VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

malware yoursearching.com

https://forum.viry.cz:443/viewtopic.php?t=148229

Stránka 2 z 3

Re: malware yoursearching.com

Napsal: 07 bře 2016 18:56
od ORBIT
==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-07 18:14 - 2016-03-07 18:14 - 00112640 _____ (forum.viry.cz) C:\Users\Jiří\Desktop\FRSTLauncher.exe
2016-03-06 22:44 - 2016-03-06 22:44 - 00001670 _____ C:\Users\Jiří\Desktop\AdwCleaner[C2].txt
2016-03-06 21:53 - 2016-03-06 22:30 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-06 21:49 - 2016-03-06 21:52 - 01524224 _____ C:\Users\Jiří\Desktop\adwcleaner_5.100.exe
2016-03-06 21:33 - 2016-03-06 21:34 - 00114577 _____ C:\Users\Jiří\Desktop\FRST2.txt
2016-03-06 21:25 - 2016-03-07 18:42 - 00029828 _____ C:\Users\Jiří\Desktop\FRST.txt
2016-03-06 21:16 - 2016-03-06 21:20 - 00055010 _____ C:\Users\Jiří\Desktop\Addition.txt
2016-03-06 21:12 - 2016-03-07 18:41 - 00000000 ____D C:\FRST
2016-03-06 20:56 - 2016-03-06 21:12 - 02374144 _____ (Farbar) C:\Users\Jiří\Desktop\FRST64.exe
2016-03-06 17:37 - 2016-03-06 17:37 - 00000000 ___HD C:\OneDriveTemp
2016-03-06 17:27 - 2016-03-06 17:27 - 00003450 _____ C:\Users\Jiří\Desktop\MBAM-log-2016-03-06 (17-27-01).txt
2016-03-06 16:14 - 2016-03-06 16:15 - 00000000 ____D C:\Users\Jiří\Desktop\Programy
2016-03-06 15:40 - 2016-03-06 15:40 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Malwarebytes
2016-03-06 15:38 - 2016-03-06 15:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2016-03-06 15:38 - 2016-03-06 15:38 - 00001140 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-06 15:38 - 2016-03-06 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2016-03-06 15:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2016-03-06 14:39 - 2016-03-06 14:40 - 00000000 ____D C:\rsit
2016-03-06 14:39 - 2016-03-06 14:40 - 00000000 ____D C:\Program Files\trend micro
2016-03-06 14:09 - 2016-03-06 14:09 - 00003986 _____ C:\WINDOWS\System32\Tasks\Ashampoo Privacy Protector 2015 Weekly Security Scan
2016-03-06 14:08 - 2016-03-06 14:08 - 00001394 _____ C:\Users\Public\Desktop\Ashampoo Privacy Protector 2015.lnk
2016-03-06 12:18 - 2016-03-06 14:46 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-03-06 12:17 - 2016-03-06 15:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-06 07:42 - 2016-03-06 07:42 - 00000000 ____D C:\ProgramData\Emsisoft
2016-03-06 06:43 - 2016-03-06 06:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2016-03-06 06:41 - 2016-03-07 18:41 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
2016-03-06 00:54 - 2016-03-06 00:54 - 00003794 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2016-03-06 00:52 - 2016-03-06 00:52 - 00044293 _____ C:\ProgramData\1457221914.bdinstall.bin
2016-03-06 00:51 - 2016-03-07 18:38 - 00000000 ____D C:\Program Files\Bitdefender Agent
2016-03-06 00:51 - 2016-03-06 00:51 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-03-06 00:39 - 2016-03-06 10:08 - 00000000 ____D C:\AdwCleaner
2016-03-06 00:03 - 2016-03-06 00:03 - 00003300 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup
2016-03-06 00:03 - 2016-03-06 00:03 - 00003296 _____ C:\WINDOWS\System32\Tasks\SmartDefrag4_Update
2016-03-06 00:03 - 2016-03-06 00:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2016-03-06 00:03 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\WINDOWS\system32\IObitSmartDefragExtension.dll
2016-03-06 00:03 - 2014-06-04 15:17 - 00034080 _____ (IObit) C:\WINDOWS\system32\SmartDefragBootTime.exe
2016-03-06 00:03 - 2014-06-04 15:17 - 00021184 _____ (IObit) C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
2016-03-05 19:59 - 2016-03-05 19:59 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Lavasoft
2016-03-05 19:34 - 2016-03-05 19:34 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\LavasoftStatistics
2016-03-05 19:34 - 2016-03-05 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2016-03-05 19:33 - 2016-03-05 19:33 - 00000000 ____D C:\Program Files\Lavasoft
2016-03-05 19:31 - 2016-03-05 19:31 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2016-03-05 19:27 - 2016-03-05 19:52 - 00000000 ____D C:\ProgramData\Lavasoft
2016-03-05 19:14 - 2016-03-05 19:14 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-05 19:12 - 2016-03-05 19:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-03-05 19:12 - 2016-03-05 19:14 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-03-05 19:12 - 2016-03-05 19:12 - 00001422 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-03-05 19:12 - 2016-03-05 19:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2016-03-05 19:12 - 2016-03-05 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-03-05 19:12 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2016-03-05 18:52 - 2016-03-05 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2016-03-05 18:11 - 2016-03-05 18:11 - 00000000 ____D C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98}
2016-03-05 17:56 - 2016-03-05 17:56 - 00000000 ____D C:\sh4ldr
2016-03-05 17:56 - 2016-03-05 17:56 - 00000000 _____ C:\autoexec.bat
2016-03-05 17:55 - 2016-03-05 17:55 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2016-03-05 17:02 - 2016-03-05 17:02 - 01125677 _____ C:\Users\Jiří\Downloads\vymezeni_uzemi_iti_manazersky_souhrn.pdf
2016-03-05 00:03 - 2016-03-06 18:09 - 00000468 ____H C:\WINDOWS\Tasks\Norton Security Scan for Jiří.job
2016-03-05 00:03 - 2016-03-05 13:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan
2016-03-05 00:03 - 2016-03-05 00:03 - 00003702 _____ C:\WINDOWS\System32\Tasks\Norton Security Scan for Jiří
2016-03-05 00:03 - 2016-03-05 00:03 - 00000000 ____D C:\WINDOWS\system32\Drivers\NSSx64
2016-03-05 00:03 - 2016-03-05 00:03 - 00000000 ____D C:\ProgramData\NortonInstaller
2016-03-05 00:03 - 2016-03-05 00:03 - 00000000 ____D C:\ProgramData\Norton
2016-03-05 00:02 - 2016-03-05 00:02 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Opera Software
2016-03-05 00:02 - 2016-03-05 00:02 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Mozilla
2016-03-05 00:02 - 2016-03-05 00:02 - 00000000 ____D C:\Users\Jiří\AppData\Local\Chromium
2016-03-04 23:17 - 2009-08-24 21:13 - 00034304 _____ (mst software GmbH, Germany) C:\WINDOWS\system32\DfSdkBt.exe
2016-03-04 23:02 - 2016-03-04 23:03 - 00000000 ____D C:\Users\Jiří\Documents\UnderCover10
2016-03-04 22:41 - 2016-03-05 16:54 - 00000000 ____D C:\Program Files (x86)\VSO
2016-03-04 22:31 - 2016-03-04 22:32 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2016-03-04 22:27 - 2016-03-06 21:44 - 00000000 ____D C:\Users\Jiří\Desktop\Nástroje
2016-03-04 20:46 - 2016-03-04 20:46 - 00000000 ____D C:\Users\Public\Documents\Ashampoo
2016-03-04 18:01 - 2016-03-04 18:01 - 00936192 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2016-03-04 18:01 - 2016-03-04 18:01 - 00082544 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2016-03-04 18:01 - 2016-03-04 18:01 - 00003260 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_ListenToDevice
2016-03-04 18:01 - 2016-03-04 18:01 - 00003194 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2016-03-04 17:47 - 2016-03-04 17:47 - 03299824 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 03283240 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 03195648 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 03152591 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2016-03-04 17:47 - 2016-03-04 17:47 - 02894968 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2016-03-04 17:47 - 2016-03-04 17:47 - 02190992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 02110600 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 01943616 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 01435144 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 01382240 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 01330072 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 01022872 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00965024 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00933640 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00888472 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00873472 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00716104 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00596120 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00589072 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2016-03-04 17:47 - 2016-03-04 17:47 - 00532384 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00467160 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00448584 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00381416 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00343712 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00341152 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00258504 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00231920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00224256 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00221968 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00209536 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00192984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00172584 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00166208 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00158704 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00090920 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00088328 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00083632 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2016-03-04 17:47 - 2016-03-04 17:47 - 00075544 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2016-03-04 17:46 - 2016-03-04 17:47 - 00387320 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 72203792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2016-03-04 17:46 - 2016-03-04 17:46 - 14057256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 13120760 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 12986520 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 10521552 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 07172912 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 07096192 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 06289560 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV3apo.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 06264640 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 05782384 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 05338936 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 05289944 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 04881012 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2016-03-04 17:46 - 2016-03-04 17:46 - 03282032 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 02823280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 02708856 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 02437136 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 02050176 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 02037368 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01965816 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01959608 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01780624 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01601944 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01591064 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01508936 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01421104 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01356504 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01334384 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01211832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01186160 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01164336 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 01003864 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00998032 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00952984 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00931624 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00923744 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00743968 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00727440 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00708320 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00689888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00678184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00677672 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00618192 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00574760 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00514528 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00504312 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00500560 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00471336 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00447720 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00445400 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00441272 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00428232 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00415488 _____ (Harman) C:\WINDOWS\system32\HMUI.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00370728 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00369304 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00362400 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00362056 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00330568 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00327464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00321720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00310424 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00272712 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00253904 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00253864 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00252880 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00203848 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00190936 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00190424 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00179600 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00151792 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00134208 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00122320 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00118600 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00118592 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00105312 _____ C:\WINDOWS\system32\audioLibVc.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00084616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2016-03-04 17:46 - 2016-03-04 17:46 - 00065792 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll
2016-03-04 17:43 - 2016-03-04 17:43 - 09890008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2016-03-04 17:43 - 2016-03-04 17:43 - 04330200 _____ (TODO: <Company name>) C:\WINDOWS\RtCRU64.exe
2016-03-04 17:38 - 2016-03-04 17:38 - 08108584 _____ C:\WINDOWS\system32\Drivers\Netwfw01.dat
2016-03-04 17:38 - 2016-03-04 17:38 - 03354384 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\NETwew01.sys
2016-03-04 17:30 - 2016-03-04 17:30 - 00000000 ____D C:\Users\Jiří\AppData\Local\AVAST Software
2016-03-04 17:26 - 2016-03-04 17:26 - 00185600 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys
2016-03-04 17:21 - 2016-03-04 17:21 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2016-03-04 17:21 - 2016-03-04 17:21 - 00010752 _____ (Cypress Semiconductor, Inc.) C:\WINDOWS\system32\Drivers\cysmb.sys
2016-03-04 17:09 - 2016-03-06 15:34 - 00002476 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Jiří
2016-03-04 17:09 - 2016-03-06 15:34 - 00000294 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Jiří.job
2016-03-04 17:09 - 2016-03-04 17:09 - 00001441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2016-03-04 17:09 - 2016-03-04 17:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-03-04 17:08 - 2016-03-04 17:08 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\ProductData
2016-03-04 17:07 - 2016-03-06 15:50 - 00000254 _____ C:\WINDOWS\Tasks\ASC9_SkipUac_Jiří.job
2016-03-04 17:07 - 2016-03-06 07:09 - 00003302 _____ C:\WINDOWS\System32\Tasks\ASC9_PerformanceMonitor
2016-03-04 17:07 - 2016-03-06 07:09 - 00002422 _____ C:\WINDOWS\System32\Tasks\ASC9_SkipUac_Jiří
2016-03-04 17:07 - 2016-03-06 07:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2016-03-04 17:06 - 2016-03-06 00:04 - 00000000 ____D C:\ProgramData\ProductData
2016-03-04 17:06 - 2016-03-04 17:06 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2016-03-04 17:04 - 2016-03-06 00:03 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\IObit
2016-03-04 17:04 - 2016-03-06 00:03 - 00000000 ____D C:\Program Files (x86)\IObit
2016-03-04 17:04 - 2016-03-05 18:56 - 00003424 _____ C:\WINDOWS\System32\Tasks\Driver Booster Scheduler
2016-03-04 17:04 - 2016-03-05 18:56 - 00003070 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (Jiří)
2016-03-04 17:04 - 2016-03-05 18:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2016-03-04 17:04 - 2016-03-05 18:53 - 00000000 ____D C:\Users\Jiří\AppData\LocalLow\IObit
2016-03-04 17:04 - 2016-03-05 18:53 - 00000000 ____D C:\ProgramData\IObit
2016-03-04 17:04 - 2016-03-04 17:04 - 00026528 _____ (REALiX(tm)) C:\WINDOWS\SysWOW64\Drivers\HWiNFO64A.SYS
2016-03-04 16:49 - 2016-03-04 23:34 - 00003164 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1457106562
2016-03-04 16:49 - 2016-03-04 23:34 - 00001090 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-03-04 16:47 - 2016-03-04 16:47 - 00552880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswnetsec.sys
2016-03-04 16:46 - 2016-03-04 16:46 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-03-04 16:45 - 2016-03-04 16:45 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-03-04 16:36 - 2016-02-23 11:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-04 16:36 - 2016-02-23 10:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-04 16:06 - 2016-02-23 11:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-04 16:06 - 2016-02-23 07:50 - 22396416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-03-04 16:06 - 2016-02-23 07:40 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-04 16:05 - 2016-02-23 12:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-03-04 16:05 - 2016-02-23 12:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-03-04 16:05 - 2016-02-23 12:27 - 07475040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-04 16:05 - 2016-02-23 12:27 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-04 16:05 - 2016-02-23 12:27 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-03-04 16:05 - 2016-02-23 12:27 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-03-04 16:05 - 2016-02-23 12:25 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-03-04 16:05 - 2016-02-23 12:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-04 16:05 - 2016-02-23 12:23 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-04 16:05 - 2016-02-23 12:22 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-04 16:05 - 2016-02-23 12:09 - 01614176 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-04 16:05 - 2016-02-23 11:34 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-03-04 16:05 - 2016-02-23 11:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-04 16:05 - 2016-02-23 11:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-04 16:05 - 2016-02-23 11:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-03-04 16:05 - 2016-02-23 11:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-04 16:05 - 2016-02-23 11:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-04 16:05 - 2016-02-23 11:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-04 16:05 - 2016-02-23 11:32 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-03-04 16:05 - 2016-02-23 11:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-04 16:05 - 2016-02-23 11:31 - 00847656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-04 16:05 - 2016-02-23 11:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-04 16:05 - 2016-02-23 11:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-03-04 16:05 - 2016-02-23 11:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-04 16:05 - 2016-02-23 11:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-03-04 16:05 - 2016-02-23 11:21 - 06606568 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-03-04 16:05 - 2016-02-23 10:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-03-04 16:05 - 2016-02-23 10:45 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-03-04 16:05 - 2016-02-23 10:45 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-03-04 16:05 - 2016-02-23 10:45 - 00259336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-04 16:05 - 2016-02-23 10:44 - 00640984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-04 16:05 - 2016-02-23 10:39 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-03-04 16:05 - 2016-02-23 10:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-04 16:05 - 2016-02-23 10:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-03-04 16:05 - 2016-02-23 10:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-03-04 16:05 - 2016-02-23 10:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-04 16:05 - 2016-02-23 10:38 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-04 16:05 - 2016-02-23 10:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-03-04 16:05 - 2016-02-23 10:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-03-04 16:05 - 2016-02-23 10:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-04 16:05 - 2016-02-23 10:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-04 16:05 - 2016-02-23 10:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-04 16:05 - 2016-02-23 10:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-04 16:05 - 2016-02-23 10:26 - 05241984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-04 16:05 - 2016-02-23 10:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-03-04 16:05 - 2016-02-23 10:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-03-04 16:05 - 2016-02-23 09:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-03-04 16:05 - 2016-02-23 09:54 - 00539256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-04 16:05 - 2016-02-23 09:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-04 16:05 - 2016-02-23 09:30 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-03-04 16:05 - 2016-02-23 09:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-04 16:05 - 2016-02-23 09:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-03-04 16:05 - 2016-02-23 09:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-03-04 16:05 - 2016-02-23 09:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-04 16:05 - 2016-02-23 09:19 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-03-04 16:05 - 2016-02-23 09:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-03-04 16:05 - 2016-02-23 09:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-04 16:05 - 2016-02-23 09:13 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-03-04 16:05 - 2016-02-23 09:12 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-04 16:05 - 2016-02-23 09:11 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-03-04 16:05 - 2016-02-23 09:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-03-04 16:05 - 2016-02-23 09:10 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-03-04 16:05 - 2016-02-23 09:09 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-03-04 16:05 - 2016-02-23 09:09 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-03-04 16:05 - 2016-02-23 09:09 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-03-04 16:05 - 2016-02-23 09:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-03-04 16:05 - 2016-02-23 09:06 - 01848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-04 16:05 - 2016-02-23 09:06 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-03-04 16:05 - 2016-02-23 09:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-04 16:05 - 2016-02-23 09:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-03-04 16:05 - 2016-02-23 09:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-04 16:05 - 2016-02-23 09:00 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-03-04 16:05 - 2016-02-23 08:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-04 16:05 - 2016-02-23 08:47 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-03-04 16:05 - 2016-02-23 08:41 - 03594240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-03-04 16:05 - 2016-02-23 08:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-03-04 16:05 - 2016-02-23 08:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-03-04 16:05 - 2016-02-23 08:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-03-04 16:05 - 2016-02-23 08:30 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-04 16:05 - 2016-02-23 08:30 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-04 16:05 - 2016-02-23 08:30 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-04 16:05 - 2016-02-23 08:30 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-04 16:05 - 2016-02-23 08:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-04 16:05 - 2016-02-23 08:26 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-04 16:05 - 2016-02-23 08:26 - 01498112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-04 16:05 - 2016-02-23 08:25 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-04 16:05 - 2016-02-23 08:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-04 16:05 - 2016-02-23 08:24 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-04 16:05 - 2016-02-23 08:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-03-04 16:05 - 2016-02-23 08:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-03-04 16:05 - 2016-02-23 08:22 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-03-04 16:05 - 2016-02-23 08:17 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-04 16:05 - 2016-02-23 08:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-04 16:05 - 2016-02-23 08:11 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-04 16:05 - 2016-02-23 08:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-03-04 16:05 - 2016-02-23 07:59 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-04 16:05 - 2016-02-23 07:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-04 16:05 - 2016-02-23 07:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-04 16:05 - 2016-02-23 07:55 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-04 16:05 - 2016-02-23 07:55 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-04 16:05 - 2016-02-23 07:53 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-03-04 16:05 - 2016-02-23 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-03-04 16:05 - 2016-02-23 07:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-04 16:05 - 2016-02-23 07:50 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-03-04 16:05 - 2016-02-23 07:42 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-03-04 16:05 - 2016-02-23 07:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-03-04 16:05 - 2016-02-23 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-04 16:05 - 2016-02-23 07:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-04 16:05 - 2016-02-23 07:36 - 19341312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-04 16:05 - 2016-02-23 07:36 - 18680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-04 16:05 - 2016-02-23 07:36 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-04 16:05 - 2016-02-23 07:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-04 16:05 - 2016-02-23 07:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-03-04 16:05 - 2016-02-23 07:33 - 14254080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-04 16:05 - 2016-02-23 07:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-03-04 16:05 - 2016-02-23 07:32 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-03-04 16:05 - 2016-02-23 07:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-03-04 16:05 - 2016-02-23 07:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-03-04 16:05 - 2016-02-23 07:26 - 12587520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-04 16:05 - 2016-02-09 05:28 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-03-04 16:05 - 2016-02-09 04:24 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-03-04 16:05 - 2016-02-09 04:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-03-04 16:05 - 2016-02-09 04:07 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-03-04 16:05 - 2016-02-09 04:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-04 16:05 - 2016-02-09 04:04 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-03-04 16:04 - 2016-02-23 12:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-03-04 16:04 - 2016-02-23 12:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-03-04 16:04 - 2016-02-23 12:15 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-04 16:04 - 2016-02-23 12:08 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-03-04 16:04 - 2016-02-23 11:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-03-04 16:04 - 2016-02-23 11:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-03-04 16:04 - 2016-02-23 11:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-04 16:04 - 2016-02-23 11:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-03-04 16:04 - 2016-02-23 10:49 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-04 16:04 - 2016-02-23 10:45 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-03-04 16:04 - 2016-02-23 10:44 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-04 16:04 - 2016-02-23 10:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-03-04 16:04 - 2016-02-23 10:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-03-04 16:04 - 2016-02-23 10:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-03-04 16:04 - 2016-02-23 10:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-03-04 16:04 - 2016-02-23 10:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-03-04 16:04 - 2016-02-23 10:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-03-04 16:04 - 2016-02-23 10:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-04 16:04 - 2016-02-23 10:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-04 16:04 - 2016-02-23 10:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-03-04 16:04 - 2016-02-23 10:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-03-04 16:04 - 2016-02-23 10:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-04 16:04 - 2016-02-23 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-04 16:04 - 2016-02-23 10:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-03-04 16:04 - 2016-02-23 09:58 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-04 16:04 - 2016-02-23 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-03-04 16:04 - 2016-02-23 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-03-04 16:04 - 2016-02-23 09:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-03-04 16:04 - 2016-02-23 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-03-04 16:04 - 2016-02-23 09:55 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-04 16:04 - 2016-02-23 09:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-03-04 16:04 - 2016-02-23 09:54 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-04 16:04 - 2016-02-23 09:54 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-03-04 16:04 - 2016-02-23 09:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-03-04 16:04 - 2016-02-23 09:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-03-04 16:04 - 2016-02-23 09:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-04 16:04 - 2016-02-23 09:51 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2016-03-04 16:04 - 2016-02-23 09:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-03-04 16:04 - 2016-02-23 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-03-04 16:04 - 2016-02-23 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-04 16:04 - 2016-02-23 09:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-03-04 16:04 - 2016-02-23 09:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-03-04 16:04 - 2016-02-23 09:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-04 16:04 - 2016-02-23 09:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-03-04 16:04 - 2016-02-23 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-03-04 16:04 - 2016-02-23 09:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-03-04 16:04 - 2016-02-23 09:37 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-04 16:04 - 2016-02-23 09:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-04 16:04 - 2016-02-23 09:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-04 16:04 - 2016-02-23 09:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-03-04 16:04 - 2016-02-23 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-03-04 16:04 - 2016-02-23 09:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-03-04 16:04 - 2016-02-23 09:28 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-04 16:04 - 2016-02-23 09:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-04 16:04 - 2016-02-23 09:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-03-04 16:04 - 2016-02-23 09:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-03-04 16:04 - 2016-02-23 09:25 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-04 16:04 - 2016-02-23 09:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-03-04 16:04 - 2016-02-23 09:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-04 16:04 - 2016-02-23 09:22 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-04 16:04 - 2016-02-23 09:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-03-04 16:04 - 2016-02-23 09:20 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-04 16:04 - 2016-02-23 09:18 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-04 16:04 - 2016-02-23 09:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-03-04 16:04 - 2016-02-23 09:13 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-03-04 16:04 - 2016-02-23 09:13 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-04 16:04 - 2016-02-23 09:11 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-03-04 16:04 - 2016-02-23 09:06 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-03-04 16:04 - 2016-02-23 09:06 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-03-04 16:04 - 2016-02-23 09:05 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-03-04 16:04 - 2016-02-23 09:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-03-04 16:04 - 2016-02-23 09:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-03-04 16:04 - 2016-02-23 09:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-03-04 16:04 - 2016-02-23 08:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-03-04 16:04 - 2016-02-23 08:58 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-04 16:04 - 2016-02-23 08:58 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-04 16:04 - 2016-02-23 08:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-03-04 16:04 - 2016-02-23 08:54 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-04 16:04 - 2016-02-23 08:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-03-04 16:04 - 2016-02-23 08:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-03-04 16:04 - 2016-02-23 08:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-03-04 16:04 - 2016-02-23 08:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-03-04 16:04 - 2016-02-23 08:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-03-04 16:04 - 2016-02-23 08:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-03-04 16:04 - 2016-02-23 08:37 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-04 16:04 - 2016-02-23 08:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-04 16:04 - 2016-02-23 08:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-03-04 16:04 - 2016-02-23 08:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-04 16:04 - 2016-02-23 08:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-03-04 16:04 - 2016-02-23 08:31 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-04 16:04 - 2016-02-23 08:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-03-04 16:04 - 2016-02-23 08:28 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-03-04 16:04 - 2016-02-23 08:28 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-03-04 16:04 - 2016-02-23 08:21 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-03-04 16:04 - 2016-02-23 08:21 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-03-04 16:04 - 2016-02-23 08:20 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-03-04 16:04 - 2016-02-23 08:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-04 16:04 - 2016-02-23 07:58 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-03-04 16:04 - 2016-02-09 05:13 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-03-04 16:04 - 2016-02-09 04:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-03-04 14:38 - 2016-03-04 14:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-03-04 14:34 - 2016-03-04 14:34 - 00002235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-03-04 14:32 - 2016-03-07 18:38 - 00000922 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-03-04 14:32 - 2016-03-07 18:38 - 00000918 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-03-04 14:32 - 2016-03-04 14:38 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-03-04 14:32 - 2016-03-04 14:32 - 00003982 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2016-03-04 14:32 - 2016-03-04 14:32 - 00003750 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2016-03-04 14:32 - 2016-03-04 14:32 - 00000000 ____D C:\Users\Jiří\AppData\Local\Dropbox
2016-03-04 14:32 - 2016-03-04 14:32 - 00000000 ____D C:\ProgramData\Dropbox
2016-03-04 14:28 - 2016-03-04 14:28 - 00000000 ____D C:\ProgramData\GlarySoft
2016-03-04 14:25 - 2016-03-04 14:25 - 00003854 _____ C:\WINDOWS\System32\Tasks\GlaryOneClickOptimizer 5
2016-03-04 14:25 - 2016-03-04 14:25 - 00003674 _____ C:\WINDOWS\System32\Tasks\GlaryUpdate 5
2016-03-04 14:20 - 2016-03-04 18:47 - 00003440 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5
2016-03-04 14:20 - 2016-03-04 14:20 - 00020160 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUBootStartup.sys
2016-03-04 14:20 - 2016-03-04 14:20 - 00003026 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC
2016-03-04 14:20 - 2016-03-04 14:20 - 00001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2016-03-04 14:20 - 2016-03-04 14:20 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\GlarySoft
2016-03-04 14:20 - 2016-03-04 14:20 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\DiskDefrag
2016-03-04 14:20 - 2016-03-04 14:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2016-03-04 14:19 - 2016-03-04 14:21 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-02-24 22:22 - 2016-02-24 22:22 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Kodi
2016-02-24 22:20 - 2016-02-24 22:20 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi
2016-02-18 16:44 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-18 16:44 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-02-18 16:44 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-02-18 16:44 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-02-18 16:44 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-02-18 16:44 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-02-18 16:44 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-02-18 16:44 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-02-18 16:44 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-02-18 16:43 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-18 16:43 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-18 16:43 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-18 16:43 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-18 16:43 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-18 16:43 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-18 16:43 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-18 16:43 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-18 16:43 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-18 16:43 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-18 16:43 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-18 16:43 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-18 16:43 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-18 16:43 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-18 16:43 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-02-18 16:43 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-02-18 16:43 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-02-18 16:43 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-02-18 16:43 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-02-18 16:43 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-02-18 16:43 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-02-18 16:43 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-02-18 16:43 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-02-18 16:43 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-02-18 16:43 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-02-18 16:43 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-02-18 16:43 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-02-18 16:43 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-02-18 16:43 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-02-18 16:43 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-02-18 16:43 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-02-18 16:43 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-02-18 16:43 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-02-18 16:43 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-02-18 16:43 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-02-18 16:43 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-02-18 16:43 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-02-18 16:43 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-02-18 16:43 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-02-18 16:43 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2016-02-18 16:43 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-02-18 16:43 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-02-18 16:43 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-02-18 16:43 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll
2016-02-18 16:43 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-02-18 16:43 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-02-18 16:43 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-02-18 16:43 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-02-18 16:43 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-02-18 16:43 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-02-18 16:43 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-02-18 16:43 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-02-18 16:43 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-02-18 16:43 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-02-18 16:43 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-02-18 16:43 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-02-18 16:37 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-18 16:36 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-18 16:36 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-18 16:36 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-18 16:36 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-18 16:36 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-18 16:36 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-18 16:36 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-18 16:36 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-18 16:36 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-18 16:36 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-18 16:36 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-18 16:36 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-18 16:36 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-18 16:36 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-18 16:36 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-18 16:36 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-18 16:36 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-18 16:36 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-18 16:36 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-02-18 16:36 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-02-18 16:36 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-02-18 16:36 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-02-18 16:36 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-02-18 16:36 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-02-18 16:36 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-02-18 16:36 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-02-18 16:36 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-02-18 16:36 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-02-18 16:36 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-02-18 16:36 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-02-18 16:36 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-02-18 16:36 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-02-18 16:36 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-02-18 16:36 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-02-18 16:36 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-02-18 16:36 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2016-02-18 16:36 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2016-02-18 16:36 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-02-18 16:36 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
2016-02-18 16:36 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-02-18 16:36 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2016-02-18 16:36 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2016-02-18 16:36 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2016-02-18 16:36 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-02-18 16:36 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2016-02-18 16:36 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2016-02-18 16:36 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-02-18 16:36 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-07 18:47 - 2014-02-07 18:24 - 00000978 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-07 18:43 - 2014-02-08 06:13 - 00000000 __RDO C:\Users\Jiří\SkyDrive
2016-03-07 18:42 - 2015-08-06 06:56 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2016-03-07 18:42 - 2014-02-08 07:09 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-03-07 18:40 - 2014-02-07 06:00 - 00000401 _____ C:\Users\Jiří\AppData\Roaming\sp_data.sys
2016-03-07 18:38 - 2014-02-07 18:24 - 00000974 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-07 18:37 - 2015-12-26 17:06 - 00000000 ____D C:\Users\Jiří
2016-03-07 18:36 - 2015-12-26 17:23 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-07 18:19 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-07 18:19 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-07 18:12 - 2014-04-20 21:29 - 00004192 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B1B9BA7A-3B85-460B-B3CE-7A6ABDE50842}
2016-03-06 22:37 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-03-06 19:07 - 2014-02-07 05:57 - 00000000 ____D C:\Users\Jiří\AppData\Local\VirtualStore
2016-03-06 18:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-06 14:08 - 2015-11-15 19:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2016-03-06 14:08 - 2015-11-15 19:26 - 00000000 ____D C:\ProgramData\Ashampoo
2016-03-06 14:08 - 2015-11-15 19:26 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2016-03-06 13:13 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Performance
2016-03-06 01:00 - 2015-09-19 22:55 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-03-06 01:00 - 2014-02-07 18:25 - 00001337 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-06 01:00 - 2014-02-07 18:25 - 00001325 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-05 23:54 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-03-05 23:34 - 2015-12-30 00:25 - 00000000 ____D C:\Users\Jiří\AppData\Local\ElevatedDiagnostics
2016-03-05 23:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-03-05 19:16 - 2014-08-09 20:59 - 00001937 _____ C:\Users\Jiří\Desktop\KMP Games.lnk
2016-03-05 18:13 - 2014-02-08 16:34 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Apple Computer
2016-03-05 16:54 - 2015-12-23 19:08 - 00099384 _____ C:\Users\Jiří\AppData\Roaming\inst.exe
2016-03-05 16:54 - 2015-12-23 19:08 - 00082816 _____ (VSO Software) C:\Users\Jiří\AppData\Roaming\pcouffin.sys
2016-03-05 16:54 - 2015-12-23 19:08 - 00007859 _____ C:\Users\Jiří\AppData\Roaming\pcouffin.cat
2016-03-05 16:54 - 2015-12-23 19:08 - 00000000 ____D C:\Users\Jiří\Documents\PcSetup
2016-03-05 16:54 - 2015-12-23 19:08 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Vso
2016-03-05 16:52 - 2015-12-23 19:08 - 00000000 ____D C:\ProgramData\VSO
2016-03-05 14:12 - 2013-05-01 12:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-05 14:12 - 2013-05-01 12:20 - 00000000 ____D C:\ProgramData\WildTangent
2016-03-05 06:46 - 2015-10-30 19:31 - 00751272 _____ C:\WINDOWS\system32\perfh005.dat
2016-03-05 06:46 - 2015-10-30 19:31 - 00150860 _____ C:\WINDOWS\system32\perfc005.dat
2016-03-05 06:46 - 2015-08-05 23:50 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-05 06:43 - 2014-02-07 02:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-05 06:38 - 2015-12-26 16:56 - 00237520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-05 00:24 - 2015-10-30 19:35 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-05 00:24 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-05 00:24 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-03-05 00:24 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-04 23:25 - 2015-11-15 18:38 - 00000000 ____D C:\Users\Jiří\AppData\LocalLow\Temp
2016-03-04 21:39 - 2014-01-09 10:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-04 21:08 - 2015-01-04 15:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2016-03-04 20:58 - 2014-02-08 16:32 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-03-04 19:13 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-04 18:40 - 2014-02-08 16:31 - 00000000 ____D C:\ProgramData\Apple
2016-03-04 18:25 - 2015-08-06 07:02 - 00000000 ____D C:\Program Files\Elantech
2016-03-04 18:25 - 2015-01-02 22:34 - 00000000 ____D C:\Users\Jiří\AppData\Local\Unity
2016-03-04 18:11 - 2014-06-27 21:35 - 00002098 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2016-03-04 18:11 - 2013-05-01 12:15 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-03-04 17:58 - 2015-12-26 17:02 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-03-04 17:56 - 2015-12-26 17:02 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-03-04 17:53 - 2015-12-26 16:55 - 00000000 ___DC C:\WINDOWS\Panther
2016-03-04 17:47 - 2015-06-24 21:57 - 04739328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2016-03-04 17:47 - 2015-06-24 21:57 - 00023696 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2016-03-04 17:46 - 2015-06-24 21:59 - 03073024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2016-03-04 17:45 - 2015-12-26 17:02 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2016-03-04 17:43 - 2015-06-03 06:36 - 00313048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsBaStor.sys
2016-03-04 17:43 - 2015-06-03 06:36 - 00083160 _____ (Realtek Semiconductor.) C:\WINDOWS\system32\RtCRX64.dll
2016-03-04 17:39 - 2015-08-06 07:02 - 00447720 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\Drivers\ETD.sys
2016-03-04 17:25 - 2015-05-13 04:44 - 00027872 _____ (ASUS) C:\WINDOWS\system32\Drivers\AsHIDSwitch64.sys
2016-03-04 16:47 - 2014-02-08 07:09 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-03-04 16:47 - 2014-02-08 07:09 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2016-03-04 16:46 - 2014-06-21 21:06 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-03-04 16:46 - 2014-02-08 07:09 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-03-04 16:46 - 2014-02-08 07:09 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-03-04 16:46 - 2014-02-08 07:09 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-03-04 16:46 - 2014-02-08 07:09 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-03-04 16:46 - 2014-02-08 07:05 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-04 16:45 - 2014-02-08 07:09 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-03-04 16:45 - 2014-02-08 07:09 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-03-04 16:45 - 2014-02-08 07:07 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-04 14:46 - 2016-01-19 23:09 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-04 14:39 - 2014-04-13 07:20 - 00000000 ____D C:\Users\Jiří\AppData\Roaming\Dropbox
2016-03-04 14:34 - 2014-02-07 18:24 - 00000000 ____D C:\Program Files (x86)\Google
2016-02-24 22:20 - 2016-01-05 21:54 - 00000000 ____D C:\Program Files (x86)\Kodi
2016-02-24 11:34 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-02-24 11:34 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-02-24 11:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-02-24 11:07 - 2014-02-07 08:50 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-24 10:53 - 2014-02-07 08:50 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-24 10:50 - 2016-01-20 20:29 - 00000000 ___RD C:\Users\hlava\OneDrive
2016-02-21 12:36 - 2016-01-19 23:26 - 00000000 ____D C:\Users\hlava\AppData\Local\Google
2016-02-18 18:32 - 2016-01-19 23:26 - 00000000 ____D C:\Users\hlava\AppData\Local\Packages
2016-02-17 13:26 - 2016-01-20 20:29 - 00002429 _____ C:\Users\hlava\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-17 13:23 - 2016-01-20 20:26 - 00000401 _____ C:\Users\hlava\AppData\Roaming\sp_data.sys
2016-02-17 00:06 - 2014-08-17 21:15 - 00000000 __SHD C:\Users\Jiří\AppData\LocalLow\EmieUserList
2016-02-17 00:06 - 2014-08-17 21:15 - 00000000 __SHD C:\Users\Jiří\AppData\LocalLow\EmieSiteList
2016-02-08 14:22 - 2014-12-02 22:32 - 00000753 _____ C:\Users\Jiří\Desktop\Videa – zástupce.lnk
2016-02-08 14:22 - 2014-04-02 23:21 - 00001061 _____ C:\Users\Jiří\Desktop\Total Commander 64 bit.lnk
2016-02-08 14:22 - 2014-02-08 16:40 - 00001021 _____ C:\Users\Jiří\Desktop\Celestia.lnk
2016-02-06 07:19 - 2015-08-06 07:07 - 00002426 _____ C:\Users\Jiří\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

==================== Files in the root of some directories =======

2015-12-23 19:08 - 2016-03-05 16:54 - 0099384 _____ () C:\Users\Jiří\AppData\Roaming\inst.exe
2015-12-23 19:08 - 2016-03-05 16:54 - 0007859 _____ () C:\Users\Jiří\AppData\Roaming\pcouffin.cat
2015-12-23 19:08 - 2016-03-05 16:54 - 0001167 _____ () C:\Users\Jiří\AppData\Roaming\pcouffin.inf
2015-12-23 19:08 - 2016-03-05 16:54 - 0000055 _____ () C:\Users\Jiří\AppData\Roaming\pcouffin.log
2015-12-23 19:08 - 2016-03-05 16:54 - 0082816 _____ (VSO Software) C:\Users\Jiří\AppData\Roaming\pcouffin.sys
2014-02-07 06:00 - 2016-03-07 18:40 - 0000401 _____ () C:\Users\Jiří\AppData\Roaming\sp_data.sys
2014-07-30 06:35 - 2014-08-16 12:24 - 0002348 _____ () C:\Users\Jiří\AppData\Local\MRDownloader.err
2014-04-02 21:23 - 2014-08-16 12:30 - 0001104 _____ () C:\Users\Jiří\AppData\Local\MRDownloader.nast
2016-03-06 00:52 - 2016-03-06 00:52 - 0044293 _____ () C:\ProgramData\1457221914.bdinstall.bin
2015-12-26 17:02 - 2015-12-26 17:02 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-05-01 12:15 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-05-01 12:15 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2013-05-01 12:15 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Some files in TEMP:
====================
C:\Users\Jiří\AppData\Local\Temp\gusetup5.exe
C:\Users\Jiří\AppData\Local\Temp\PrivacyProtector2015.exe
C:\Users\Jiří\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-03-04 19:05

==================== End of FRST.txt ============================

Re: malware yoursearching.com

Napsal: 07 bře 2016 19:00
od ORBIT
zase jsem rozdělil na 2 odpovědí
bylo už 107 tis.znaků...

dnes už nebudu, tak snad zítra.
díky J.

Re: malware yoursearching.com

Napsal: 07 bře 2016 19:51
od Rudy
OK. Otevřte poznámkový blok a zkopírujte do něj:
Start
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
C:\Users\Jiří\AppData\Local\Temp
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-105238596-448193075-4171969983-1002\...\MountPoints2: {45e0ff43-9056-11e3-824f-806e6f6e6963} - "E:\startdvd.exe"
BootExecute: autocheck autochk * 搀渀挀氀攀愀渀㘀㐀⸀攀砀攀
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-105238596-448193075-4171969983-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-105238596-448193075-4171969983-1002 -> A9FC44FCA357AFB32B7547F1ABD9C037 URL =
SearchScopes: HKU\S-1-5-21-105238596-448193075-4171969983-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
CHR StartupUrls: Default -> "hxxp://www.inbox.com/homepage.aspx?tbid=82120& ... 6p7kb2hvex"
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" <not found>
U3 DfSdkS; no ImagePath
R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [10970064 2016-02-26] (Emsisoft Ltd)
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Doporučuji odinstalovat AdvancedSystemCare. Tento rádoby čistící program vidí problémy tam, kde nejsou a laik si jím snadno může poškodit systém.

Re: malware yoursearching.com

Napsal: 09 bře 2016 19:52
od ORBIT
Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Jiří (2016-03-09 19:45:00) Run:1
Running from C:\Users\Jiří\Desktop
Loaded Profiles: Jiří (Available Profiles: UpdatusUser & Jiří & hlava)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\ProgramData\DP45977C.lfl
C:\Users\Jiří\AppData\Local\Temp
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-105238596-448193075-4171969983-1002\...\MountPoints2: {45e0ff43-9056-11e3-824f-806e6f6e6963} - "E:\startdvd.exe"
BootExecute: autocheck autochk * 搀渀挀氀攀愀渀㘀㐀⸀攀砀攀
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-105238596-448193075-4171969983-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-105238596-448193075-4171969983-1002 -> A9FC44FCA357AFB32B7547F1ABD9C037 URL =
SearchScopes: HKU\S-1-5-21-105238596-448193075-4171969983-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
CHR StartupUrls: Default -> "hxxp://www.inbox.com/homepage.aspx?tbid=82120& ... 6p7kb2hvex"
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" <not found>
U3 DfSdkS; no ImagePath
R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [10970064 2016-02-26] (Emsisoft Ltd)
End
*****************

C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully

"C:\Users\Jiří\AppData\Local\Temp" folder move:

Could not move "C:\Users\Jiří\AppData\Local\Temp" => Scheduled to move on reboot.

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
"HKU\S-1-5-21-105238596-448193075-4171969983-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{45e0ff43-9056-11e3-824f-806e6f6e6963}" => key removed successfully
HKCR\CLSID\{45e0ff43-9056-11e3-824f-806e6f6e6963} => key not found.
hklm\System\CurrentControlSet\Control\Session Manager\\BootExecute => value restored successfully
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKU\S-1-5-21-105238596-448193075-4171969983-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-105238596-448193075-4171969983-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\A9FC44FCA357AFB32B7547F1ABD9C037" => key removed successfully
HKCR\CLSID\A9FC44FCA357AFB32B7547F1ABD9C037 => key not found.
"HKU\S-1-5-21-105238596-448193075-4171969983-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => key removed successfully
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
"HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10" => key removed successfully
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com => value removed successfully
Chrome StartupUrls => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ihenkjeihefokohmemphikjnjbmegdik" => key removed successfully
DfSdkS => service removed successfully
a2AntiMalware => Unable to stop service.
a2AntiMalware => service removed successfully

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-03-09 19:48:04)

C:\Users\Jiří\AppData\Local\Temp => moved successfully

==== End of Fixlog 19:48:31 ====

Re: malware yoursearching.com

Napsal: 09 bře 2016 20:07
od Rudy
Smazáno. Nastala nějaká změna?

Re: malware yoursearching.com

Napsal: 09 bře 2016 20:33
od ORBIT
v chromu mi po pár kliknutí vyskočilo toto.
Tento odkaz se na 1sec zobrazí a hned přesměruje na uvedené weby níže

https://www.liveadexchanger.com/a/display.php?r=1064042


https://www.liveadexchanger.com/a/displ ... c0ab&vab=1


http://www.win2day.xyz/CZ/page2pop_oil. ... 1457551765

http://cs.reimageplus.com/land/slm/inde ... bfa75afa85

Avast mi bloknul pouze teto web
http://the.bestappstore.mobi/?utm_mediu ... 27436d000f


Půjde s tím ještě něco udělat?
Jirka

Re: malware yoursearching.com

Napsal: 09 bře 2016 20:52
od ORBIT
ještě mi vyskočily tyto weby.

http://hipersushiads.com/redirect11158/

http://sender.megapopads.com/transporte ... dhMzVlYjM5

http://www.bet365.com/home/?affiliate=365_419555

děkuji za pomoc
J.

Re: malware yoursearching.com

Napsal: 09 bře 2016 21:28
od Rudy
Zkusíme ještě tyto skeny:

1. Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize




autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;





Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

a

2. Junkware removal tool: http://thisisudax.org/downloads/JRT.exe
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.

Re: malware yoursearching.com

Napsal: 09 bře 2016 21:34
od ORBIT
mam win 10, je tedy postup stejný?

Re: malware yoursearching.com

Napsal: 09 bře 2016 22:29
od Rudy
Ano, je.

Re: malware yoursearching.com

Napsal: 09 bře 2016 22:30
od ORBIT
Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by Jiýˇ on 09.03.2016 at 21:32:30,77.
Microsoft Windows 10 Home 10.0.10586 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\JI10BB~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

09.03.2016 21:37:40 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Cisco deleted successfully
C:\Program Files\Common Files\Intel deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} deleted successfully
C:\Users\UpdatusUser\AppData\LocalLow deleted successfully
C:\Users\hlava\AppData\Local\ActiveSync deleted successfully
C:\Users\hlava\AppData\Local\NetworkTiles deleted successfully
C:\Users\hlava\AppData\Local\VirtualStore deleted successfully
C:\Users\JI10BB~1\AppData\Local\ActiveSync deleted successfully
C:\Users\JI10BB~1\AppData\Local\EmieSiteList deleted successfully
C:\Users\JI10BB~1\AppData\Local\EmieUserList deleted successfully
C:\Users\JI10BB~1\AppData\Local\NetworkTiles deleted successfully
C:\Users\JI10BB~1\AppData\Local\Unity deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-105238596-448193075-4171969983-1002\SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\JI10BB~1\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\prefs.js:
user_pref("browser.search.defaultenginename", "Google");

Added to C:\Users\JI10BB~1\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\JI10BB~1\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default

---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 1);
---- FireFox user.js and prefs.js backups ----

user__2215_.backup
prefs__2215_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Cisco not found
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} not found
C:\PROGRA~3\SetStretch.VBS deleted
C:\PROGRA~3\Lavasoft\Web Companion deleted
C:\PROGRA~3\ProductData deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\JI10BB~1\AppData\Local\MSGBOX.EXE deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\JI10BB~1\AppData\LocalLow\Unity deleted
C:\windows\SysNative\tasks\ASC9_PerformanceMonitor deleted
C:\Users\JI10BB~1\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\staged deleted
"C:\WINDOWS\Installer\5fcbc1.msi" deleted
"C:\Users\JI10BB~1\AppData\Local\AVAST Software" not deleted
"C:\Users\JI10BB~1\AppData\Local\AVAST Software\APM" not deleted
"C:\Users\JI10BB~1\AppData\Local\AVAST Software\APM\Jiří" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\JI10BB~1\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [04.03.2016 16:46]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [04.03.2016 16:46]

==== Firefox Extensions ======================

==== Firefox Plugins ======================


==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
emhginjpijfggbofeediiojmdlmlkoik - C:\Program Files\AVAST Software\Avast\pam\Chrome\pam.crx[04.03.2016 16:45]
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx[18.08.2014 06:00]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[04.03.2016 16:45]

Avast SafePrice - hlava\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Avast Online Security - hlava\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Seznam Lištička - Email - JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig
Seznam Lištička - Slovník - JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd
passwords - JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik
avast SafePrice - JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Avast Online Security - JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki

==== Chromium Startpages ======================

C:\Users\JI10BB~1\AppData\Local\Chromium\Metro\User Data\Default\Preferences
"homepage": "http://www.seznam.cz/?clid=6826",


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\fi]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\ma]
@="http://www.mapy.cz/?sourceid=quicksearch_6826&query=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\se]
@="http://search.seznam.cz/?sourceid=quicksearch_6826&q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\vi]
@="http://videa.seznam.cz/?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\zb]
@="http://www.zbozi.cz/?sourceid=quicksearch_6826&q=%s"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... &pc=ASU2JS
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... &pc=ASU2JS
HKCU\SearchScopes "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
HKCU\SearchScopes\72F2B77037B58ED11AE5787D1022A1AC - http://www.firmy.cz/phr/{searchTerms}
HKCU\SearchScopes\AA8877C48D456A3115B23DE6B60B9E0B - http://www.zbozi.cz/?sourceid=quicksear ... earchTerms}
HKCU\SearchScopes\B1B14E8F5BD23674A9AEC70886C375ED - http://www.mapy.cz/?sourceid=quicksearc ... earchTerms}
HKCU\SearchScopes\F37372A7AC1F7025A4E7743C9E253F64 - http://videa.seznam.cz/?q={searchTerms}
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... ORM=IE8SRC

==== Reset Google Chrome ======================

C:\Users\hlava\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\hlava\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\JI10BB~1\AppData\Local\Chromium\User Data\Default\Preferences was reset successfully
C:\Users\JI10BB~1\AppData\Local\Chromium\User Data\Default\Preferences_20160305000215.backup was reset successfully
C:\Users\JI10BB~1\AppData\Local\Chromium\Metro\User Data\Default\Preferences was reset successfully
C:\Users\JI10BB~1\AppData\Local\Chromium\Metro\User Data\Default\Preferences_20160305000215.backup was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Preferences_20160305000215.backup was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\Metro\User Data\Default\Preferences was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\Metro\User Data\Default\Preferences_20160305000215.backup was reset successfully
C:\Users\hlava\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\hlava\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Web Data_20160305000215.backup was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EF8E2E05B8F112F4EBF99F51D2E35A1B deleted successfully
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{50E2E8FE-1F8B-4F21-BE9F-F9152D3EA5B1} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\EF8E2E05B8F112F4EBF99F51D2E35A1B deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\hlava\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\JI10BB~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\JI10BB~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\hlava\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\JI10BB~1\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\JI10BB~1\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\hlava\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\JI10BB~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=68 folders=49 929089645 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\JI10BB~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\JI10BB~1\AppData\Local\AVAST Software" not deleted

==== EOF on 09.03.2016 at 22:28:33,15 ======================

Re: malware yoursearching.com

Napsal: 09 bře 2016 22:35
od Rudy
Něco to smazalo. Ještě ten JRT.

Re: malware yoursearching.com

Napsal: 09 bře 2016 22:39
od ORBIT
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.3 (02.09.2016)
Operating System: Windows 10 Home x64
Ran by Jiýˇ (Administrator) on 09.03.2016 at 22:32:13,31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 17

Successfully deleted: C:\ProgramData\1457221914.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\iobit\driver booster (Folder)
Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\Jiýˇ\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Folder)
Successfully deleted: C:\Users\Jiýˇ\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd (Folder)
Successfully deleted: C:\Users\Jiýˇ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bgjpfhpjcgdppjbgnpnjllokbmcdllig_0.localstorage (File)
Successfully deleted: C:\Users\Jiýˇ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_blmojkbhnkkphngknkmgccmlenfaelkd_0.localstorage (File)
Successfully deleted: C:\Users\Jiýˇ\AppData\Roaming\iobit\driver booster (Folder)
Successfully deleted: C:\Users\Jiýˇ\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js (File)
Successfully deleted: C:\Users\Jiýˇ\AppData\Roaming\productdata (Folder)
Successfully deleted: C:\WINDOWS\system32\Tasks\Driver Booster Scheduler (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Jiýˇ) (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\SmartDefrag4_Startup (Task)
Successfully deleted: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Jiýˇ.job (Task)
Successfully deleted: C:\Program Files (x86)\iobit\driver booster (Folder)
Successfully deleted: C:\WINDOWS\prefetch\DRIVER BOOSTER.TMP-1F5ED8C4.pf (File)
Successfully deleted: C:\WINDOWS\prefetch\DRIVERBOOSTER.EXE-D5205666.pf (File)



Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_7828127F1A53D39B6B999E302F8D13D8 (Registry Value)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.03.2016 at 22:39:11,97
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: malware yoursearching.com

Napsal: 10 bře 2016 18:09
od Rudy
OK. Změnilo se něco?

Re: malware yoursearching.com

Napsal: 10 bře 2016 18:21
od ORBIT
ted když jsem kliknul zrovna na banku, tak místo přihlášení vyskočilo okno
https://ecosmartfilter.com/land/getstarted2.php?b=first
nevím co to je, jestli je to problém nebo ne..

Napadlo mě ještě, jestli v těchto případech nepomůže bod obnovy win...

Poradíte mi nějaký antivir a antimalware.
Co vše co mám je asi k ničemu, že?
Vše mám z chipu, tak jsem myslel že je to korekt.
Všechny časy jsou v UTC+01:00
Stránka 2 z 3

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz