16 07:42:15 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2014/06/16 07:42:15 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2014/06/16 07:42:15 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2014/06/16 07:42:15 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2014/06/16 07:42:15 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2014/06/16 07:42:15 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2014/06/16 07:42:15 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2014/06/16 07:42:15 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2014/06/16 07:42:15 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2014/06/16 07:42:15 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2014/06/16 07:42:13 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2014/06/16 07:42:13 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2014/06/16 07:42:13 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2014/06/16 07:42:13 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2014/06/16 07:42:09 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys
[2014/06/16 07:42:08 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2014/06/16 07:42:08 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2014/06/16 07:42:06 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2014/06/16 07:42:04 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll
[2014/06/16 07:42:04 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2014/06/16 07:42:04 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcorehc.dll
[2014/06/16 07:42:04 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2014/06/16 07:42:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netevent.dll
[2014/06/16 07:42:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netevent.dll
[2014/06/16 07:42:01 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2014/06/16 07:42:01 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys
[2014/06/16 07:42:00 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2014/06/16 07:41:59 | 005,550,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2014/06/16 07:41:58 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2014/06/16 07:41:57 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2014/06/16 07:41:57 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2014/06/16 07:41:57 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2014/06/16 07:41:56 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\objsel.dll
[2014/06/16 07:41:56 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\objsel.dll
[2014/06/16 07:41:55 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2014/06/16 07:41:55 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2014/06/16 07:41:55 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngprovider.dll
[2014/06/16 07:41:55 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adprovider.dll
[2014/06/16 07:41:55 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capiprovider.dll
[2014/06/16 07:41:55 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapiprovider.dll
[2014/06/16 07:41:55 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngprovider.dll
[2014/06/16 07:41:55 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adprovider.dll
[2014/06/16 07:41:55 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capiprovider.dll
[2014/06/16 07:41:55 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapiprovider.dll
[2014/06/16 07:41:55 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsroam.dll
[2014/06/16 07:41:55 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2014/06/16 07:41:55 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincredprovider.dll
[2014/06/16 07:41:55 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsroam.dll
[2014/06/16 07:41:55 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincredprovider.dll
[2014/06/16 07:41:55 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2014/06/16 07:41:55 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2014/06/16 07:41:55 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2014/06/16 07:41:55 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2014/06/16 07:41:47 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe
[2014/06/16 07:41:20 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2014/06/16 07:41:20 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2014/06/16 07:41:20 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2014/06/16 07:41:20 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2014/06/16 07:41:11 | 000,190,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2014/06/16 07:41:10 | 000,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2014/06/16 07:41:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iologmsg.dll
[2014/06/16 07:41:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iologmsg.dll
[2014/06/16 07:41:03 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2014/06/16 07:40:56 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2014/06/16 07:40:56 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2014/06/16 07:40:55 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2014/06/16 07:40:54 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2014/06/16 07:40:53 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll
[2014/06/16 07:40:53 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
[2014/06/16 07:40:49 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2014/06/16 07:40:49 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2014/06/16 07:40:49 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2014/06/16 07:40:49 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2014/06/16 07:40:49 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2014/06/16 07:40:48 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2014/06/16 07:40:48 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2014/06/16 07:40:48 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2014/06/16 07:40:48 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2014/06/16 07:40:48 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2014/06/16 07:40:48 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2014/06/16 07:40:48 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2014/06/16 07:40:48 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2014/06/16 07:40:48 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2014/06/16 07:40:48 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2014/06/16 07:40:48 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2014/06/16 07:40:48 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2014/06/16 07:40:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2014/06/16 07:40:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2014/06/16 07:40:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2014/06/16 07:40:48 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2014/06/16 07:40:46 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
[2014/06/16 07:40:46 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2014/06/16 07:40:46 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
[2014/06/16 07:40:46 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
[2014/06/16 07:40:41 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll
[2014/06/16 07:40:41 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll
[2014/06/16 07:40:41 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe
[2014/06/16 07:40:41 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx
[2014/06/16 07:40:41 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe
[2014/06/16 07:40:41 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx
[2014/06/16 07:40:40 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2014/06/16 07:40:40 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll