Sken AdwCleanerom

[kostik123456]

Zadal jsem si ty registre ručně pomocí regeditu a má to něco společného z vyhladávečem bing To by snad neměl být malware,nebo jo??
Mám to v ProBooku HP i v stolním PC.

[Rudy]

Malware to přimo není, nicméně to v pc neradi vidíme, zpomaluje zbytečně chod.

[kostik123456]

Rudy tady je RSIT log,ale poprosil bych aby jste mi z ProBooku a
zítra z PC vymazal jen tudle věc a nijaké další čištení a uklizení PC,nebo potom mi nejede
ve 3D ploše ani jedna aplikace vrátane emailu který používam.MOC DĚKUJI.


Logfile of random's system information tool 1.10 (written by random/random)
Run by KostíkaIrenka at 2014-12-20 20:21:26
Microsoft Windows 8
System drive C: has 587 GB (84%) free of 698 GB
Total RAM: 6024 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:21:30, on 20.12.2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17183)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\KostíkaIrenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP HD Webcam Driver_Monitor] C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe
O4 - HKLM\..\Run: [EaseUS EPM Tray Agent] "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1419099504
O4 - Global Startup: TotalMedia Server.lnk = C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe
O8 - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{CBBE15DC-9B68-4E3C-A57F-BA66AC6B715E}: NameServer = 93.153.117.1 93.153.117.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{D4230377-09F5-4C77-B28E-C1B46E4BB7AF}: NameServer = 93.153.117.1 93.153.117.33
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: CyberLink Product - 2012/09/18 15:03:40 (CLKMSVC10_38F51D56) - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS64.exe
O23 - Service: @C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem31.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10129 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WinArchiver Service - Unknown owner - C:\Program Files\WinArchiver\WAService.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17220 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\WinArchiver\WAService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
dashost.exe {08da7478-bb21-4db7-a772e392dab4eeb9}
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskhostex.exe
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\SysWOW64\svchost.exe -k MbnExt
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d9890361-84cb-4634-ab30-f45378875794 -SystemEventPortName:HostProcess-f5ab060a-62b3-474a-aaad-6904f5623d25 -IoCancelEventPortName:HostProcess-b9da74dd-cb2d-40a4-a33d-8717656ff502 -NonStateChangingEventPortName:HostProcess-77073ceb-8b9f-45e9-bff1-be0e5ad6a580 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:9823908b-4026-4f17-905a-921798edb2f3 -DeviceGroupId:
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6f6596cd-64c2-4edd-91e3-120425e7e69a -SystemEventPortName:HostProcess-ed897a23-fc5c-46a2-adc7-e3115ea8dda5 -IoCancelEventPortName:HostProcess-4812f753-214c-4130-b41a-b8f146b32ff6 -NonStateChangingEventPortName:HostProcess-1842a4fc-cfa2-4a46-8632-0f21c5e6bb58 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2ff410b9-46ee-4e0b-ad58-a59da8c7e986 -DeviceGroupId:WudfDefaultDevicePool
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe" Restart Start EEU 52 avastui.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4328.0.10975689\861396899" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,38 --gpu-vendor-id=0x1002 --gpu-device-id=0x0000 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.982.6.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.2.833181037\390022543" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.3.1215047105\967015274" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.4.1136919935\342373633" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.6.1471911974\107242980" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.7.1202045051\1624408049" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.8.118933187\224990897" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.9.1281275926\2023750869" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.10.1936829130\1354583392" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.11.1370203569\573094601" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.12.2017714943\1580425532" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.13.639347103\1037082688" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.14.175788681\2004717122" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.15.1528767760\398474893" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.16.121847959\1178916642" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.17.1999289964\157873178" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group11 pct:1b stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLsControl/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="4328.21.871382561\516551407" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 572 576 584 65536 580

"C:\Users\KostíkaIrenka\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\HPCeeScheduleForKostíkaIrenka.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForKostíkaIrenka (null)

=========Mozilla firefox=========

ProfilePath - C:\Users\KostíkaIrenka\AppData\Roaming\Mozilla\Firefox\Profiles\0wc8385o.default

prefs.js - "browser.startup.homepage" - "https://www.google.com/?trackid=sp-006"
prefs.js - "keyword.URL" - "https://www.google.com/search/?trackid=sp-006"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.240 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_240.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\digitalpersona.com/ChromeDPAgent]
"Description"=
"Path"=C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.240 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_240.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

C:\Users\KostíkaIrenka\AppData\Roaming\Mozilla\Firefox\Profiles\0wc8385o.default\searchplugins\
google-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-11-12 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-16 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\MICROS~1\Office15\GROOVEEX.DLL [2014-11-12 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-10-22 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-11-16 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-16 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2013-05-08 587104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-11-12 1729744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-11-16 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-08-23 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-08-23 398656]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-08-23 441152]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-08-06 1425408]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-12-16 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2014-03-31 4272840]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=1419099504 []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2012-07-17 684064]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-08-06 642216]
"HP HD Webcam Driver_Monitor"=C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe [2012-07-26 303480]
"CLMLServer_For_P2G8"=c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08 111120]
"CLVirtualDrive"=c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2012-07-24 491120]
"RemoteControl10"=c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"BDRegion"=c:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2012-08-04 78352]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-12-13 5227112]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26 271744]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2013-10-16 337184]
""= []
"EaseUS EPM tray"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe []
"EaseUS EPM Tray Agent"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe [2014-11-18 255072]
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-09-19 371976]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TotalMedia Server.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-08-23 441856]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-20 20:21:26 ----D---- C:\rsit
2014-12-20 19:14:41 ----D---- C:\AdwCleaner
2014-12-20 19:11:11 ----D---- C:\ProgramData\Ralink Bluetooth Stack
2014-12-20 19:11:08 ----D---- C:\Program Files (x86)\Ralink Corporation
2014-12-20 19:10:50 ----SHD---- C:\Config.Msi
2014-12-20 01:19:28 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\mkvtoolnix
2014-12-20 01:18:47 ----D---- C:\Program Files\MKVToolNix
2014-12-16 19:52:10 ----A---- C:\Windows\system32\NotificationUI.exe
2014-12-16 19:52:10 ----A---- C:\Windows\system32\AutoUpdate.exe
2014-12-16 18:53:56 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-16 18:53:56 ----A---- C:\Windows\system32\vbscript.dll
2014-12-13 21:43:16 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-12-13 21:43:15 ----A---- C:\Windows\system32\localspl.dll
2014-12-13 21:43:14 ----A---- C:\Windows\system32\win32spl.dll
2014-12-13 21:43:14 ----A---- C:\Windows\system32\services.exe
2014-12-13 21:43:14 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2014-12-13 21:42:58 ----A---- C:\Windows\system32\wuaueng.dll
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuwebv.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wudriver.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wucltux.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuauclt.exe
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuapp.exe
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuapi.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\storewuauth.dll
2014-12-13 21:17:18 ----D---- C:\Windows\system32\appraiser
2014-12-13 18:01:14 ----A---- C:\Windows\system32\appraiser.dll
2014-12-13 18:01:14 ----A---- C:\Windows\system32\aepic.dll
2014-12-13 18:01:14 ----A---- C:\Windows\system32\aeinv.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\invagent.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\generaltel.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\devinv.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\aepdu.dll
2014-12-13 18:00:08 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-12-13 18:00:08 ----A---- C:\Windows\system32\crypt32.dll
2014-12-12 16:43:17 ----A---- C:\Windows\system32\mshtml.dll
2014-12-12 16:43:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-12 16:43:09 ----A---- C:\Windows\system32\ieframe.dll
2014-12-12 16:43:08 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-12 16:43:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-12 16:43:07 ----A---- C:\Windows\system32\iertutil.dll
2014-12-12 16:43:06 ----A---- C:\Windows\system32\wininet.dll
2014-12-12 16:43:06 ----A---- C:\Windows\system32\urlmon.dll
2014-12-12 16:43:05 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-12 16:43:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-12 16:43:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-12 16:43:03 ----A---- C:\Windows\system32\uxtheme.dll
2014-12-12 16:43:03 ----A---- C:\Windows\system32\jscript.dll
2014-12-12 16:43:02 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-12 16:43:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-12 16:43:02 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-12-12 16:43:02 ----A---- C:\Windows\system32\iesysprep.dll
2014-12-12 16:43:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-12 16:43:00 ----A---- C:\Windows\system32\jscript9.dll
2014-12-12 16:42:59 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-12 16:42:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-12-12 16:42:57 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-12-12 16:42:57 ----A---- C:\Windows\system32\msrating.dll
2014-12-12 16:42:57 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-12 16:42:57 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\UXInit.dll
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-12 16:42:56 ----A---- C:\Windows\system32\UXInit.dll
2014-12-12 16:42:56 ----A---- C:\Windows\system32\iernonce.dll
2014-12-12 16:42:56 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-12 16:42:55 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-12-12 16:42:55 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-12 16:42:54 ----A---- C:\Windows\SYSWOW64\uxtheme.dll
2014-12-12 16:42:54 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-12-12 16:42:54 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-12-12 16:42:54 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-12 16:42:54 ----A---- C:\Windows\system32\iesetup.dll
2014-12-12 16:38:53 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-12 16:38:53 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-11 09:07:36 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\AnyMP4 Studio
2014-12-11 09:07:36 ----D---- C:\Program Files (x86)\AnyMP4 Studio
2014-12-10 14:18:32 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\HDX4 GmbH
2014-12-09 09:17:49 ----D---- C:\ProgramData\T-Mobile
2014-12-09 09:14:28 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\EncryptStick
2014-12-08 19:22:37 ----D---- C:\Windows\SYSWOW64\Adobe
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\VBAR332.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSRD2X35.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSJTER35.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSJINT35.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSJET35.DLL
2014-12-06 21:26:36 ----D---- C:\Program Files (x86)\DogSettings
2014-12-06 21:19:54 ----A---- C:\Windows\system32\aswBoot.exe
2014-12-05 19:13:16 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-12-05 19:13:05 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-05 19:13:05 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-12-05 19:13:05 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-12-05 19:13:05 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-12-05 18:18:43 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-11-29 14:29:04 ----A---- C:\Windows\SYSWOW64\vsstrace.dll
2014-11-29 14:29:04 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2014-11-29 14:29:04 ----A---- C:\Windows\system32\vsstrace.dll
2014-11-29 14:29:03 ----A---- C:\Windows\system32\VSSVC.exe
2014-11-29 14:29:03 ----A---- C:\Windows\system32\vssapi.dll
2014-11-23 13:30:02 ----D---- C:\Program Files\trend micro
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\setupempdrv03.exe
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\EuGdiDrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\EuEpmGdi.dll
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\epmntdrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\BootMan.exe
2014-11-22 22:05:15 ----A---- C:\Windows\system32\setupempdrvx64.exe
2014-11-22 22:05:15 ----A---- C:\Windows\system32\EuGdiDrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\system32\EuEpmGdi.dll
2014-11-22 22:05:15 ----A---- C:\Windows\system32\epmntdrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\system32\BootMan.exe
2014-11-22 22:05:06 ----D---- C:\Program Files (x86)\EaseUS
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\zh-Hant
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\zh-Hans
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\ru
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\ko
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\ja
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\it
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\fr
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\es
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\de
2014-11-22 15:06:48 ----D---- C:\Windows\system32\zh-Hant
2014-11-22 15:06:48 ----D---- C:\Windows\system32\zh-Hans
2014-11-22 15:06:48 ----D---- C:\Windows\system32\ru
2014-11-22 15:06:48 ----D---- C:\Windows\system32\ko
2014-11-22 15:06:48 ----D---- C:\Windows\system32\ja
2014-11-22 15:06:48 ----D---- C:\Windows\system32\it
2014-11-22 15:06:48 ----D---- C:\Windows\system32\fr
2014-11-22 15:06:47 ----D---- C:\Windows\system32\es
2014-11-22 15:06:47 ----D---- C:\Windows\system32\de
2014-11-22 15:06:44 ----D---- C:\Windows\DPDrv
2014-11-22 14:16:04 ----A---- C:\Windows\SYSWOW64\pthreadGC2.dll
2014-11-22 14:16:02 ----D---- C:\Program Files (x86)\AoA Audio Extractor
2014-11-22 13:26:22 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Macrovision
2014-11-22 13:26:16 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\FLEXnet
2014-11-22 12:27:15 ----SHD---- C:\Recovery

======List of files/folders modified in the last 1 month======

2014-12-20 20:05:40 ----D---- C:\Windows\Temp
2014-12-20 20:00:01 ----D---- C:\Windows\system32\sru
2014-12-20 19:53:18 ----D---- C:\Windows\Prefetch
2014-12-20 19:23:52 ----RD---- C:\Windows\System32
2014-12-20 19:23:52 ----D---- C:\Windows\Inf
2014-12-20 19:23:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-20 19:21:47 ----D---- C:\Windows\Tasks
2014-12-20 19:21:47 ----D---- C:\Windows\system32\Tasks
2014-12-20 19:20:01 ----A---- C:\Windows\SYSWOW64\log.txt
2014-12-20 19:18:02 ----D---- C:\ProgramData\PDFC
2014-12-20 19:17:22 ----D---- C:\Windows\system32\Drivers
2014-12-20 19:17:22 ----A---- C:\Windows\SYSWOW64\bscs.ini
2014-12-20 19:16:12 ----D---- C:\Windows\system32\catroot
2014-12-20 19:11:48 ----SHD---- C:\Windows\Installer
2014-12-20 19:11:25 ----D---- C:\Windows\system32\DriverStore
2014-12-20 19:11:13 ----D---- C:\Windows\SYSWOW64\drivers
2014-12-20 19:11:13 ----D---- C:\Windows\SysWOW64
2014-12-20 19:11:11 ----HD---- C:\ProgramData
2014-12-20 19:11:08 ----RD---- C:\Program Files (x86)
2014-12-20 19:10:37 ----D---- C:\Windows
2014-12-20 19:05:35 ----SHD---- C:\System Volume Information
2014-12-20 18:57:11 ----D---- C:\swsetup
2014-12-20 18:29:58 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\uTorrent
2014-12-20 17:53:54 ----D---- C:\Windows\system32\config
2014-12-20 17:42:56 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-12-20 16:46:33 ----D---- C:\Windows\rescache
2014-12-20 16:21:27 ----D---- C:\Windows\Microsoft.NET
2014-12-20 16:19:31 ----D---- C:\Windows\debug
2014-12-20 01:18:47 ----RD---- C:\Program Files
2014-12-20 01:04:08 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\vlc
2014-12-19 19:24:18 ----D---- C:\ZÁLOHA
2014-12-18 09:15:00 ----D---- C:\Program Files (x86)\Google
2014-12-16 19:52:23 ----D---- C:\Windows\CbsTemp
2014-12-16 19:52:19 ----D---- C:\Windows\WinSxS
2014-12-16 19:51:33 ----D---- C:\Windows\system32\catroot2
2014-12-13 21:45:03 ----D---- C:\Windows\system32\sk-SK
2014-12-13 21:45:03 ----D---- C:\Windows\system32\en-US
2014-12-13 21:17:20 ----SD---- C:\Windows\system32\CompatTel
2014-12-13 21:17:20 ----D---- C:\Windows\AppCompat
2014-12-13 21:17:17 ----SD---- C:\ProgramData\Microsoft
2014-12-13 21:17:16 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-12-13 21:17:16 ----D---- C:\Windows\SYSWOW64\en-US
2014-12-13 19:27:36 ----RSD---- C:\Windows\assembly
2014-12-13 19:27:15 ----D---- C:\ProgramData\Microsoft Help
2014-12-13 19:25:16 ----D---- C:\Windows\system32\MRT
2014-12-13 19:17:45 ----A---- C:\Windows\system32\MRT.exe
2014-12-13 00:52:03 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-13 00:51:58 ----D---- C:\Program Files\Internet Explorer
2014-12-12 19:05:30 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Skype
2014-12-12 18:29:16 ----D---- C:\Program Files (x86)\DCC E2 Edit 2.96
2014-12-10 14:16:56 ----D---- C:\Program Files (x86)\Common Files
2014-12-08 20:31:14 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\YouTube Downloader
2014-12-06 22:25:04 ----D---- C:\Program Files (x86)\TeamViewer
2014-12-06 22:22:03 ----D---- C:\Windows\system32\drivers\UMDF
2014-12-06 22:19:09 ----D---- C:\Program Files\Hewlett-Packard
2014-12-06 22:19:09 ----D---- C:\Program Files (x86)\Hewlett-Packard
2014-12-06 21:42:33 ----D---- C:\Program Files (x86)\CyberLink
2014-12-06 21:15:51 ----D---- C:\Windows\system32\wbem
2014-12-06 21:14:36 ----RSD---- C:\Windows\Fonts
2014-12-06 21:14:31 ----D---- C:\Windows\system32\CodeIntegrity
2014-12-06 21:05:12 ----DC---- C:\Windows\system32\DRVSTORE
2014-12-06 21:05:10 ----D---- C:\Windows\system32\AutoUpdateLicense
2014-12-06 21:05:10 ----D---- C:\Windows\security
2014-12-06 21:05:02 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\GHISLER
2014-12-06 21:04:42 ----D---- C:\Program Files (x86)\Realtek
2014-12-06 21:04:41 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-06 21:04:29 ----D---- C:\Program Files (x86)\DCC E2 Edit 1.50
2014-12-06 20:52:02 ----D---- C:\Windows\registration
2014-12-06 20:43:46 ----RD---- C:\Users
2014-12-06 20:43:44 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Notepad++
2014-12-06 20:43:18 ----D---- C:\ProgramData\install_clap
2014-12-06 20:42:46 ----D---- C:\Program Files (x86)\Evernote
2014-12-05 22:44:43 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\CyberLink
2014-12-05 19:18:14 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-05 19:11:36 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\BSplayer PRO
2014-12-05 19:10:59 ----D---- C:\Program Files (x86)\Webteh
2014-12-05 18:34:35 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Ashampoo
2014-12-05 18:33:25 ----D---- C:\Program Files (x86)\Ashampoo
2014-12-05 17:57:05 ----RD---- C:\Program Files (x86)\Skype
2014-12-05 17:56:56 ----D---- C:\ProgramData\Skype
2014-12-01 16:15:03 ----D---- C:\Windows\AUInstallAgent
2014-11-29 14:52:00 ----HD---- C:\Program Files\WindowsApps
2014-11-29 00:27:22 ----D---- C:\dvbdream
2014-11-28 22:17:09 ----SD---- C:\Users\KostíkaIrenka\AppData\Roaming\Microsoft
2014-11-26 22:11:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-23 00:56:54 ----D---- C:\Windows\system32\wdi
2014-11-22 20:03:54 ----D---- C:\Windows\Panther
2014-11-22 15:21:21 ----D---- C:\Windows\PolicyDefinitions
2014-11-22 15:07:00 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-11-22 15:07:00 ----D---- C:\Windows\SYSWOW64\cs
2014-11-22 15:07:00 ----D---- C:\Windows\system32\pt-BR
2014-11-22 15:07:00 ----D---- C:\Windows\system32\cs
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\WCN
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\sysprep
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\SMI
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\SDA
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\MUI
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\LogFiles
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\drivers\UMDF
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\catroot
2014-11-22 13:07:49 ----D---- C:\Windows\system32\WCN
2014-11-22 13:07:49 ----D---- C:\Windows\system32\Sysprep
2014-11-22 13:07:49 ----D---- C:\Windows\system32\spool
2014-11-22 13:07:21 ----D---- C:\Windows\system32\NDF
2014-11-22 13:07:21 ----D---- C:\Windows\system32\MUI
2014-11-22 13:07:19 ----D---- C:\Windows\sk
2014-11-22 13:07:19 ----D---- C:\Windows\ShellNew
2014-11-22 13:07:16 ----D---- C:\Windows\Help
2014-11-22 13:07:15 ----D---- C:\Windows\ehome
2014-11-22 13:07:15 ----D---- C:\Windows\DigitalLocker
2014-11-22 13:07:15 ----D---- C:\Windows\cs
2014-11-22 13:07:15 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-11-22 13:07:15 ----D---- C:\ProgramData\PRICache
2014-11-22 13:07:11 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-11-22 13:07:11 ----D---- C:\Program Files (x86)\Windows Media Player
2014-11-22 13:07:11 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-11-22 13:07:10 ----SHD---- C:\Program Files\Windows Sidebar
2014-11-22 13:07:10 ----D---- C:\Program Files\Windows Media Player
2014-11-22 13:07:10 ----D---- C:\Program Files (x86)\Intel
2014-11-22 13:07:09 ----D---- C:\Windows\system32\Recovery
2014-11-22 13:07:09 ----D---- C:\Windows\SoftwareDistribution
2014-11-22 13:07:09 ----D---- C:\Program Files\Microsoft.NET
2014-11-22 13:07:09 ----D---- C:\Program Files\Intel
2014-11-22 13:07:09 ----D---- C:\Program Files\Common Files\System
2014-11-22 13:07:09 ----D---- C:\Program Files\Common Files\microsoft shared
2014-11-22 13:07:09 ----D---- C:\Program Files\Common Files
2014-11-22 10:27:00 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\hpqlog
2014-11-22 10:01:40 ----D---- C:\ProgramData\HPQLOG

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem19.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\Windows\System32\drivers\amdkmpfd.sys [2012-07-09 35496]
R0 aswNdisFlt;@oem17.inf,%AfwDescriptionFree%;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-11-16 449936]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-16 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-16 267632]
R0 hpdskflt;@oem31.inf,%service_desc%;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2013-07-30 31040]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2012-07-31 645952]
R1 ArcSec;archlp; C:\Windows\system32\drivers\ArcSec.sys [2010-09-21 312184]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-11-16 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-16 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-21 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-16 436624]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536]
R1 Eve;@oem66.inf,%EVE_Desc%;EVE Protocol Driver; C:\Windows\system32\DRIVERS\eve.sys [2014-04-10 41304]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-16 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-16 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-16 116728]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2014-04-18 36600]
R3 Accelerometer;@oem31.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2013-07-30 43328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-08-01 10280960]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-08-01 368640]
R3 BtAudioBusSrv;@oem14.inf,%SvcDesc%;Ralink Bluetooth Audio Bus Service; C:\Windows\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 dvdfab;dvdfab; C:\Windows\system32\drivers\dvdfab.sys [2011-08-15 79232]
R3 HpqKbFiltr;@oem5.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\Windows\System32\drivers\HpqKbFiltr.sys [2012-08-27 26504]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\System32\drivers\ew_jubusenum.sys [2013-03-04 91648]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2012-08-23 9000256]
R3 MEIx64;@oem9.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 netr28x;@oem28.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-12-04 2505904]
R3 RTL8168;@oem6.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2012-06-13 683664]
R3 SensorsServiceDriver;@sensorsservicedriver.inf,%WudfSensorsServiceDriverDisplayName%;UMDF Reflector service for SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
R3 SPUVCbv;@oem22.inf,%SPUVCb.ServiceName%;SPUVCb Driver Service; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2012-08-03 1062008]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10329; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-08-06 540160]
R3 SynTP;@oem70.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2014-11-17 549104]
S1 ArcCtrl;ArcCtrl; C:\Windows\system32\drivers\ArcCtrl.sys []
S3 BthEnum;@tdibth.inf,%BthEnum.DisplayName%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2013-01-09 51712]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\Windows\System32\Drivers\BtL2caScoIf.sys [2012-07-19 56904]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [2012-10-02 48608]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 epmntdrv;epmntdrv; \??\C:\Windows\syswow64\epmntdrv.sys [2014-11-18 15968]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\syswow64\EuGdiDrv.sys [2014-11-18 10208]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2013-01-25 109568]
S3 ew_usbenumfilter;@oem43.inf,%busupper.SVCDESC%;huawei_CompositeFilter; C:\Windows\System32\drivers\ew_usbenumfilter.sys [2012-12-22 14976]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys [2013-03-04 110592]
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\System32\drivers\ew_juextctrl.sys [2013-03-04 30720]
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [2013-06-29 246272]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-08-23 9000256]
S3 JMCR;JMCR; C:\Windows\System32\drivers\jmcr.sys [2014-11-19 176880]
S3 massfilter;Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [2011-04-13 11776]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 64216]
S3 NETwNe64;@netwne64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNe64.sys [2012-06-02 11400192]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2013-03-01 156672]
S3 rtbth;@oem29.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\Windows\System32\drivers\rtbth.sys []
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2012-08-15 41272]
S3 SmbDrvI;SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [2012-08-15 43832]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-05 210560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-08-01 239616]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-16 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-11-16 104416]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-09-26 1612552]
R2 DpHost;@C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2012-10-26 488824]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-10-16 681760]
R2 hpsrv;@oem31.inf,%hpservice_desc%;HP Service; C:\Windows\system32\Hpservice.exe [2013-07-30 33600]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-20 634632]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-19 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-19 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-19 277824]
R2 MbnExt;Mobile Broadband Extension Service; C:\Windows\system32\svchost.exe [2012-09-20 29696]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2012-07-17 1134624]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10129; C:\Program Files\IDT\WDM\STacSV64.exe [2012-08-06 321536]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-19 365376]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2012-07-19 2714232]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-09-19 146184]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-05-13 1129760]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2012/09/18 15:03:40; c:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2012-08-04 243728]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-18 107912]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-06 267440]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-12 51648]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-08-23 276288]
S3 DfSdkS;Defragmentation-Service; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS64.exe [2009-08-24 544768]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2012-08-01 477088]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-18 107912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-05 114800]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2013-06-01 37632]
S4 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S4 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2012-11-27 29952]

-----------------EOF-----------------

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files (x86)\Skype\Toolbars
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Kostík a Irenočka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjndloejlcbpkholmagjbddfkjmmploh


:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}]
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

[kostik123456]

rudy
tohleto----› C:\Program Files (x86)\Skype\Toolbars
jsem minule vymazal a nešlo mi ve 3D ploše nic,to tam radši ponechám neboť i ve 3D ploše je Skype.
Jak mám teťka skopírovat co třeba aby mi to ve 3D ploše šlo dobře?

[Rudy]

Tohle je jen lišta do prohlížče. Jste vyjímka, která ji používá. Nový skript:

:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Kostík a Irenočka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjndloejlcbpkholmagjbddfkjmmploh


:reg
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}]
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}

:commands
[Purity]
[Emptytemp]
[Emptyflash]

[kostik123456]

Rudy

Tady je nový log po smazání OTM.3D plocha šlape.Potom bych ješte skusil sken AdwCleanerem zda to je OK.

Logfile of random's system information tool 1.10 (written by random/random)
Run by KostíkaIrenka at 2014-12-20 21:45:37
Microsoft Windows 8
System drive C: has 601 GB (86%) free of 698 GB
Total RAM: 6024 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:45:39, on 20.12.2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17183)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files\trend micro\KostíkaIrenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP HD Webcam Driver_Monitor] C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe
O4 - HKLM\..\Run: [EaseUS EPM Tray Agent] "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1419108184
O4 - Global Startup: TotalMedia Server.lnk = C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe
O8 - Extra context menu item: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{CBBE15DC-9B68-4E3C-A57F-BA66AC6B715E}: NameServer = 93.153.117.1 93.153.117.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{D4230377-09F5-4C77-B28E-C1B46E4BB7AF}: NameServer = 93.153.117.1 93.153.117.33
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: CyberLink Product - 2012/09/18 15:03:40 (CLKMSVC10_38F51D56) - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS64.exe
O23 - Service: @C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem31.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10129 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WinArchiver Service - Unknown owner - C:\Program Files\WinArchiver\WAService.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16000 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files\WinArchiver\WAService.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
dashost.exe {08da7478-bb21-4db7-a772e392dab4eeb9}
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\SysWOW64\svchost.exe -k MbnExt
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-d9890361-84cb-4634-ab30-f45378875794 -SystemEventPortName:HostProcess-f5ab060a-62b3-474a-aaad-6904f5623d25 -IoCancelEventPortName:HostProcess-b9da74dd-cb2d-40a4-a33d-8717656ff502 -NonStateChangingEventPortName:HostProcess-77073ceb-8b9f-45e9-bff1-be0e5ad6a580 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:9823908b-4026-4f17-905a-921798edb2f3 -DeviceGroupId:
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6f6596cd-64c2-4edd-91e3-120425e7e69a -SystemEventPortName:HostProcess-ed897a23-fc5c-46a2-adc7-e3115ea8dda5 -IoCancelEventPortName:HostProcess-4812f753-214c-4130-b41a-b8f146b32ff6 -NonStateChangingEventPortName:HostProcess-1842a4fc-cfa2-4a46-8632-0f21c5e6bb58 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:2ff410b9-46ee-4e0b-ad58-a59da8c7e986 -DeviceGroupId:WudfDefaultDevicePool
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\system32\svchost.exe -k GPSvcGroup
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
"dwm.exe"
atieclxx
taskhostex.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
taskeng.exe {2D3D987E-4056-405A-8D18-7088C1032624}
"C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Windows\System32\igfxtray.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
"C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe"
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe" Restart Start EEU 52 avastui.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
taskeng.exe {25A776FD-6438-423F-9A03-016EF799607D}
"C:\Program Files\Microsoft Office\Office15\MsoSync.exe"
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\KostíkaIrenka\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\HPCeeScheduleForKostíkaIrenka.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForKostíkaIrenka (null)

=========Mozilla firefox=========

ProfilePath - C:\Users\KostíkaIrenka\AppData\Roaming\Mozilla\Firefox\Profiles\0wc8385o.default

prefs.js - "browser.startup.homepage" - "https://www.google.com/?trackid=sp-006"
prefs.js - "keyword.URL" - "https://www.google.com/search/?trackid=sp-006"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.240 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_240.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\digitalpersona.com/ChromeDPAgent]
"Description"=
"Path"=C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.240 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_240.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
nppdf32.dll

C:\Users\KostíkaIrenka\AppData\Roaming\Mozilla\Firefox\Profiles\0wc8385o.default\searchplugins\
google-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-11-12 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-16 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\MICROS~1\Office15\GROOVEEX.DLL [2014-11-12 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-10-22 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-11-16 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-16 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{92EF2EAD-A7CE-4424-B0DB-499CF856608E}]
Evernote extension - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2013-05-08 587104]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-11-12 1729744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-11-16 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-08-23 170304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-08-23 398656]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-08-23 441152]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-08-06 1425408]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-12-16 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2014-03-31 4272840]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=1419108184 []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2012-07-17 684064]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-08-06 642216]
"HP HD Webcam Driver_Monitor"=C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe [2012-07-26 303480]
"CLMLServer_For_P2G8"=c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08 111120]
"CLVirtualDrive"=c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [2012-07-24 491120]
"RemoteControl10"=c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"BDRegion"=c:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2012-08-04 78352]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-12-13 5227112]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2013-10-16 337184]
""= []
"EaseUS EPM tray"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe []
"EaseUS EPM Tray Agent"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe [2014-11-18 255072]
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-09-19 371976]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
TotalMedia Server.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-08-23 441856]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-20 21:45:37 ----D---- C:\rsit
2014-12-20 19:11:11 ----D---- C:\ProgramData\Ralink Bluetooth Stack
2014-12-20 19:11:08 ----D---- C:\Program Files (x86)\Ralink Corporation
2014-12-20 19:10:50 ----SHD---- C:\Config.Msi
2014-12-20 01:19:28 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\mkvtoolnix
2014-12-20 01:18:47 ----D---- C:\Program Files\MKVToolNix
2014-12-16 19:52:10 ----A---- C:\Windows\system32\NotificationUI.exe
2014-12-16 19:52:10 ----A---- C:\Windows\system32\AutoUpdate.exe
2014-12-16 18:53:56 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-16 18:53:56 ----A---- C:\Windows\system32\vbscript.dll
2014-12-13 21:43:16 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-12-13 21:43:15 ----A---- C:\Windows\system32\localspl.dll
2014-12-13 21:43:14 ----A---- C:\Windows\system32\win32spl.dll
2014-12-13 21:43:14 ----A---- C:\Windows\system32\services.exe
2014-12-13 21:43:14 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2014-12-13 21:42:58 ----A---- C:\Windows\system32\wuaueng.dll
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-12-13 21:42:57 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuwebv.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wudriver.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wucltux.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuauclt.exe
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuapp.exe
2014-12-13 21:42:57 ----A---- C:\Windows\system32\wuapi.dll
2014-12-13 21:42:57 ----A---- C:\Windows\system32\storewuauth.dll
2014-12-13 21:17:18 ----D---- C:\Windows\system32\appraiser
2014-12-13 18:01:14 ----A---- C:\Windows\system32\appraiser.dll
2014-12-13 18:01:14 ----A---- C:\Windows\system32\aepic.dll
2014-12-13 18:01:14 ----A---- C:\Windows\system32\aeinv.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\invagent.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\generaltel.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\devinv.dll
2014-12-13 18:01:13 ----A---- C:\Windows\system32\aepdu.dll
2014-12-13 18:00:08 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-12-13 18:00:08 ----A---- C:\Windows\system32\crypt32.dll
2014-12-12 16:43:17 ----A---- C:\Windows\system32\mshtml.dll
2014-12-12 16:43:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-12 16:43:09 ----A---- C:\Windows\system32\ieframe.dll
2014-12-12 16:43:08 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-12 16:43:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-12 16:43:07 ----A---- C:\Windows\system32\iertutil.dll
2014-12-12 16:43:06 ----A---- C:\Windows\system32\wininet.dll
2014-12-12 16:43:06 ----A---- C:\Windows\system32\urlmon.dll
2014-12-12 16:43:05 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-12 16:43:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-12 16:43:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-12 16:43:03 ----A---- C:\Windows\system32\uxtheme.dll
2014-12-12 16:43:03 ----A---- C:\Windows\system32\jscript.dll
2014-12-12 16:43:02 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-12 16:43:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-12 16:43:02 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-12-12 16:43:02 ----A---- C:\Windows\system32\iesysprep.dll
2014-12-12 16:43:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-12 16:43:00 ----A---- C:\Windows\system32\jscript9.dll
2014-12-12 16:42:59 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-12 16:42:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-12-12 16:42:57 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-12-12 16:42:57 ----A---- C:\Windows\system32\msrating.dll
2014-12-12 16:42:57 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-12 16:42:57 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\UXInit.dll
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-12-12 16:42:56 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-12 16:42:56 ----A---- C:\Windows\system32\UXInit.dll
2014-12-12 16:42:56 ----A---- C:\Windows\system32\iernonce.dll
2014-12-12 16:42:56 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-12 16:42:55 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-12-12 16:42:55 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-12 16:42:54 ----A---- C:\Windows\SYSWOW64\uxtheme.dll
2014-12-12 16:42:54 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-12-12 16:42:54 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-12-12 16:42:54 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-12 16:42:54 ----A---- C:\Windows\system32\iesetup.dll
2014-12-12 16:38:53 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-12 16:38:53 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-11 09:07:36 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\AnyMP4 Studio
2014-12-11 09:07:36 ----D---- C:\Program Files (x86)\AnyMP4 Studio
2014-12-10 14:18:32 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\HDX4 GmbH
2014-12-09 09:17:49 ----D---- C:\ProgramData\T-Mobile
2014-12-09 09:14:28 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\EncryptStick
2014-12-08 19:22:37 ----D---- C:\Windows\SYSWOW64\Adobe
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\VBAR332.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSRD2X35.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSJTER35.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSJINT35.DLL
2014-12-06 21:41:19 ----A---- C:\Windows\SYSWOW64\MSJET35.DLL
2014-12-06 21:26:36 ----D---- C:\Program Files (x86)\DogSettings
2014-12-06 21:19:54 ----A---- C:\Windows\system32\aswBoot.exe
2014-12-05 19:13:16 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-12-05 19:13:05 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-05 19:13:05 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-12-05 19:13:05 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-12-05 19:13:05 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-12-05 18:18:43 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-11-29 14:29:04 ----A---- C:\Windows\SYSWOW64\vsstrace.dll
2014-11-29 14:29:04 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2014-11-29 14:29:04 ----A---- C:\Windows\system32\vsstrace.dll
2014-11-29 14:29:03 ----A---- C:\Windows\system32\VSSVC.exe
2014-11-29 14:29:03 ----A---- C:\Windows\system32\vssapi.dll
2014-11-23 13:30:02 ----D---- C:\Program Files\trend micro
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\setupempdrv03.exe
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\EuGdiDrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\EuEpmGdi.dll
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\epmntdrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\SYSWOW64\BootMan.exe
2014-11-22 22:05:15 ----A---- C:\Windows\system32\setupempdrvx64.exe
2014-11-22 22:05:15 ----A---- C:\Windows\system32\EuGdiDrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\system32\EuEpmGdi.dll
2014-11-22 22:05:15 ----A---- C:\Windows\system32\epmntdrv.sys
2014-11-22 22:05:15 ----A---- C:\Windows\system32\BootMan.exe
2014-11-22 22:05:06 ----D---- C:\Program Files (x86)\EaseUS
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\zh-Hant
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\zh-Hans
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\ru
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\ko
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\ja
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\it
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\fr
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\es
2014-11-22 15:06:48 ----D---- C:\Windows\SYSWOW64\de
2014-11-22 15:06:48 ----D---- C:\Windows\system32\zh-Hant
2014-11-22 15:06:48 ----D---- C:\Windows\system32\zh-Hans
2014-11-22 15:06:48 ----D---- C:\Windows\system32\ru
2014-11-22 15:06:48 ----D---- C:\Windows\system32\ko
2014-11-22 15:06:48 ----D---- C:\Windows\system32\ja
2014-11-22 15:06:48 ----D---- C:\Windows\system32\it
2014-11-22 15:06:48 ----D---- C:\Windows\system32\fr
2014-11-22 15:06:47 ----D---- C:\Windows\system32\es
2014-11-22 15:06:47 ----D---- C:\Windows\system32\de
2014-11-22 15:06:44 ----D---- C:\Windows\DPDrv
2014-11-22 14:16:04 ----A---- C:\Windows\SYSWOW64\pthreadGC2.dll
2014-11-22 14:16:02 ----D---- C:\Program Files (x86)\AoA Audio Extractor
2014-11-22 13:26:22 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Macrovision
2014-11-22 13:26:16 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\FLEXnet
2014-11-22 12:27:15 ----SHD---- C:\Recovery

======List of files/folders modified in the last 1 month======

2014-12-20 21:43:58 ----D---- C:\Windows\Prefetch
2014-12-20 21:41:45 ----D---- C:\Windows\Temp
2014-12-20 21:41:43 ----D---- C:\Windows\Tasks
2014-12-20 21:04:14 ----RD---- C:\Windows\System32
2014-12-20 21:04:14 ----D---- C:\Windows\Inf
2014-12-20 21:04:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-20 21:00:01 ----D---- C:\Windows\system32\sru
2014-12-20 19:21:47 ----D---- C:\Windows\system32\Tasks
2014-12-20 19:20:01 ----A---- C:\Windows\SYSWOW64\log.txt
2014-12-20 19:18:02 ----D---- C:\ProgramData\PDFC
2014-12-20 19:17:22 ----D---- C:\Windows\system32\Drivers
2014-12-20 19:17:22 ----A---- C:\Windows\SYSWOW64\bscs.ini
2014-12-20 19:16:12 ----D---- C:\Windows\system32\catroot
2014-12-20 19:11:48 ----SHD---- C:\Windows\Installer
2014-12-20 19:11:25 ----D---- C:\Windows\system32\DriverStore
2014-12-20 19:11:13 ----D---- C:\Windows\SYSWOW64\drivers
2014-12-20 19:11:13 ----D---- C:\Windows\SysWOW64
2014-12-20 19:11:11 ----HD---- C:\ProgramData
2014-12-20 19:11:08 ----RD---- C:\Program Files (x86)
2014-12-20 19:10:37 ----D---- C:\Windows
2014-12-20 19:05:35 ----SHD---- C:\System Volume Information
2014-12-20 18:57:11 ----D---- C:\swsetup
2014-12-20 18:29:58 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\uTorrent
2014-12-20 17:53:54 ----D---- C:\Windows\system32\config
2014-12-20 17:42:56 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-12-20 16:46:33 ----D---- C:\Windows\rescache
2014-12-20 16:21:27 ----D---- C:\Windows\Microsoft.NET
2014-12-20 16:19:31 ----D---- C:\Windows\debug
2014-12-20 01:18:47 ----RD---- C:\Program Files
2014-12-20 01:04:08 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\vlc
2014-12-19 19:24:18 ----D---- C:\ZÁLOHA
2014-12-18 09:15:00 ----D---- C:\Program Files (x86)\Google
2014-12-16 19:52:23 ----D---- C:\Windows\CbsTemp
2014-12-16 19:52:19 ----D---- C:\Windows\WinSxS
2014-12-16 19:51:33 ----D---- C:\Windows\system32\catroot2
2014-12-13 21:45:03 ----D---- C:\Windows\system32\sk-SK
2014-12-13 21:45:03 ----D---- C:\Windows\system32\en-US
2014-12-13 21:17:20 ----SD---- C:\Windows\system32\CompatTel
2014-12-13 21:17:20 ----D---- C:\Windows\AppCompat
2014-12-13 21:17:17 ----SD---- C:\ProgramData\Microsoft
2014-12-13 21:17:16 ----D---- C:\Windows\SYSWOW64\sk-SK
2014-12-13 21:17:16 ----D---- C:\Windows\SYSWOW64\en-US
2014-12-13 19:27:36 ----RSD---- C:\Windows\assembly
2014-12-13 19:27:15 ----D---- C:\ProgramData\Microsoft Help
2014-12-13 19:25:16 ----D---- C:\Windows\system32\MRT
2014-12-13 19:17:45 ----A---- C:\Windows\system32\MRT.exe
2014-12-13 00:52:03 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-13 00:51:58 ----D---- C:\Program Files\Internet Explorer
2014-12-12 19:05:30 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Skype
2014-12-12 18:29:16 ----D---- C:\Program Files (x86)\DCC E2 Edit 2.96
2014-12-10 14:16:56 ----D---- C:\Program Files (x86)\Common Files
2014-12-08 20:31:14 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\YouTube Downloader
2014-12-06 22:25:04 ----D---- C:\Program Files (x86)\TeamViewer
2014-12-06 22:22:03 ----D---- C:\Windows\system32\drivers\UMDF
2014-12-06 22:19:09 ----D---- C:\Program Files\Hewlett-Packard
2014-12-06 22:19:09 ----D---- C:\Program Files (x86)\Hewlett-Packard
2014-12-06 21:42:33 ----D---- C:\Program Files (x86)\CyberLink
2014-12-06 21:15:51 ----D---- C:\Windows\system32\wbem
2014-12-06 21:14:36 ----RSD---- C:\Windows\Fonts
2014-12-06 21:14:31 ----D---- C:\Windows\system32\CodeIntegrity
2014-12-06 21:05:12 ----DC---- C:\Windows\system32\DRVSTORE
2014-12-06 21:05:10 ----D---- C:\Windows\system32\AutoUpdateLicense
2014-12-06 21:05:10 ----D---- C:\Windows\security
2014-12-06 21:05:02 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\GHISLER
2014-12-06 21:04:42 ----D---- C:\Program Files (x86)\Realtek
2014-12-06 21:04:41 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-06 21:04:29 ----D---- C:\Program Files (x86)\DCC E2 Edit 1.50
2014-12-06 20:52:02 ----D---- C:\Windows\registration
2014-12-06 20:43:46 ----RD---- C:\Users
2014-12-06 20:43:44 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Notepad++
2014-12-06 20:43:18 ----D---- C:\ProgramData\install_clap
2014-12-06 20:42:46 ----D---- C:\Program Files (x86)\Evernote
2014-12-05 22:44:43 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\CyberLink
2014-12-05 19:18:14 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-05 19:11:36 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\BSplayer PRO
2014-12-05 19:10:59 ----D---- C:\Program Files (x86)\Webteh
2014-12-05 18:34:35 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\Ashampoo
2014-12-05 18:33:25 ----D---- C:\Program Files (x86)\Ashampoo
2014-12-05 17:57:05 ----RD---- C:\Program Files (x86)\Skype
2014-12-05 17:56:56 ----D---- C:\ProgramData\Skype
2014-12-01 16:15:03 ----D---- C:\Windows\AUInstallAgent
2014-11-29 14:52:00 ----HD---- C:\Program Files\WindowsApps
2014-11-29 00:27:22 ----D---- C:\dvbdream
2014-11-28 22:17:09 ----SD---- C:\Users\KostíkaIrenka\AppData\Roaming\Microsoft
2014-11-26 22:11:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-23 00:56:54 ----D---- C:\Windows\system32\wdi
2014-11-22 20:03:54 ----D---- C:\Windows\Panther
2014-11-22 15:21:21 ----D---- C:\Windows\PolicyDefinitions
2014-11-22 15:07:00 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-11-22 15:07:00 ----D---- C:\Windows\SYSWOW64\cs
2014-11-22 15:07:00 ----D---- C:\Windows\system32\pt-BR
2014-11-22 15:07:00 ----D---- C:\Windows\system32\cs
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\WCN
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\sysprep
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\SMI
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\SDA
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\MUI
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\LogFiles
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\drivers\UMDF
2014-11-22 13:07:50 ----D---- C:\Windows\SYSWOW64\catroot
2014-11-22 13:07:49 ----D---- C:\Windows\system32\WCN
2014-11-22 13:07:49 ----D---- C:\Windows\system32\Sysprep
2014-11-22 13:07:49 ----D---- C:\Windows\system32\spool
2014-11-22 13:07:21 ----D---- C:\Windows\system32\NDF
2014-11-22 13:07:21 ----D---- C:\Windows\system32\MUI
2014-11-22 13:07:19 ----D---- C:\Windows\sk
2014-11-22 13:07:19 ----D---- C:\Windows\ShellNew
2014-11-22 13:07:16 ----D---- C:\Windows\Help
2014-11-22 13:07:15 ----D---- C:\Windows\ehome
2014-11-22 13:07:15 ----D---- C:\Windows\DigitalLocker
2014-11-22 13:07:15 ----D---- C:\Windows\cs
2014-11-22 13:07:15 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-11-22 13:07:15 ----D---- C:\ProgramData\PRICache
2014-11-22 13:07:11 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-11-22 13:07:11 ----D---- C:\Program Files (x86)\Windows Media Player
2014-11-22 13:07:11 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-11-22 13:07:10 ----SHD---- C:\Program Files\Windows Sidebar
2014-11-22 13:07:10 ----D---- C:\Program Files\Windows Media Player
2014-11-22 13:07:10 ----D---- C:\Program Files (x86)\Intel
2014-11-22 13:07:09 ----D---- C:\Windows\system32\Recovery
2014-11-22 13:07:09 ----D---- C:\Windows\SoftwareDistribution
2014-11-22 13:07:09 ----D---- C:\Program Files\Microsoft.NET
2014-11-22 13:07:09 ----D---- C:\Program Files\Intel
2014-11-22 13:07:09 ----D---- C:\Program Files\Common Files\System
2014-11-22 13:07:09 ----D---- C:\Program Files\Common Files\microsoft shared
2014-11-22 13:07:09 ----D---- C:\Program Files\Common Files
2014-11-22 10:27:00 ----D---- C:\Users\KostíkaIrenka\AppData\Roaming\hpqlog
2014-11-22 10:01:40 ----D---- C:\ProgramData\HPQLOG

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem19.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\Windows\System32\drivers\amdkmpfd.sys [2012-07-09 35496]
R0 aswNdisFlt;@oem17.inf,%AfwDescriptionFree%;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-11-16 449936]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-16 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-16 267632]
R0 hpdskflt;@oem31.inf,%service_desc%;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2013-07-30 31040]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2012-07-31 645952]
R1 ArcSec;archlp; C:\Windows\system32\drivers\ArcSec.sys [2010-09-21 312184]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-11-16 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-16 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-21 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-16 436624]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536]
R1 Eve;@oem66.inf,%EVE_Desc%;EVE Protocol Driver; C:\Windows\system32\DRIVERS\eve.sys [2014-04-10 41304]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-16 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-16 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-16 116728]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2014-04-18 36600]
R3 Accelerometer;@oem31.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2013-07-30 43328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-08-01 10280960]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-08-01 368640]
R3 BtAudioBusSrv;@oem14.inf,%SvcDesc%;Ralink Bluetooth Audio Bus Service; C:\Windows\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 dvdfab;dvdfab; C:\Windows\system32\drivers\dvdfab.sys [2011-08-15 79232]
R3 HpqKbFiltr;@oem5.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\Windows\System32\drivers\HpqKbFiltr.sys [2012-08-27 26504]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\System32\drivers\ew_jubusenum.sys [2013-03-04 91648]
R3 IntcDAud;@oem21.inf,%IntcDAud.SvcDesc%;Intel(R) Zvuk pre obrazovky; C:\Windows\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2012-08-23 9000256]
R3 JMCR;JMCR; C:\Windows\System32\drivers\jmcr.sys [2014-11-19 176880]
R3 MEIx64;@oem9.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 netr28x;@oem28.inf,%Generic.Service.DispName%;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-12-04 2505904]
R3 RTL8168;@oem6.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2012-06-13 683664]
R3 SensorsServiceDriver;@sensorsservicedriver.inf,%WudfSensorsServiceDriverDisplayName%;UMDF Reflector service for SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
R3 SPUVCbv;@oem22.inf,%SPUVCb.ServiceName%;SPUVCb Driver Service; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2012-08-03 1062008]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10329; C:\Windows\system32\DRIVERS\stwrt64.sys [2012-08-06 540160]
R3 SynTP;@oem70.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2014-11-17 549104]
S1 ArcCtrl;ArcCtrl; C:\Windows\system32\drivers\ArcCtrl.sys []
S3 BthEnum;@tdibth.inf,%BthEnum.DisplayName%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2013-01-09 51712]
S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\Windows\System32\Drivers\BtL2caScoIf.sys [2012-07-19 56904]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2012-07-26 202752]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2012-07-26 119808]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2013-03-01 1175040]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2013-01-09 74752]
S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [2012-10-02 48608]
S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\system32\DRIVERS\e1i63x64.sys [2012-06-02 333824]
S3 epmntdrv;epmntdrv; \??\C:\Windows\syswow64\epmntdrv.sys [2014-11-18 15968]
S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\syswow64\EuGdiDrv.sys [2014-11-18 10208]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2013-01-25 109568]
S3 ew_usbenumfilter;@oem43.inf,%busupper.SVCDESC%;huawei_CompositeFilter; C:\Windows\System32\drivers\ew_usbenumfilter.sys [2012-12-22 14976]
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys [2013-03-04 110592]
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\System32\drivers\ew_juextctrl.sys [2013-03-04 30720]
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [2013-06-29 246272]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-08-23 9000256]
S3 massfilter;Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [2011-04-13 11776]
S3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-11-21 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-11-21 64216]
S3 NETwNe64;@netwne64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNe64.sys [2012-06-02 11400192]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2013-03-01 156672]
S3 rtbth;@oem29.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\Windows\System32\drivers\rtbth.sys []
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2012-08-15 41272]
S3 SmbDrvI;SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [2012-08-15 43832]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-05 210560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-08-01 239616]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-16 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-11-16 104416]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-09-26 1612552]
R2 DpHost;@C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2012-10-26 488824]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-10-16 681760]
R2 hpsrv;@oem31.inf,%hpservice_desc%;HP Service; C:\Windows\system32\Hpservice.exe [2013-07-30 33600]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-20 634632]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-19 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-19 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-19 277824]
R2 MbnExt;Mobile Broadband Extension Service; C:\Windows\system32\svchost.exe [2012-09-20 29696]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2012-07-17 1134624]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10129; C:\Program Files\IDT\WDM\STacSV64.exe [2012-08-06 321536]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-19 365376]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2012-07-19 2714232]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-09-19 146184]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-05-13 1129760]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2012/09/18 15:03:40; c:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2012-08-04 243728]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-18 107912]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-06 267440]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-12 51648]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-08-23 276288]
S3 DfSdkS;Defragmentation-Service; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS64.exe [2009-08-24 544768]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\Windows\SysWOW64\flcdlock.exe [2012-08-01 477088]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-26 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-18 107912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-05 114800]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2013-06-01 37632]
S4 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S4 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2012-11-27 29952]

-----------------EOF-----------------

[kostik123456]

Tak bohužel,zdá se,že to tam stále je -

# AdwCleaner v4.105 - Report created 20/12/2014 at 21:58:03
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows 8 (64 bits)
# Username : KostíkaIrenka - KOSTIK-HP
# Running from : C:\Users\KostíkaIrenka\AppData\Local\Temp\Rar$EXa0.846\adwcleaner_4.105.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17183


-\\ Mozilla Firefox v34.0 (x86 cs)


-\\ Google Chrome v39.0.2171.95


*************************

AdwCleaner[R41].txt - [775 octets] - [20/12/2014 21:58:03]

########## EOF - C:\AdwCleaner\AdwCleaner[R41].txt - [835 octets] ##########

[kostik123456]

Tak,po novem skenu jsem dal vymazat a zasa je to v registrech,viz.logy AdwCleaneru

# AdwCleaner v4.105 - Report created 20/12/2014 at 22:21:00
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows 8 (64 bits)
# Username : KostíkaIrenka - KOSTIK-HP
# Running from : C:\Users\KostíkaIrenka\AppData\Local\Temp\Rar$EXa0.728\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17183


-\\ Mozilla Firefox v34.0 (x86 cs)


-\\ Google Chrome v39.0.2171.95


*************************

AdwCleaner[R42].txt - [919 octets] - [20/12/2014 22:19:49]
AdwCleaner[S16].txt - [838 octets] - [20/12/2014 22:21:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S16].txt - [898 octets] ##########


Log po opětovním skenu a zasa je to tam

# AdwCleaner v4.105 - Report created 20/12/2014 at 22:29:13
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows 8 (64 bits)
# Username : KostíkaIrenka - KOSTIK-HP
# Running from : C:\Users\KostíkaIrenka\AppData\Local\Temp\Rar$EXa0.259\adwcleaner_4.105.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.17183


-\\ Mozilla Firefox v34.0 (x86 cs)


-\\ Google Chrome v39.0.2171.95


*************************

AdwCleaner[R44].txt - [884 octets] - [20/12/2014 22:29:13]

########## EOF - C:\AdwCleaner\AdwCleaner[R44].txt - [944 octets] ##########

Přikládám fotky regeditu

[Rudy]

Stejně to jsou prázdné klíče, které jsou zcela nefunkční. Nechápu, proč se tam drží. Máte nějaký problém s chodem PC?

[kostik123456]

Rudy
ProBook HP jede zcela normálně
Zítra bych vás poprosil o to samé ve stolním PC.Tam mám taktéž V Internet Exploreru ty klíče Search scopes.Zatím moc děkuji.Nashledanou.

[kostik123456]

Dobrý den Rudy posílám vám RSIT log z druhého PC.Včera jstemi pomohl z ProBookem HP a dnes bych prosím potřeboval to samé jen ze stolním PC neboť tá havěť SEARCH SCOPES je v registrech.Jen vás poprosím o to samé,nijakej úklid aby mi to nerozházelo 3D plochu ve Windows 8.1,aby mi všechno šlo email,aplikace a pod.Ještě jedna věc.Když něco RSIT log našel ve Skype tak mi to tam prosím zanechte neboť by mi nešlo otevřít ve 3D ploše.MOC děkuji za pomoc.NASHLE.
Log vám posílám na 4x neboť je MOOOC velkej a nevejde se do jedné správy

1 LOG -

Logfile of random's system information tool 1.10 (written by random/random)
Run by Kostík a Irenočka at 2014-12-21 10:50:14
Microsoft Windows 8.1 Pro s aplikací Media Center
System drive C: has 906 GB (95%) free of 954 GB
Total RAM: 8161 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:50:20, on 21. 12. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\Kostík a Irenočka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll
O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
O3 - Toolbar: (no name) - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - (no file)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files (x86)\lg_fwupdate\lgfw.exe" blrun
O4 - HKLM\..\Run: [EaseUS EPM Tray Agent] "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [icq] C:\Users\Kostík a Irenočka\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\listicka.dll
O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra 'Tools' menuitem: Classic IE Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE_32.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Kostík a Irenočka\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\Kostík a Irenočka\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: CyberLink Product - 2014/12/17 19:22:51 (CLKMSVC10_38F51D56) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: WinArchiver Service - Unknown owner - C:\Program Files\WinArchiver\WAService.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12052 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\Program Files\WinArchiver\WAService.exe"
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\AVAST Software\Avast\afwServ.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\WINDOWS\SysWOW64\svchost.exe -k hpdevmgmt
dashost.exe {30481065-cf57-4cd4-94de60dbc96d7b6e}
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
ngservice.exe pipeserver
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\system32\vssvc.exe
C:\WINDOWS\System32\svchost.exe -k swprv
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\ehome\ehRecvr.exe


C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
atieclxx
taskeng.exe {45A1B27C-F048-4120-BEA3-E8BD6EEF0C3B}
taskhostex.exe
C:\WINDOWS\Explorer.EXE
ClassicStartMenu.exe -startup
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
C:\Windows\System32\skydrive.exe -Embedding
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-279f9b54-90a6-4ef0-8c3e-d9223bcb15b9 -SystemEventPortName:HostProcess-bd3fdd74-7367-443f-80e5-0f8350f91719 -IoCancelEventPortName:HostProcess-fe2086c9-4bfe-4516-9b07-6a184b76fc63 -NonStateChangingEventPortName:HostProcess-97f929f5-86a6-4dfb-84a9-60baace47c1c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:de31dac8-3e23-4326-b499-f3f970d0a3fd -DeviceGroupId:WpdFsGroup
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\brs.exe"
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store

"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe21_ Global\UsGthrCtrlFltPipeMssGthrPipe21 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 576 580 588 65536 584
"C:\Users\Kostík a Irenočka\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Kostík a Irenočka\AppData\Roaming\Mozilla\Firefox\Profiles\0s2u9d0l.default

prefs.js - "browser.startup.homepage" - "https://www.google.com/?trackid=sp-006"
prefs.js - "keyword.URL" - "https://www.google.com/search/?trackid=sp-006"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.240 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_240.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1214154.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.240 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_240.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Kostík a Irenočka\AppData\Roaming\Mozilla\Firefox\Profiles\0s2u9d0l.default\searchplugins\
google-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-18 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20 483520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{449D0D6E-2412-4E61-B68F-1CB625CD9E52}]
ExplorerBHO Class - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-18 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA801577-E6AD-4BD5-8F71-4BE0154331A4}]
ClassicIEBHO Class - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20 440512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20 803520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{553891B7-A0D5-4526-BE18-D3CE461D6310} - Classic Explorer Bar - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20 683200]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Classic Start Menu"=C:\Program Files\Classic Shell\ClassicStartMenu.exe [2014-04-20 161984]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"icq"=C:\Users\Kostík a Irenočka\AppData\Roaming\ICQM\icq.exe [2014-12-17 35239432]
"LightScribe Control Panel"=C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2011-03-04 2741616]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-07-04 766688]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]
""= []
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-12-15 103720]
"UpdateP2GoShortCut"=C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2011-03-30 87336]
"BDRegion"=C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [2011-09-28 75048]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"LGODDFU"=C:\Program Files (x86)\lg_fwupdate\lgfw.exe [2014-12-17 27760]
"EaseUS EPM Tray Agent"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe [2014-11-18 255072]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26 271744]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-12-18 5227112]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"mixer3"=wdmaud.drv
"msacm.ac3filter"=ac3filter64.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-21 10:50:14 ----D---- C:\rsit
2014-12-21 10:50:14 ----D---- C:\Program Files\trend micro
2014-12-18 19:54:35 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\AVAST Software
2014-12-18 19:54:06 ----D---- C:\WINDOWS\SYSWOW64\vbox
2014-12-18 19:54:06 ----D---- C:\WINDOWS\system32\vbox
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswsnx.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2014-12-18 19:53:19 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2014-12-18 19:53:18 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-12-18 19:53:15 ----A---- C:\WINDOWS\avastSS.scr
2014-12-18 19:53:03 ----A---- C:\WINDOWS\system32\drivers\aswNdisFlt.sys
2014-12-18 19:50:36 ----D---- C:\Program Files\AVAST Software
2014-12-18 19:49:56 ----D---- C:\ProgramData\AVAST Software
2014-12-18 19:47:59 ----D---- C:\ProgramData\Oracle
2014-12-18 19:47:53 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-12-18 19:47:52 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-12-18 19:47:52 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-12-18 19:47:52 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-12-18 19:47:46 ----D---- C:\Program Files (x86)\Java
2014-12-18 19:45:58 ----D---- C:\ProgramData\Sun
2014-12-18 19:38:48 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Popisovac
2014-12-18 19:38:42 ----D---- C:\Program Files (x86)\Seznam.cz
2014-12-18 19:38:39 ----D---- C:\Program Files (x86)\Popisovač CD-DVD 4
2014-12-18 19:33:43 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Mozilla
2014-12-18 19:33:33 ----D---- C:\ProgramData\Mozilla
2014-12-18 19:33:33 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-18 19:33:30 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-18 19:30:46 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\BitTorrent
2014-12-18 19:28:15 ----A---- C:\WINDOWS\system32\drivers\eve.sys
2014-12-18 19:28:14 ----D---- C:\Program Files\WinPcap
2014-12-18 19:28:08 ----D---- C:\ProgramData\VSO
2014-12-18 19:28:08 ----D---- C:\Program Files (x86)\VSO
2014-12-18 19:27:31 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\YouTube Downloader
2014-12-18 19:26:45 ----D---- C:\Program Files (x86)\YTD
2014-12-18 19:25:11 ----D---- C:\Program Files\File Joiner
2014-12-18 19:24:26 ----A---- C:\WINDOWS\SYSWOW64\pthreadGC2.dll
2014-12-18 19:24:18 ----D---- C:\Program Files (x86)\AoA Audio Extractor
2014-12-18 19:22:44 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Bigasoft Total Video Converter 4
2014-12-18 19:22:36 ----D---- C:\Program Files (x86)\Bigasoft
2014-12-18 19:21:02 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\ImTOO
2014-12-18 19:21:02 ----D---- C:\Program Files (x86)\ImTOO
2014-12-18 19:15:18 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Xilisoft
2014-12-18 19:15:18 ----D---- C:\Program Files (x86)\Xilisoft
2014-12-18 19:07:02 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Ashampoo Slideshow Studio HD 3
2014-12-18 18:57:58 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Ashampoo
2014-12-18 18:55:53 ----D---- C:\ProgramData\ashampoo
2014-12-18 18:55:10 ----D---- C:\Program Files (x86)\Ashampoo
2014-12-18 18:53:02 ----D---- C:\Program Files\MKVToolNix
2014-12-18 18:51:07 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\mkvtoolnix
2014-12-18 18:46:03 ----D---- C:\ProgramData\DVD Shrink
2014-12-18 18:46:02 ----D---- C:\Program Files (x86)\DVD Shrink
2014-12-18 18:38:39 ----A---- C:\WINDOWS\system32\drivers\dvdfab.sys
2014-12-18 18:38:37 ----D---- C:\Program Files (x86)\DVDFab Passkey
2014-12-18 18:36:53 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\17660
2014-12-18 18:31:30 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\DVDFab9
2014-12-18 18:31:15 ----D---- C:\Program Files (x86)\DVDFab 9
2014-12-18 18:30:25 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\DVDFab
2014-12-18 18:29:06 ----D---- C:\ProgramData\dvdfab
2014-12-18 18:09:35 ----D---- C:\Program Files\Ultra Video Joiner
2014-12-18 18:08:06 ----D---- C:\Program Files (x86)\DVDFab 8 Qt
2014-12-18 18:05:36 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\VideoReDo-TVSuite4
2014-12-18 18:05:36 ----D---- C:\Program Files (x86)\VideoReDoTVSuite4
2014-12-18 17:58:16 ----A---- C:\WINDOWS\SYSWOW64\AVERM.dll
2014-12-18 17:58:15 ----A---- C:\WINDOWS\SYSWOW64\AVEQT.dll
2014-12-18 17:58:14 ----D---- C:\Program Files (x86)\Ultra Video Joiner
2014-12-18 17:49:57 ----D---- C:\ProgramData\Licenses
2014-12-18 17:46:51 ----D---- C:\Program Files\CCleaner
2014-12-18 17:41:29 ----D---- C:\ProgramData\LightScribe
2014-12-18 17:40:54 ----N---- C:\WINDOWS\SYSWOW64\TwnLib4.dll
2014-12-18 17:40:54 ----N---- C:\WINDOWS\SYSWOW64\ImagXRA7.dll
2014-12-18 17:40:54 ----N---- C:\WINDOWS\SYSWOW64\ImagXR7.dll
2014-12-18 17:40:54 ----N---- C:\WINDOWS\SYSWOW64\ImagXpr7.dll
2014-12-18 17:40:54 ----N---- C:\WINDOWS\SYSWOW64\ImagX7.dll
2014-12-18 17:40:54 ----D---- C:\Program Files (x86)\Ahead
2014-12-18 17:40:54 ----A---- C:\WINDOWS\SYSWOW64\TwnLib20.dll
2014-12-18 17:40:26 ----D---- C:\Program Files (x86)\Yahoo!
2014-12-18 17:37:44 ----D---- C:\Program Files\Picon_Manager-V1.7.1.4
2014-12-18 17:35:56 ----D---- C:\Program Files\My-Dream-Toolbox-VU+-Edition-v5.3
2014-12-18 17:15:23 ----D---- C:\Program Files\Common Files\DESIGNER
2014-12-18 17:04:17 ----D---- C:\Program Files\CCcam Editor2012
2014-12-18 17:02:32 ----D---- C:\Program Files\A250Combo 3606 Editor
2014-12-18 16:57:32 ----D---- C:\Program Files\DCC E2 1.50
2014-12-18 16:56:34 ----D---- C:\Program Files\DCC E2 2.96
2014-12-18 16:52:52 ----D---- C:\Program Files\DogSettings
2014-12-18 16:44:56 ----D---- C:\Program Files (x86)\dreamboxEDIT
2014-12-17 22:08:17 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\ArcSoft
2014-12-17 21:50:52 ----D---- C:\Program Files (x86)\CoreCodec
2014-12-17 21:49:42 ----D---- C:\ProgramData\ArcSoft
2014-12-17 21:49:35 ----D---- C:\WINDOWS\SYSWOW64\Codec
2014-12-17 21:47:43 ----D---- C:\Program Files (x86)\MPEG2_Decoders
2014-12-17 21:32:27 ----A---- C:\WINDOWS\system32\unrar64.dll
2014-12-17 21:32:22 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2014-12-17 20:24:42 ----D---- C:\Program Files (x86)\AC3Filter
2014-12-17 20:12:02 ----D---- C:\dvbdream
2014-12-17 20:11:25 ----A---- C:\WINDOWS\unins000.exe
2014-12-17 20:11:25 ----A---- C:\WINDOWS\unins000.dat
2014-12-17 20:11:25 ----A---- C:\WINDOWS\system32\drivers\tbs6928_64.sys
2014-12-17 20:11:25 ----A---- C:\WINDOWS\system32\drivers\devcon.exe
2014-12-17 20:08:39 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\BSplayer PRO
2014-12-17 20:08:36 ----D---- C:\Program Files (x86)\Webteh
2014-12-17 20:07:57 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\vlc
2014-12-17 20:07:18 ----D---- C:\Program Files\VideoLAN
2014-12-17 20:04:20 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\AIMP3
2014-12-17 20:04:13 ----D---- C:\Program Files (x86)\AIMP3
2014-12-17 20:01:28 ----D---- C:\Program Files (x86)\UltraISO
2014-12-17 19:59:00 ----A---- C:\WINDOWS\SYSWOW64\setupempdrv03.exe
2014-12-17 19:59:00 ----A---- C:\WINDOWS\SYSWOW64\EuGdiDrv.sys
2014-12-17 19:59:00 ----A---- C:\WINDOWS\SYSWOW64\EuEpmGdi.dll
2014-12-17 19:59:00 ----A---- C:\WINDOWS\SYSWOW64\epmntdrv.sys
2014-12-17 19:59:00 ----A---- C:\WINDOWS\SYSWOW64\BootMan.exe
2014-12-17 19:59:00 ----A---- C:\WINDOWS\system32\setupempdrvx64.exe
2014-12-17 19:59:00 ----A---- C:\WINDOWS\system32\EuGdiDrv.sys
2014-12-17 19:59:00 ----A---- C:\WINDOWS\system32\EuEpmGdi.dll
2014-12-17 19:59:00 ----A---- C:\WINDOWS\system32\epmntdrv.sys
2014-12-17 19:59:00 ----A---- C:\WINDOWS\system32\BootMan.exe
2014-12-17 19:58:53 ----D---- C:\Program Files (x86)\EaseUS
2014-12-17 19:56:04 ----D---- C:\Program Files\Recover Keys
2014-12-17 19:55:15 ----D---- C:\Program Files (x86)\Magical Jelly Bean
2014-12-17 19:54:56 ----D---- C:\Program Files (x86)\KeyFinder
2014-12-17 19:53:26 ----D---- C:\Program Files (x86)\WinToUSB
2014-12-17 19:51:03 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\ICQ-Profile
2014-12-17 19:51:03 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\ICQM
2014-12-17 19:45:57 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2014-12-17 19:45:40 ----D---- C:\ProgramData\Malwarebytes
2014-12-17 19:45:40 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-17 19:45:40 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2014-12-17 19:45:40 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2014-12-17 19:45:40 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-12-17 19:41:16 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Skype
2014-12-17 19:41:11 ----RD---- C:\Program Files (x86)\Skype
2014-12-17 19:41:09 ----D---- C:\ProgramData\Skype
2014-12-17 19:38:56 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\PC Suite
2014-12-17 19:38:55 ----D---- C:\ProgramData\PC Suite
2014-12-17 19:38:43 ----D---- C:\ProgramData\Nokia
2014-12-17 19:38:29 ----D---- C:\Program Files\DIFX
2014-12-17 19:38:29 ----A---- C:\WINDOWS\system32\drivers\pccsmcfdx64.sys
2014-12-17 19:38:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2014-12-17 19:38:26 ----D---- C:\Program Files (x86)\PC Connectivity Solution
2014-12-17 19:38:18 ----A---- C:\WINDOWS\system32\nmwcdclsX64.dll
2014-12-17 19:37:46 ----D---- C:\ProgramData\NokiaInstallerCache
2014-12-17 19:37:46 ----D---- C:\Program Files (x86)\Nokia
2014-12-17 19:30:02 ----A---- C:\WINDOWS\lgfwup.ini
2014-12-17 19:29:51 ----A---- C:\WINDOWS\SYSWOW64\Vb6stkit.dll
2014-12-17 19:29:51 ----A---- C:\WINDOWS\SYSWOW64\VB6KO.DLL
2014-12-17 19:29:51 ----A---- C:\WINDOWS\SYSWOW64\lgfwunis.exe
2014-12-17 19:29:48 ----D---- C:\Program Files (x86)\lg_fwupdate
2014-12-17 19:21:45 ----A---- C:\WINDOWS\SYSWOW64\msxml3a.dll
2014-12-17 19:19:11 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\CyberLink
2014-12-17 19:16:43 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-12-17 19:16:39 ----D---- C:\Program Files (x86)\CyberLink
2014-12-17 19:16:11 ----D---- C:\ProgramData\CyberLink
2014-12-17 19:13:43 ----AD---- C:\ProgramData\Temp
2014-12-17 18:56:41 ----D---- C:\Program Files\Microsoft Silverlight
2014-12-17 18:56:41 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-12-17 18:54:08 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\TeamViewer
2014-12-17 18:54:03 ----D---- C:\Program Files (x86)\TeamViewer
2014-12-17 18:51:55 ----D---- C:\Program Files\Defraggler
2014-12-17 18:48:58 ----D---- C:\ProgramData\WEBREG
2014-12-17 18:48:33 ----D---- C:\ProgramData\Hewlett-Packard
2014-12-17 18:47:25 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-12-17 18:47:25 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-12-17 18:47:01 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\HP
2014-12-17 18:43:56 ----D---- C:\Program Files (x86)\Microsoft
2014-12-17 18:43:50 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\HpUpdate
2014-12-17 18:43:19 ----D---- C:\ProgramData\HP Product Assistant
2014-12-17 18:41:36 ----D---- C:\Program Files (x86)\HP
2014-12-17 18:41:35 ----HD---- C:\Config.Msi
2014-12-17 18:41:04 ----N---- C:\WINDOWS\hpomdl28.dat
2014-12-17 18:41:04 ----A---- C:\WINDOWS\hpoins28.dat
2014-12-17 18:40:58 ----D---- C:\ProgramData\HP
2014-12-17 18:40:58 ----A---- C:\WINDOWS\system32\drivers\Dot4usb.sys
2014-12-17 18:40:58 ----A---- C:\WINDOWS\system32\drivers\Dot4Prt.sys
2014-12-17 18:40:58 ----A---- C:\WINDOWS\system32\drivers\Dot4.sys
2014-12-17 18:40:54 ----A---- C:\WINDOWS\system32\PortChanger.exe
2014-12-17 18:40:42 ----A---- C:\WINDOWS\system32\hpz3lw71.dll
2014-12-17 18:40:41 ----A---- C:\WINDOWS\system32\hppldcoi.dll
2014-12-17 18:40:41 ----A---- C:\WINDOWS\system32\hpowiax7.dll
2014-12-17 18:40:41 ----A---- C:\WINDOWS\system32\hpovst15.dll
2014-12-17 18:40:41 ----A---- C:\WINDOWS\system32\hpotscl6.dll
2014-12-17 18:37:23 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Macromedia
2014-12-17 18:37:20 ----SHD---- C:\WINDOWS\ftpcache
2014-12-17 18:37:19 ----A---- C:\WINDOWS\Natura Sound Therapy Uninstaller.exe
2014-12-17 18:37:16 ----D---- C:\Program Files (x86)\Natura Sound Therapy
2014-12-17 18:36:45 ----D---- C:\Program Files (x86)\Relax Sound Software
2014-12-17 18:34:58 ----D---- C:\ProgramData\VS Revo Group
2014-12-17 18:34:58 ----A---- C:\WINDOWS\system32\drivers\revoflt.sys
2014-12-17 18:34:57 ----D---- C:\Program Files\VS Revo Group
2014-12-17 18:31:52 ----A---- C:\WINDOWS\AutoKMS.ini
2014-12-17 18:30:04 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-12-17 18:30:00 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2014-12-17 18:30:00 ----D---- C:\Program Files\Reference Assemblies
2014-12-17 18:30:00 ----D---- C:\Program Files\MSBuild
2014-12-17 18:28:29 ----D---- C:\Program Files\Window On Top 2.1 portable
2014-12-17 18:28:00 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2014-12-17 18:28:00 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-12-17 18:27:58 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-12-17 18:27:58 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-12-17 18:24:24 ----D---- C:\Program Files (x86)\MSBuild
2014-12-17 18:24:13 ----D---- C:\WINDOWS\PCHEALTH
2014-12-17 18:24:13 ----D---- C:\Program Files\Microsoft Sync Framework
2014-12-17 18:21:48 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-12-17 18:21:24 ----D---- C:\Program Files\Microsoft Analysis Services
2014-12-17 18:21:24 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-12-17 18:21:21 ----D---- C:\Program Files (x86)\Microsoft Office
2014-12-17 18:21:19 ----D---- C:\ProgramData\Microsoft Help
2014-12-17 18:21:19 ----D---- C:\Program Files\Microsoft Office
2014-12-17 18:21:14 ----RHD---- C:\MSOCache
2014-12-17 18:11:45 ----D---- C:\Program Files (x86)\Adobe
2014-12-17 18:06:51 ----D---- C:\ProgramData\EmailNotifier
2014-12-17 18:06:23 ----A---- C:\WINDOWS\SYSWOW64\unrar.dll
2014-12-17 18:02:00 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\GHISLER
2014-12-17 18:02:00 ----D---- C:\Program Files\totalcmd
2014-12-17 17:58:24 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-12-17 17:53:56 ----RD---- C:\WINDOWS\BrowserChoice
2014-12-17 17:30:45 ----A---- C:\WINDOWS\system32\wmp.dll
2014-12-17 17:30:35 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2014-12-17 17:30:27 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-12-17 17:30:27 ----A---- C:\WINDOWS\system32\WSService.dll
2014-12-17 17:30:27 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-12-17 17:30:27 ----A---- C:\WINDOWS\system32\twinui.dll
2014-12-17 17:30:26 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-12-17 17:30:25 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-12-17 17:30:25 ----A---- C:\WINDOWS\system32\glcndFilter.dll
2014-12-17 17:30:25 ----A---- C:\WINDOWS\system32\atlthunk.dll
2014-12-17 17:30:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-12-17 17:30:24 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-12-17 17:30:24 ----A---- C:\WINDOWS\system32\drivers\swenum.sys
2014-12-17 17:30:23 ----A---- C:\WINDOWS\SYSWOW64\glcndFilter.dll
2014-12-17 17:30:23 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-12-17 17:30:23 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2014-12-17 17:30:23 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-12-17 17:30:22 ----A---- C:\WINDOWS\system32\msi.dll
2014-12-17 17:30:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-12-17 17:30:21 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2014-12-17 17:30:21 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-12-17 17:30:21 ----A---- C:\WINDOWS\system32\rdpinput.exe
2014-12-17 17:30:21 ----A---- C:\WINDOWS\system32\rdpcore.dll
2014-12-17 17:30:21 ----A---- C:\WINDOWS\system32\rdpclip.exe
2014-12-17 17:30:19 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2014-12-17 17:30:19 ----A---- C:\WINDOWS\system32\d2d1.dll
2014-12-17 17:30:18 ----A---- C:\WINDOWS\system32\tquery.dll
2014-12-17 17:30:18 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-12-17 17:30:17 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-12-17 17:30:17 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2014-12-17 17:30:17 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2014-12-17 17:30:17 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-12-17 17:30:16 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-12-17 17:30:16 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2014-12-17 17:30:16 ----A---- C:\WINDOWS\system32\mssrch.dll
2014-12-17 17:30:16 ----A---- C:\WINDOWS\system32\dbgeng.dll
2014-12-17 17:30:15 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2014-12-17 17:30:14 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2014-12-17 17:30:14 ----A---- C:\WINDOWS\system32\MSVidCtl.dll
2014-12-17 17:30:13 ----A---- C:\WINDOWS\system32\xpsservices.dll
2014-12-17 17:30:13 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2014-12-17 17:30:13 ----A---- C:\WINDOWS\system32\esent.dll
2014-12-17 17:30:12 ----A---- C:\WINDOWS\SYSWOW64\rdpcore.dll
2014-12-17 17:30:12 ----A---- C:\WINDOWS\SYSWOW64\esent.dll
2014-12-17 17:30:11 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-12-17 17:30:11 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2014-12-17 17:30:10 ----A---- C:\WINDOWS\SYSWOW64\WMVCORE.DLL
2014-12-17 17:30:10 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-12-17 17:30:10 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2014-12-17 17:30:10 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2014-12-17 17:30:09 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2014-12-17 17:30:09 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2014-12-17 17:30:09 ----A---- C:\WINDOWS\system32\combase.dll
2014-12-17 17:30:08 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2014-12-17 17:30:08 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-12-17 17:30:08 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-12-17 17:30:07 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-12-17 17:30:07 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-12-17 17:30:07 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-12-17 17:30:06 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2014-12-17 17:30:06 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2014-12-17 17:30:06 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-12-17 17:30:06 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2014-12-17 17:30:06 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2014-12-17 17:30:05 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-12-17 17:30:05 ----A---- C:\WINDOWS\system32\DWrite.dll
2014-12-17 17:30:05 ----A---- C:\WINDOWS\explorer.exe
2014-12-17 17:30:04 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2014-12-17 17:30:04 ----A---- C:\WINDOWS\system32\ole32.dll
2014-12-17 17:30:04 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-12-17 17:30:04 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2014-12-17 17:30:03 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-12-17 17:30:03 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2014-12-17 17:30:03 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-12-17 17:30:03 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-12-17 17:30:02 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2014-12-17 17:30:02 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2014-12-17 17:30:02 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-12-17 17:30:02 ----A---- C:\WINDOWS\system32\winmde.dll
2014-12-17 17:30:02 ----A---- C:\WINDOWS\system32\storagewmi.dll
2014-12-17 17:30:02 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-12-17 17:30:02 ----A---- C:\WINDOWS\system32\dui70.dll
2014-12-17 17:30:02 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-12-17 17:30:01 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-12-17 17:30:01 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-12-17 17:30:01 ----A---- C:\WINDOWS\system32\OpcServices.dll
2014-12-17 17:30:00 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-12-17 17:30:00 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-12-17 17:30:00 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-12-17 17:30:00 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2014-12-17 17:29:59 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2014-12-17 17:29:59 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2014-12-17 17:29:59 ----A---- C:\WINDOWS\system32\SRH.dll
2014-12-17 17:29:59 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2014-12-17 17:29:59 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2014-12-17 17:29:58 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-12-17 17:29:58 ----A---- C:\WINDOWS\system32\taskschd.dll
2014-12-17 17:29:58 ----A---- C:\WINDOWS\system32\blackbox.dll
2014-12-17 17:29:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2014-12-17 17:29:57 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-12-17 17:29:57 ----A---- C:\WINDOWS\SYSWOW64\mmcndmgr.dll
2014-12-17 17:29:57 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2014-12-17 17:29:57 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-12-17 17:29:57 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-12-17 17:29:56 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-12-17 17:29:56 ----A---- C:\WINDOWS\system32\PeerDistSvc.dll
2014-12-17 17:29:56 ----A---- C:\WINDOWS\system32\PeerDistCacheProvider.dll
2014-12-17 17:29:55 ----A---- C:\WINDOWS\SYSWOW64\WMVENCOD.DLL
2014-12-17 17:29:55 ----A---- C:\WINDOWS\system32\WMVENCOD.DLL
2014-12-17 17:29:55 ----A---- C:\WINDOWS\system32\webservices.dll
2014-12-17 17:29:55 ----A---- C:\WINDOWS\system32\authui.dll
2014-12-17 17:29:54 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2014-12-17 17:29:54 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-12-17 17:29:53 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-12-17 17:29:53 ----A---- C:\WINDOWS\SYSWOW64\MSVidCtl.dll
2014-12-17 17:29:52 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2014-12-17 17:29:52 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2014-12-17 17:29:52 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2014-12-17 17:29:52 ----A---- C:\WINDOWS\system32\mmc.exe
2014-12-17 17:29:51 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-12-17 17:29:51 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2014-12-17 17:29:51 ----A---- C:\WINDOWS\system32\quartz.dll
2014-12-17 17:29:51 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-12-17 17:29:51 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2014-12-17 17:29:50 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2014-12-17 17:29:50 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-12-17 17:29:50 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-12-17 17:29:50 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-12-17 17:29:50 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-12-17 17:29:50 ----A---- C:\WINDOWS\system32\diagperf.dll
2014-12-17 17:29:49 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2014-12-17 17:29:49 ----A---- C:\WINDOWS\system32\xpssvcs.dll
2014-12-17 17:29:49 ----A---- C:\WINDOWS\system32\drmv2clt.dll
2014-12-17 17:29:49 ----A---- C:\WINDOWS\system32\comsvcs.dll
2014-12-17 17:29:48 ----A---- C:\WINDOWS\SYSWOW64\xpsservices.dll
2014-12-17 17:29:48 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-12-17 17:29:48 ----A---- C:\WINDOWS\system32\sbe.dll
2014-12-17 17:29:48 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2014-12-17 17:29:47 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2014-12-17 17:29:47 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2014-12-17 17:29:47 ----A---- C:\WINDOWS\SYSWOW64\blackbox.dll
2014-12-17 17:29:47 ----A---- C:\WINDOWS\system32\WMNetMgr.dll
2014-12-17 17:29:47 ----A---- C:\WINDOWS\system32\rpcss.dll
2014-12-17 17:29:47 ----A---- C:\WINDOWS\system32\FntCache.dll
2014-12-17 17:29:47 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-12-17 17:29:46 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2014-12-17 17:29:46 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2014-12-17 17:29:46 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2014-12-17 17:29:46 ----A---- C:\WINDOWS\system32\WinSAT.exe
2014-12-17 17:29:46 ----A---- C:\WINDOWS\system32\pla.dll
2014-12-17 17:29:46 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-12-17 17:29:45 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2014-12-17 17:29:45 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2014-12-17 17:29:45 ----A---- C:\WINDOWS\system32\StructuredQuery.dll
2014-12-17 17:29:45 ----A---- C:\WINDOWS\system32\sqlceqp40.dll
2014-12-17 17:29:45 ----A---- C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-12-17 17:29:45 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-12-17 17:29:44 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-12-17 17:29:44 ----A---- C:\WINDOWS\system32\schedsvc.dll
2014-12-17 17:29:44 ----A---- C:\WINDOWS\system32\mfnetcore.dll
2014-12-17 17:29:43 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2014-12-17 17:29:43 ----A---- C:\WINDOWS\system32\uxtheme.dll
2014-12-17 17:29:43 ----A---- C:\WINDOWS\system32\localspl.dll
2014-12-17 17:29:42 ----A---- C:\WINDOWS\SYSWOW64\pla.dll
2014-12-17 17:29:42 ----A---- C:\WINDOWS\SYSWOW64\mmc.exe
2014-12-17 17:29:42 ----A---- C:\WINDOWS\SYSWOW64\drmv2clt.dll
2014-12-17 17:29:42 ----A---- C:\WINDOWS\system32\uDWM.dll
2014-12-17 17:29:42 ----A---- C:\WINDOWS\system32\qmgr.dll
2014-12-17 17:29:41 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2014-12-17 17:29:41 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-12-17 17:29:41 ----A---- C:\WINDOWS\system32\WebcamUi.dll
2014-12-17 17:29:41 ----A---- C:\WINDOWS\system32\srmclient.dll
2014-12-17 17:29:41 ----A---- C:\WINDOWS\system32\propsys.dll
2014-12-17 17:29:41 ----A---- C:\WINDOWS\system32\msdtctm.dll
2014-12-17 17:29:41 ----A---- C:\WINDOWS\system32\mispace.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\SYSWOW64\psapi.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\system32\Windows.Web.Http.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\system32\NaturalLanguage6.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\system32\dbghelp.dll
2014-12-17 17:29:40 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-12-17 17:29:39 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2014-12-17 17:29:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-12-17 17:29:39 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-12-17 17:29:39 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2014-12-17 17:29:39 ----A---- C:\WINDOWS\system32\Windows.Globalization.dll
2014-12-17 17:29:39 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\SYSWOW64\WMNetMgr.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\SYSWOW64\sbe.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\system32\winhttp.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\system32\sysmain.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\system32\RacEngn.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\system32\mf.dll
2014-12-17 17:29:38 ----A---- C:\WINDOWS\system32\lsm.dll
2014-12-17 17:29:37 ----A---- C:\WINDOWS\SYSWOW64\mfnetcore.dll
2014-12-17 17:29:37 ----A---- C:\WINDOWS\system32\WMADMOD.DLL
2014-12-17 17:29:37 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2014-12-17 17:29:37 ----A---- C:\WINDOWS\system32\cdosys.dll
2014-12-17 17:29:36 ----A---- C:\WINDOWS\SYSWOW64\sqlceqp40.dll
2014-12-17 17:29:36 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-12-17 17:29:36 ----A---- C:\WINDOWS\system32\wmdrmdev.dll
2014-12-17 17:29:36 ----A---- C:\WINDOWS\system32\twinapi.dll
2014-12-17 17:29:36 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2014-12-17 17:29:36 ----A---- C:\WINDOWS\system32\ogldrv.dll
2014-12-17 17:29:36 ----A---- C:\WINDOWS\system32\mfds.dll
2014-12-17 17:29:35 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-12-17 17:29:35 ----A---- C:\WINDOWS\SYSWOW64\WMADMOD.DLL
2014-12-17 17:29:35 ----A---- C:\WINDOWS\SYSWOW64\RacEngn.dll
2014-12-17 17:29:35 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2014-12-17 17:29:35 ----A---- C:\WINDOWS\system32\WWAHost.exe
2014-12-17 17:29:35 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-12-17 17:29:35 ----A---- C:\WINDOWS\system32\user32.dll
2014-12-17 17:29:35 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2014-12-17 17:29:35 ----A---- C:\WINDOWS\system32\printfilterpipelinesvc.exe
2014-12-17 17:29:35 ----A---- C:\WINDOWS\system32\mspaint.exe
2014-12-17 17:29:34 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-12-17 17:29:34 ----A---- C:\WINDOWS\SYSWOW64\NaturalLanguage6.dll
2014-12-17 17:29:34 ----A---- C:\WINDOWS\system32\riched20.dll
2014-12-17 17:29:34 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-12-17 17:29:34 ----A---- C:\WINDOWS\system32\MrmIndexer.dll
2014-12-17 17:29:34 ----A---- C:\WINDOWS\system32\generaltel.dll
2014-12-17 17:29:34 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2014-12-17 17:29:34 ----A---- C:\WINDOWS\system32\comdlg32.dll
2014-12-17 17:29:33 ----A---- C:\WINDOWS\SYSWOW64\WebcamUi.dll
2014-12-17 17:29:33 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-12-17 17:29:33 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2014-12-17 17:29:33 ----A---- C:\WINDOWS\system32\odbc32.dll
2014-12-17 17:29:33 ----A---- C:\WINDOWS\system32\msTextPrediction.dll
2014-12-17 17:29:33 ----A---- C:\WINDOWS\system32\evr.dll
2014-12-17 17:29:33 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-12-17 17:29:32 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2014-12-17 17:29:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.dll
2014-12-17 17:29:32 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-12-17 17:29:32 ----A---- C:\WINDOWS\system32\duser.dll
2014-12-17 17:29:32 ----A---- C:\WINDOWS\system32\CPFilters.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\system32\WinSync.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2014-12-17 17:29:31 ----A---- C:\WINDOWS\system32\SettingSync.dll
2014-12-17 17:29:31 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2014-12-17 17:29:30 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2014-12-17 17:29:30 ----A---- C:\WINDOWS\SYSWOW64\uxtheme.dll
2014-12-17 17:29:30 ----A---- C:\WINDOWS\SYSWOW64\setupapi.dll
2014-12-17 17:29:30 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-12-17 17:29:30 ----A---- C:\WINDOWS\SYSWOW64\ogldrv.dll
2014-12-17 17:29:30 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2014-12-17 17:29:30 ----A---- C:\WINDOWS\system32\wdc.dll
2014-12-17 17:29:30 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2014-12-17 17:29:30 ----A---- C:\WINDOWS\system32\fveapi.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\SYSWOW64\wmdrmdev.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\SYSWOW64\StructuredQuery.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\SYSWOW64\riched20.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\SYSWOW64\d3d8.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\system32\wpdshext.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\system32\setupapi.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\system32\provcore.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\system32\PortableDeviceApi.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-12-17 17:29:29 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-12-17 17:29:28 ----A---- C:\WINDOWS\SYSWOW64\wdc.dll
2014-12-17 17:29:28 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2014-12-17 17:29:28 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2014-12-17 17:29:28 ----A---- C:\WINDOWS\system32\WavDest.dll
2014-12-17 17:29:28 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-12-17 17:29:28 ----A---- C:\WINDOWS\system32\qedit.dll
2014-12-17 17:29:28 ----A---- C:\WINDOWS\system32\PurchaseWindowsLicense.dll
2014-12-17 17:29:28 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-12-17 17:29:27 ----A---- C:\WINDOWS\SYSWOW64\Taskmgr.exe
2014-12-17 17:29:27 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2014-12-17 17:29:27 ----A---- C:\WINDOWS\SYSWOW64\certutil.exe
2014-12-17 17:29:27 ----A---- C:\WINDOWS\SYSWOW64\cdosys.dll
2014-12-17 17:29:27 ----A---- C:\WINDOWS\system32\wmdrmnet.dll
2014-12-17 17:29:27 ----A---- C:\WINDOWS\system32\WinTypes.dll
2014-12-17 17:29:27 ----A---- C:\WINDOWS\system32\samsrv.dll
2014-12-17 17:29:27 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2014-12-17 17:29:26 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-12-17 17:29:26 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2014-12-17 17:29:26 ----A---- C:\WINDOWS\SYSWOW64\odbc32.dll
2014-12-17 17:29:26 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2014-12-17 17:29:26 ----A---- C:\WINDOWS\system32\wbengine.exe
2014-12-17 17:29:26 ----A---- C:\WINDOWS\system32\Taskmgr.exe
2014-12-17 17:29:26 ----A---- C:\WINDOWS\system32\clbcatq.dll
2014-12-17 17:29:26 ----A---- C:\WINDOWS\system32\autoconv.exe
2014-12-17 17:29:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Http.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\SYSWOW64\twinapi.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\SYSWOW64\MrmIndexer.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\system32\wmdrmsdk.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\system32\perftrack.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-12-17 17:29:25 ----A---- C:\WINDOWS\system32\d3d10level9.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\system32\comuid.dll
2014-12-17 17:29:25 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingFacility.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\SYSWOW64\comuid.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\WUDFx.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\wpncore.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\MSWB70804.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\MSWB70404.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\MSWB7001E.dll
2014-12-17 17:29:24 ----A---- C:\WINDOWS\system32\MSWB70011.dll
2014-12-17 17:29:23 ----A---- C:\WINDOWS\SYSWOW64\xpssvcs.dll
2014-12-17 17:29:23 ----A---- C:\WINDOWS\SYSWOW64\WMADMOE.DLL
2014-12-17 17:29:23 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2014-12-17 17:29:23 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-12-17 17:29:23 ----A---- C:\WINDOWS\SYSWOW64\duser.dll
2014-12-17 17:29:23 ----A---- C:\WINDOWS\system32\WMSPDMOD.DLL
2014-12-17 17:29:23 ----A---- C:\WINDOWS\system32\sqlsrv32.dll
2014-12-17 17:29:23 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2014-12-17 17:29:22 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOD.DLL
2014-12-17 17:29:22 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-12-17 17:29:22 ----A---- C:\WINDOWS\SYSWOW64\autoconv.exe
2014-12-17 17:29:22 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-12-17 17:29:22 ----A---- C:\WINDOWS\system32\sqlcese40.dll
2014-12-17 17:29:22 ----A---- C:\WINDOWS\system32\printui.dll
2014-12-17 17:29:22 ----A---- C:\WINDOWS\system32\pmcsnap.dll
2014-12-17 17:29:22 ----A---- C:\WINDOWS\system32\es.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\SYSWOW64\wpdshext.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\SYSWOW64\srmclient.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\SYSWOW64\sqlsrv32.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\SYSWOW64\msdtcprx.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\system32\WMVSDECD.DLL
2014-12-17 17:29:21 ----A---- C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\system32\imapi2fs.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\system32\EncDec.dll
2014-12-17 17:29:21 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\SYSWOW64\wmdrmsdk.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\SYSWOW64\wmdrmnet.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\SYSWOW64\WinSync.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceApi.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\WUDFx02000.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\wiaservc.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\usercpl.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\psisdecd.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-12-17 17:29:20 ----A---- C:\WINDOWS\system32\AudioSes.dll

[kostik123456]

2 LOG -

2014-12-17 17:29:19 ----A---- C:\WINDOWS\SYSWOW64\printui.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\SYSWOW64\d3d10level9.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\XpsRasterService.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\werconcpl.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\gpprefcl.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\gameux.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\dsound.dll
2014-12-17 17:29:19 ----A---- C:\WINDOWS\system32\aclui.dll
2014-12-17 17:29:18 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-12-17 17:29:18 ----A---- C:\WINDOWS\system32\wlidcli.dll
2014-12-17 17:29:18 ----A---- C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2014-12-17 17:29:18 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2014-12-17 17:29:18 ----A---- C:\WINDOWS\system32\NL7Data0011.dll
2014-12-17 17:29:18 ----A---- C:\WINDOWS\system32\msv1_0.dll
2014-12-17 17:29:18 ----A---- C:\WINDOWS\system32\lpksetup.exe
2014-12-17 17:29:18 ----A---- C:\WINDOWS\system32\hgcpl.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\WMVSDECD.DLL
2014-12-17 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\sqlcese40.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\imapi2fs.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\clbcatq.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\wsecedit.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\tsmf.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\tdh.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\sxs.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\schannel.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\secproc_isv.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\secproc.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\opengl32.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\certmgr.dll
2014-12-17 17:29:17 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\SYSWOW64\gpprefcl.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\system32\WMADMOE.DLL
2014-12-17 17:29:16 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\system32\wer.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\system32\SyncCenter.dll
2014-12-17 17:29:16 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\wmpeffects.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\mssph.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\gameux.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\system32\services.exe
2014-12-17 17:29:15 ----A---- C:\WINDOWS\system32\netprofmsvc.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\system32\msdrm.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\system32\gpedit.dll
2014-12-17 17:29:15 ----A---- C:\WINDOWS\HelpPane.exe
2014-12-17 17:29:14 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2014-12-17 17:29:14 ----A---- C:\WINDOWS\SYSWOW64\psisdecd.dll
2014-12-17 17:29:14 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-12-17 17:29:14 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2014-12-17 17:29:13 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\SYSWOW64\EncDec.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\SYSWOW64\dsound.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\system32\wiaaut.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\system32\UIAnimation.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\system32\tpmvsc.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\system32\srmscan.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-12-17 17:29:13 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-12-17 17:29:12 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\SYSWOW64\es.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\SYSWOW64\ddraw.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\vds.exe
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\upnphost.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\mssph.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\msscp.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2014-12-17 17:29:12 ----A---- C:\WINDOWS\system32\catsrvut.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\SYSWOW64\sxs.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\SYSWOW64\hgcpl.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\system32\swprv.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\system32\SmartCardSimulator.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\system32\mswmdm.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-12-17 17:29:11 ----A---- C:\WINDOWS\system32\hnetcfg.dll
2014-12-17 17:29:11 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-12-17 17:29:11 ----A---- C:\WINDOWS\system32\calc.exe
2014-12-17 17:29:10 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-12-17 17:29:10 ----A---- C:\WINDOWS\system32\MSAC3ENC.DLL
2014-12-17 17:29:10 ----A---- C:\WINDOWS\system32\difxapi.dll
2014-12-17 17:29:10 ----A---- C:\WINDOWS\system32\advapi32.dll
2014-12-17 17:29:10 ----A---- C:\WINDOWS\system32\AdmTmpl.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Connectivity.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\qdvd.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\opengl32.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\MSWB70804.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\MSWB70404.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\MSWB7001E.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\MSWB70011.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\certmgr.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\SYSWOW64\advapi32.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\system32\webio.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\system32\netshell.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\system32\msra.exe
2014-12-17 17:29:09 ----A---- C:\WINDOWS\system32\Display.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\system32\ddraw.dll
2014-12-17 17:29:09 ----A---- C:\WINDOWS\system32\certutil.exe
2014-12-17 17:29:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\SYSWOW64\SyncCenter.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\wwanconn.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\wevtapi.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\pcasvc.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\oleacc.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\NlsData0816.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\NlsData0416.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\NlsData0414.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\NlsData001d.dll
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\DMRServer.exe
2014-12-17 17:29:08 ----A---- C:\WINDOWS\system32\aepic.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\SYSWOW64\d3d10.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\SYSWOW64\catsrvut.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\wvc.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\Windows.Devices.Usb.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\wbemcomn.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\sdohlp.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\RMActivate_isv.exe
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\NlsData0010.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\catsrv.dll
2014-12-17 17:29:07 ----A---- C:\WINDOWS\system32\AppxApplicabilityEngine.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\SYSWOW64\tsmf.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\SYSWOW64\tdh.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\SYSWOW64\secproc_isv.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\SYSWOW64\secproc.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\SYSWOW64\msdrm.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2014-12-17 17:29:06 ----A---- C:\WINDOWS\system32\themeui.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\system32\themecpl.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\system32\mswsock.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2014-12-17 17:29:06 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\SYSWOW64\provsvc.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\SYSWOW64\mswmdm.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\vmrdvcore.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\tapi3.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\SyncInfrastructure.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\RMActivate.exe
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\rdvvmtransport.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\provsvc.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\ninput.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\mdmregistration.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\ipsmsnap.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\fvewiz.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\cscui.dll
2014-12-17 17:29:05 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2014-12-17 17:29:04 ----A---- C:\WINDOWS\SYSWOW64\webio.dll
2014-12-17 17:29:04 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2014-12-17 17:29:04 ----A---- C:\WINDOWS\SYSWOW64\hnetcfg.dll
2014-12-17 17:29:04 ----A---- C:\WINDOWS\SYSWOW64\catsrv.dll
2014-12-17 17:29:04 ----A---- C:\WINDOWS\system32\wcncsvc.dll
2014-12-17 17:29:04 ----A---- C:\WINDOWS\system32\scesrv.dll
2014-12-17 17:29:04 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.SmartCards.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\wmpeffects.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\WFS.exe
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\upnp.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\NlsData0007.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\imapi2.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\dllhost.exe
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\cscsvc.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\bdesvc.dll
2014-12-17 17:29:03 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-12-17 17:29:02 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2014-12-17 17:29:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2014-12-17 17:29:02 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-12-17 17:29:02 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-12-17 17:29:02 ----A---- C:\WINDOWS\SYSWOW64\calc.exe
2014-12-17 17:29:02 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2014-12-17 17:29:02 ----A---- C:\WINDOWS\system32\NlsData000d.dll
2014-12-17 17:29:02 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2014-12-17 17:29:02 ----A---- C:\WINDOWS\system32\BCP47Langs.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\SYSWOW64\WMSPDMOE.DLL
2014-12-17 17:29:01 ----A---- C:\WINDOWS\SYSWOW64\themecpl.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\SYSWOW64\tapi3.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\SYSWOW64\ntshrui.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\SYSWOW64\netshell.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\SYSWOW64\mscms.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\system32\StikyNot.exe
2014-12-17 17:29:01 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\system32\ntshrui.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-12-17 17:29:01 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2014-12-17 17:29:01 ----A---- C:\WINDOWS\system32\azroles.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\wiaaut.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\UIAnimation.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\scesrv.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\RMActivate_isv.exe
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\provcore.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\wisp.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\usbmon.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\shsvcs.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\mssvp.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\msls31.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\livessp.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\eapp3hst.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\DscCore.dll
2014-12-17 17:29:00 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\SYSWOW64\wbemcomn.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\SYSWOW64\mswsock.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\SYSWOW64\msscp.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\system32\NlsData000c.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\system32\NlsData000a.dll
2014-12-17 17:28:59 ----A---- C:\WINDOWS\system32\appmgr.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\XpsRasterService.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\upnphost.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\upnp.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\ninput.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\AppxApplicabilityEngine.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\SYSWOW64\AdmTmpl.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\system32\w32time.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\system32\offfilt.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\system32\NL7Data0404.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\system32\mstsc.exe
2014-12-17 17:28:58 ----A---- C:\WINDOWS\system32\eappcfg.dll
2014-12-17 17:28:58 ----A---- C:\WINDOWS\system32\d3d10.dll
2014-12-17 17:28:57 ----A---- C:\WINDOWS\SYSWOW64\NL7Data0011.dll
2014-12-17 17:28:57 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2014-12-17 17:28:57 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2014-12-17 17:28:57 ----A---- C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2014-12-17 17:28:57 ----A---- C:\WINDOWS\system32\objsel.dll
2014-12-17 17:28:57 ----A---- C:\WINDOWS\system32\apphelp.dll
2014-12-17 17:28:56 ----A---- C:\WINDOWS\SYSWOW64\RMActivate.exe
2014-12-17 17:28:56 ----A---- C:\WINDOWS\SYSWOW64\ipsmsnap.dll
2014-12-17 17:28:56 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2014-12-17 17:28:56 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-12-17 17:28:56 ----A---- C:\WINDOWS\system32\iassdo.dll
2014-12-17 17:28:56 ----A---- C:\WINDOWS\system32\glmf32.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\SYSWOW64\wevtapi.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\WWanAPI.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\Windows.Graphics.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\rasmans.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\osk.exe
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\NL7Data0804.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\ncsi.dll
2014-12-17 17:28:55 ----A---- C:\WINDOWS\system32\devinv.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\SYSWOW64\winsku.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\SYSWOW64\msdt.exe
2014-12-17 17:28:54 ----A---- C:\WINDOWS\SYSWOW64\d3dim700.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\SYSWOW64\azroles.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\VAN.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\sechost.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\reseteng.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\qasf.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\mscms.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\eapphost.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\azroleui.dll
2014-12-17 17:28:54 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\SYSWOW64\wvc.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\SYSWOW64\imapi2.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\WPDSp.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\WMASF.DLL
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\winsta.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\taskeng.exe
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\netprofm.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\msdri.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\MFPlay.dll
2014-12-17 17:28:53 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-12-17 17:28:52 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2014-12-17 17:28:52 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2014-12-17 17:28:52 ----A---- C:\WINDOWS\SYSWOW64\msvcrt.dll
2014-12-17 17:28:52 ----A---- C:\WINDOWS\SYSWOW64\MP4SDECD.DLL
2014-12-17 17:28:52 ----A---- C:\WINDOWS\system32\WLanConn.dll
2014-12-17 17:28:52 ----A---- C:\WINDOWS\system32\TetheringMgr.dll
2014-12-17 17:28:52 ----A---- C:\WINDOWS\system32\FXSCOMPOSE.dll
2014-12-17 17:28:52 ----A---- C:\WINDOWS\system32\framedynos.dll
2014-12-17 17:28:52 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-12-17 17:28:52 ----A---- C:\WINDOWS\system32\certcli.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\SYSWOW64\wisp.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\SYSWOW64\mssvp.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\SYSWOW64\appmgr.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\WmpDui.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\wmicmiplugin.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\PeerDistSh.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\PeerDistCleaner.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\msdelta.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\filemgmt.dll
2014-12-17 17:28:51 ----A---- C:\WINDOWS\system32\efscore.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\rasgcw.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData0c1a.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData081a.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData0027.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData0026.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData0024.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData001b.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData001a.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData0018.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData000f.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData0003.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\NlsData0002.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\nlasvc.dll
2014-12-17 17:28:50 ----A---- C:\WINDOWS\system32\DfpCommon.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\ws2_32.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\winsku.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\taskcomp.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\PhotoMetadataHandler.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData004e.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData004c.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData004b.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData004a.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData0047.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData0046.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData0045.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData0039.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\NlsData0020.dll
2014-12-17 17:28:49 ----A---- C:\WINDOWS\system32\ncryptprov.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\SYSWOW64\SyncInfrastructure.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\SYSWOW64\sdohlp.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\xwizards.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\pnidui.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\NlsData0049.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\NlsData003e.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\NlsData002a.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\NlsData0022.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\NlsData0021.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\msvcrt.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\mftranscode.dll
2014-12-17 17:28:48 ----A---- C:\WINDOWS\system32\conhost.exe
2014-12-17 17:28:47 ----A---- C:\WINDOWS\SYSWOW64\WMASF.DLL
2014-12-17 17:28:47 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\SYSWOW64\shsvcs.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\SYSWOW64\qdv.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\SYSWOW64\mfdvdec.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\xmllite.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\stobject.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\msdt.exe
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\diskraid.exe
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-12-17 17:28:47 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\SYSWOW64\ws2_32.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.PointOfService.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\SYSWOW64\rasgcw.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\SYSWOW64\NlsData0007.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\winlogon.exe
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\sti.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\pnrpsvc.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\netdiagfx.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\msvcp60.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\DxpTaskSync.dll
2014-12-17 17:28:46 ----A---- C:\WINDOWS\system32\drmmgrtn.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Usb.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\taskcomp.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\prnfldr.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\offfilt.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\mssphtb.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\msls31.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\system32\scrptadm.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\system32\PCPTpm12.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\system32\fhcfg.dll
2014-12-17 17:28:45 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-12-17 17:28:44 ----A---- C:\WINDOWS\SYSWOW64\UserLanguagesCpl.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\SYSWOW64\mprapi.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\SYSWOW64\ipsecsnp.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\SYSWOW64\glmf32.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\SYSWOW64\filemgmt.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\WMVSENCD.DLL
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\WMSPDMOE.DLL
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\wlanpref.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\termmgr.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\ssdpsrv.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\IasMigPlugin.dll
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\drivers\csc.sys
2014-12-17 17:28:44 ----A---- C:\WINDOWS\system32\dlnashext.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\WLanConn.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\PhotoMetadataHandler.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\ncryptprov.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\MFWMAAEC.DLL
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\FXSCOMEX.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\dmime.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\SYSWOW64\azroleui.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\wpnapps.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\wincorlib.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\sensrsvc.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\RMActivate_ssp_isv.exe
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\qdv.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\mscandui.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\mfdvdec.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\d3d10core.dll
2014-12-17 17:28:43 ----A---- C:\WINDOWS\system32\d3d10_1core.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\SYSWOW64\WMVXENCD.DLL
2014-12-17 17:28:42 ----A---- C:\WINDOWS\SYSWOW64\wlidcli.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Profile.HardwareId.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Proximity.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\SYSWOW64\NlsData000a.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2014-12-17 17:28:42 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\system32\srcore.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\system32\rsaenh.dll
2014-12-17 17:28:42 ----A---- C:\WINDOWS\system32\RMActivate_ssp.exe
2014-12-17 17:28:42 ----A---- C:\WINDOWS\system32\DXP.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\WWanAPI.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\WinSATAPI.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\NlsData0816.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\NlsData0416.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\NlsData0414.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\NlsData001d.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\NlsData0010.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\SYSWOW64\netprofm.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\system32\wwanmm.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\system32\rasppp.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\system32\P2PGraph.dll
2014-12-17 17:28:41 ----A---- C:\WINDOWS\system32\icsvc.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\SYSWOW64\qasf.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\SYSWOW64\msdelta.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\SYSWOW64\mscandui.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\SYSWOW64\framedynos.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\SYSWOW64\d3dim.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\system32\WMVXENCD.DLL
2014-12-17 17:28:40 ----A---- C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\system32\Windows.Devices.Geolocation.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\system32\nettrace.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\system32\energy.dll
2014-12-17 17:28:40 ----A---- C:\WINDOWS\system32\DisplaySwitch.exe
2014-12-17 17:28:39 ----A---- C:\WINDOWS\SYSWOW64\WMVSENCD.DLL
2014-12-17 17:28:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\SYSWOW64\srmscan.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\SYSWOW64\P2PGraph.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\SYSWOW64\NlsData000d.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\SYSWOW64\MFPlay.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\SYSWOW64\BCP47Langs.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\WinSATAPI.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\spwizeng.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\fhengine.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\comsnap.dll
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\cmd.exe
2014-12-17 17:28:39 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\SYSWOW64\winsta.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\SYSWOW64\sechost.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\SYSWOW64\scrptadm.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\SYSWOW64\objsel.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\SYSWOW64\drvstore.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\system32\shlwapi.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\system32\SensorsClassExtension.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\system32\msvproc.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2014-12-17 17:28:38 ----A---- C:\WINDOWS\system32\iasnap.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\SYSWOW64\xmllite.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\SYSWOW64\sti.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\SYSWOW64\ksuser.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\SYSWOW64\iassdo.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\wmvdspa.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\WlanMM.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\SystemSettingsRemoveDevice.exe
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\sqlceoledb40.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\resutils.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\rdpendp.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\mbsmsapi.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\FirewallControlPanel.dll
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-12-17 17:28:37 ----A---- C:\WINDOWS\system32\CameraSettingsUIHost.exe
2014-12-17 17:28:36 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2014-12-17 17:28:36 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\SYSWOW64\RMActivate_ssp_isv.exe
2014-12-17 17:28:36 ----A---- C:\WINDOWS\SYSWOW64\RMActivate_ssp.exe
2014-12-17 17:28:36 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\SYSWOW64\NlsData000c.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\SYSWOW64\dlnashext.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\srmstormod.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\scecli.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\msutb.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\mprapi.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\mfh264enc.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\dwmredir.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\cryptnet.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\bdeunlock.exe
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\authfwcfg.dll
2014-12-17 17:28:36 ----A---- C:\WINDOWS\system32\activeds.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\xwizards.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\termmgr.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\spwizeng.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\netjoin.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\msutb.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\mfh264enc.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\FirewallControlPanel.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\devmgr.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\d3d10_1core.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\wdscore.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\prncache.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\netjoin.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\MP4SDECD.DLL
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\localsec.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\lltdsvc.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\lltdapi.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\hgprint.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\Dxpserver.exe
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\devmgr.dll
2014-12-17 17:28:35 ----A---- C:\WINDOWS\system32\cfgmgr32.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\WPDSp.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\wmvdspa.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\WmpDui.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\shlwapi.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\scecli.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\NL7Data0404.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\DxpTaskSync.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\drmmgrtn.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\certreq.exe
2014-12-17 17:28:34 ----A---- C:\WINDOWS\SYSWOW64\adsldp.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\system32\QAGENTRT.DLL
2014-12-17 17:28:34 ----A---- C:\WINDOWS\system32\NL7Data001E.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\system32\CryptoWinRT.dll
2014-12-17 17:28:34 ----A---- C:\WINDOWS\system32\AppIdPolicyEngineApi.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\SYSWOW64\efscore.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\SYSWOW64\DisplaySwitch.exe
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\Windows.Media.SpeechSynthesis.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\wcnwiz.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\ubpm.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\rastls.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\qdvd.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\dmvdsitf.dll
2014-12-17 17:28:33 ----A---- C:\WINDOWS\system32\cdd.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\wlanpref.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\PeerDistSh.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\PCPTpm12.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\NL7Data0804.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\msoeacct.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\mprddm.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\diskraid.exe
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\SYSWOW64\activeds.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\wkssvc.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\thumbcache.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\photowiz.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\msoeacct.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\iuilp.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\InputSwitch.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\fhcat.dll
2014-12-17 17:28:32 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\WlanMM.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData0c1a.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData081a.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData0026.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData0024.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData001b.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData001a.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData0018.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData000f.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData0003.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\SYSWOW64\NlsData0002.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\umrdp.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\TtlsCfg.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\rasman.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\prnfldr.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\fdprint.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\cscobj.dll
2014-12-17 17:28:31 ----A---- C:\WINDOWS\system32\adsldp.dll
2014-12-17 17:28:30 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_8.dll
2014-12-17 17:28:30 ----A---- C:\WINDOWS\SYSWOW64\NlsData0027.dll
2014-12-17 17:28:30 ----A---- C:\WINDOWS\SYSWOW64\d3d10core.dll
2014-12-17 17:28:30 ----A---- C:\WINDOWS\SYSWOW64\cryptnet.dll
2014-12-17 17:28:30 ----A---- C:\WINDOWS\SYSWOW64\cmd.exe
2014-12-17 17:28:30 ----A---- C:\WINDOWS\SYSWOW64\authfwcfg.dll
2014-12-17 17:28:30 ----A---- C:\WINDOWS\system32\rascustom.dll
2014-12-17 17:28:30 ----A---- C:\WINDOWS\system32\mssha.dll
2014-12-17 17:28:29 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll
2014-12-17 17:28:29 ----A---- C:\WINDOWS\SYSWOW64\cmdial32.dll
2014-12-17 17:28:29 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2014-12-17 17:28:29 ----A---- C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2014-12-17 17:28:29 ----A---- C:\WINDOWS\system32\wevtutil.exe
2014-12-17 17:28:29 ----A---- C:\WINDOWS\system32\NAPMONTR.DLL
2014-12-17 17:28:28 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\SYSWOW64\rdpendp.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\SYSWOW64\miutils.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\SYSWOW64\cryptui.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\SYSWOW64\comsnap.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\WwaApi.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\ulib.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\sspicli.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\pdh.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\mssphtb.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\msinfo32.exe
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\miutils.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\migflt.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\DscCoreConfProv.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\DeviceCenter.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\connect.dll
2014-12-17 17:28:28 ----A---- C:\WINDOWS\system32\comctl32.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\SYSWOW64\taskeng.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\SYSWOW64\NlsData004b.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\SYSWOW64\NlsData0047.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\SYSWOW64\NlsData0039.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\SYSWOW64\NlsData0020.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\SYSWOW64\msinfo32.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\SYSWOW64\adsnt.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\UserAccountBroker.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\SlideToShutDown.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\ProximityUxHost.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\PickerHost.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\mblctr.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\hotspotauth.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\gpresult.exe
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\dinput8.dll
2014-12-17 17:28:27 ----A---- C:\WINDOWS\system32\accessibilitycpl.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\WsmWmiPl.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\rasmontr.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\NlsData004e.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\NlsData004c.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\NlsData004a.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\NlsData0049.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\NlsData0046.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\NlsData0045.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\ifsutil.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\winmmbase.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\wimserv.exe
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\wimgapi.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\srchadmin.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\spp.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\rdbui.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\NlsData0000.dll
2014-12-17 17:28:26 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\tapisrv.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\NlsData003e.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\NlsData002a.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\NlsData0022.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\NlsData0021.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\msdtcuiu.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\SYSWOW64\IasMigPlugin.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\xwtpdui.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\wksprt.exe
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\TabSvc.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\shacct.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\PortableDeviceTypes.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\msdtckrm.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\ListSvc.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\iassam.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\fveapibase.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2014-12-17 17:28:25 ----A---- C:\WINDOWS\system32\cewmdm.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Geolocation.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\sqlceoledb40.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\nshipsec.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\mbsmsapi.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\iasnap.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\cscobj.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\cfgmgr32.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\SYSWOW64\cewmdm.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\WinSyncMetastore.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\wecsvc.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\wavemsp.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\SndVol.exe
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\sbeio.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\rasmontr.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\p2psvc.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\ncrypt.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\mfps.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\iasrecst.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\fhcpl.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\AuthHost.exe
2014-12-17 17:28:24 ----A---- C:\WINDOWS\system32\apprepsync.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\WSSync.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\winmmbase.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\srchadmin.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\SndVol.exe
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\NAPMONTR.DLL
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\MbaeApiPublic.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\gpresult.exe
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\fdprint.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\SYSWOW64\dmvdsitf.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\wdigest.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\Vault.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\srumsvc.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\RADCUI.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\PlayToManager.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\InkEd.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\IDStore.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\framedyn.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\dxva2.dll
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\diskpart.exe
2014-12-17 17:28:23 ----A---- C:\WINDOWS\system32\deviceregistration.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\wcnwiz.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\ulib.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\odbcjt32.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\netdiagfx.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\dmdskmgr.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\system32\scrobj.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\system32\msrdc.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\system32\msieftp.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2014-12-17 17:28:22 ----A---- C:\WINDOWS\system32\aelupsvc.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\wevtutil.exe
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\wdigest.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\sbeio.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\riched32.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\NL7Data001E.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\SYSWOW64\DeviceCenter.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\sqmapi.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\rasdlg.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\MSWB7.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\mibincodec.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\FXSSVC.exe
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\apds.dll
2014-12-17 17:28:21 ----A---- C:\WINDOWS\system32\adsnt.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\WSClient.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.ApplicationData.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\wdscore.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\srumsvc.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\prntvpt.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\ntmarta.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\InputSwitch.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\framedyn.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\dinput8.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\wmpps.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\SnippingTool.exe
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\SensorsCpl.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\provthrd.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\IPHLPAPI.DLL
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\FXSCOVER.exe
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\drvstore.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\CertEnrollUI.dll
2014-12-17 17:28:20 ----A---- C:\WINDOWS\system32\appidpolicyconverter.exe
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\xwtpdui.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\WinSyncMetastore.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.SpeechSynthesis.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\tapi32.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\ncrypt.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\esentutl.exe
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\dmdlgs.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\CertEnrollUI.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\SYSWOW64\accessibilitycpl.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\XAudio2_8.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\wmidx.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\sstpsvc.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\SettingMonitor.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\recimg.exe
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\MFWMAAEC.DLL
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\iasrad.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\DiagCpl.dll
2014-12-17 17:28:19 ----A---- C:\WINDOWS\system32\certreq.exe
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\wmidx.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\verifier.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\raschap.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\qwave.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\NlsData0000.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\netiohlp.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\msvcp60.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\msieftp.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\itircl.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\iasrecst.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\diskpart.exe
2014-12-17 17:28:18 ----A---- C:\WINDOWS\SYSWOW64\CryptoWinRT.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\WebClnt.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\tcpmon.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\RTWorkQ.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\prntvpt.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\ppcsnap.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\PortableDeviceSyncProvider.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\netcorehc.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\msnetobj.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\mprddm.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\itircl.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\dskquoui.dll
2014-12-17 17:28:18 ----A---- C:\WINDOWS\system32\DAFWSD.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\wiadefui.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\VIDRESZR.DLL
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\uudf.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\TtlsCfg.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\tracerpt.exe
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\scansetting.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\mdmregistration.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\localsec.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\IDStore.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\dxdiagn.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\SYSWOW64\audiodev.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\wmitomi.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\ufat.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\tapisrv.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\shwebsvc.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\scansetting.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\Magnify.exe
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\fvecpl.dll
2014-12-17 17:28:17 ----A---- C:\WINDOWS\system32\das.dll
2014-12-17 17:28:16 ----A---- C:\WINDOWS\SYSWOW64\winmm.dll
2014-12-17 17:28:16 ----A---- C:\WINDOWS\SYSWOW64\shacct.dll
2014-12-17 17:28:16 ----A---- C:\WINDOWS\SYSWOW64\mtxclu.dll
2014-12-17 17:28:16 ----A---- C:\WINDOWS\SYSWOW64\Magnify.exe
2014-12-17 17:28:16 ----A---- C:\WINDOWS\SYSWOW64\authz.dll
2014-12-17 17:28:16 ----A---- C:\WINDOWS\system32\WSClient.dll
2014-12-17 17:28:16 ----A---- C:\WINDOWS\system32\uudf.dll
2014-12-17 17:28:16 ----A---- C:\WINDOWS\system32\ifsutil.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\SYSWOW64\wlanui.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\SYSWOW64\mcbuilder.exe
2014-12-17 17:28:15 ----A---- C:\WINDOWS\SYSWOW64\dxva2.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\SYSWOW64\dmstyle.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\SYSWOW64\COLORCNV.DLL
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\wkspbroker.exe
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\userenv.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\SysFxUI.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\PurchaseWindowsLicense.exe
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\psmsrv.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\psapi.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\PeerDist.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\ntmarta.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\itss.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\fundisc.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\cabinet.dll
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\bitsadmin.exe
2014-12-17 17:28:15 ----A---- C:\WINDOWS\system32\aitstatic.exe
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\wavemsp.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\sdiageng.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\psr.exe
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceTypes.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\mibincodec.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\iassam.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\dxdiag.exe
2014-12-17 17:28:14 ----A---- C:\WINDOWS\SYSWOW64\connect.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\WinSyncProviders.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\schtasks.exe
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\netman.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\IdListen.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\fontext.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\dxdiag.exe
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\devobj.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\CloudStorageWizard.exe
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\cic.dll
2014-12-17 17:28:14 ----A---- C:\WINDOWS\system32\biwinrt.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\SYSWOW64\SettingMonitor.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\SYSWOW64\RTWorkQ.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\SYSWOW64\MPG4DECD.DLL
2014-12-17 17:28:13 ----A---- C:\WINDOWS\SYSWOW64\MP43DECD.DLL
2014-12-17 17:28:13 ----A---- C:\WINDOWS\SYSWOW64\InkEd.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\SYSWOW64\fontext.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\SYSWOW64\dsquery.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\Windows.Management.Workplace.WorkplaceSettings.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\verifier.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\SPInf.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\softkbd.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\sdiageng.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\QAGENT.DLL
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\nlhtml.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\NetworkStatus.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\NAPSTAT.EXE
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\msched.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\msctfui.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\mcbuilder.exe
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\efswrt.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\dot3gpui.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\dmusic.dll
2014-12-17 17:28:13 ----A---- C:\WINDOWS\system32\authz.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\wlancfg.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\ufat.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\softkbd.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\SensorsCpl.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\RADCUI.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\provthrd.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\msrdc.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\msnetobj.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\msctfui.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\SYSWOW64\AppIdPolicyEngineApi.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\Windows.Storage.Compression.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\TetheringStation.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\MPG4DECD.DLL
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\MP43DECD.DLL
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\elshyph.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\BioCredProv.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\AltTab.dll
2014-12-17 17:28:12 ----A---- C:\WINDOWS\system32\ActionQueue.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\wmitomi.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\WinSyncProviders.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\schtasks.exe
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\shwebsvc.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\scrrun.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\mssha.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\iasrad.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\dskquoui.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\difxapi.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\wscinterop.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\wpnprv.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\windowslivelogin.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\wiadefui.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\SCardSvr.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\psr.exe
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\mtxclu.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\imapi.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\esentutl.exe
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\embeddedapplauncher.exe
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\dsquery.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\drt.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\dbnetlib.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\auditcse.dll
2014-12-17 17:28:11 ----A---- C:\WINDOWS\system32\AppxSip.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\SYSWOW64\zipfldr.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Enumeration.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\SYSWOW64\srmstormod.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\SYSWOW64\negoexts.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\SYSWOW64\fundisc.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\SYSWOW64\dsprop.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\SYSWOW64\dot3gpui.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\WUDFSvc.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\vssadmin.exe
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\vdsdyn.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\unattend.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\TtlsAuth.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\prnntfy.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\NetSetupApi.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\netcenter.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\negoexts.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\mpr.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\LockScreenContent.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\fveui.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\els.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\dsprop.dll
2014-12-17 17:28:10 ----A---- C:\WINDOWS\system32\atl.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\rastapi.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceSyncProvider.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\netcorehc.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\MSWB7.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\mlang.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\fdWSD.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\Faultrep.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\eudcedit.exe
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\els.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\dmusic.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\SYSWOW64\devobj.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\VIDRESZR.DLL
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\txflog.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\tpmvscmgrsvr.exe
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\sqlcecompact40.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\rmttpmvscmgrsvr.exe
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\mycomput.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\mlang.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\IPSECSVC.DLL
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\immersivetpmvscmgrsvr.exe
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\BthHFSrv.dll
2014-12-17 17:28:09 ----A---- C:\WINDOWS\system32\bootux.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\SYSWOW64\RESAMPLEDMO.DLL
2014-12-17 17:28:08 ----A---- C:\WINDOWS\SYSWOW64\rasman.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\SYSWOW64\notepad.exe
2014-12-17 17:28:08 ----A---- C:\WINDOWS\SYSWOW64\drt.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\SYSWOW64\atl.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\Tabbtn.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\ndfapi.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\fhshl.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\fdWSD.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2014-12-17 17:28:08 ----A---- C:\WINDOWS\system32\bcrypt.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\SYSWOW64\ssText3d.scr
2014-12-17 17:28:07 ----A---- C:\WINDOWS\SYSWOW64\netcenter.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\SYSWOW64\CloudStorageWizard.exe
2014-12-17 17:28:07 ----A---- C:\WINDOWS\SYSWOW64\bitsadmin.exe
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\zipfldr.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\WSSync.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\WerFault.exe
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\tpmvscmgr.exe
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\SimCfg.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\RESAMPLEDMO.DLL
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\netiohlp.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\imm32.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\dps.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\cca.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\BrokerLib.dll
2014-12-17 17:28:07 ----A---- C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2014-12-17 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\wscript.exe
2014-12-17 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\tcpipcfg.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\mpr.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2014-12-17 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\cabinet.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\biwinrt.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\SYSWOW64\appmgmts.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\wlanui.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\tcpipcfg.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\notepad.exe
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\easwrt.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\ddpchunk.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\system32\ConfigureExpandedStorage.dll
2014-12-17 17:28:06 ----A---- C:\WINDOWS\notepad.exe
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Management.Workplace.WorkplaceSettings.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\polstore.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\IPHLPAPI.DLL
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\imm32.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\imapi.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\efswrt.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\WPDShServiceObj.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\wmidcom.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\winmm.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\ssText3d.scr
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\SSShim.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\srmshell.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\rgb9rast.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\RestoreOptIn.exe
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\rastapi.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\puiapi.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\mmcbase.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\iassvcs.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\globinputhost.dll
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\COLORCNV.DLL
2014-12-17 17:28:05 ----A---- C:\WINDOWS\system32\amstream.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\wscapi.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\Vault.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\regedit.exe
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\rasppp.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\powercpl.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\PeerDist.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\SYSWOW64\cic.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\system32\twext.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\system32\profsvcext.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-12-17 17:28:03 ----A---- C:\WINDOWS\system32\fdeploy.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\wscinterop.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\txflog.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\olethk32.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\mprdim.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\easwrt.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\dinput.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\dbnetlib.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\apds.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\SYSWOW64\amstream.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\wscapi.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\vdsbas.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\taskhost.exe
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\scrrun.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\rshx32.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\powercpl.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\ncbservice.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\mtxoci.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\mtstocom.exe
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\mimofcodec.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\chartv.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\dinput.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\comrepl.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\adsldpc.dll
2014-12-17 17:28:02 ----A---- C:\WINDOWS\system32\adrclient.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\wmpdxm.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\sqlcecompact40.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\rtm.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\rshx32.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\RestoreOptIn.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\OEMLicense.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\nlhtml.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\mtstocom.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\mstask.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\MP3DMOD.DLL
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\logoncli.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\fde.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\elshyph.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\dmcompos.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\dllhst3g.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\dllhost.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\comrepl.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\SYSWOW64\cca.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\xwtpw32.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\wscript.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\WinSetupUI.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\Winlangdb.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\wevtfwd.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\wbadmin.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\SpaceControl.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\PresentationSettings.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\OEMLicense.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\msaatext.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\dwm.exe
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\dskquota.dll
2014-12-17 17:28:01 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\twext.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\SimCfg.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\rasplap.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\QAGENT.DLL
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceWiaCompat.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\p2pnetsh.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\msoert2.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\iassvcs.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\SYSWOW64\BioCredProv.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\wpd_ci.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\WinRtTracing.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\p2pnetsh.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\msasn1.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\fms.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\dmdlgs.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\cryptui.dll
2014-12-17 17:28:00 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\wmidcom.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\TtlsAuth.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\oledlg.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\ntprint.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\nlmgp.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\NAPSTAT.EXE
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\mycomput.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\mmcbase.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\devenum.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\d3d10_1.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\SYSWOW64\advpack.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\wkspbrokerAx.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\Windows.Networking.HostName.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\wiadss.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\sud.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\qwave.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\fde.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\Faultrep.dll
2014-12-17 17:27:59 ----A---- C:\WINDOWS\system32\bcdprov.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\SYSWOW64\ntasn1.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\SYSWOW64\ndfapi.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\SYSWOW64\mtxoci.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\SYSWOW64\msacm32.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\SYSWOW64\dmscript.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\SoundRecorder.exe
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\remotepg.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\ntasn1.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\nlaapi.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\msdtclog.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\mfvdsp.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\logoncli.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\cscript.exe
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\cmdial32.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\CallButtons.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\BdeHdCfgLib.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\AxInstSv.dll
2014-12-17 17:27:58 ----A---- C:\WINDOWS\system32\advpack.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\wiadss.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\sud.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\sdiagprv.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\rekeywiz.exe
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\radardt.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\P2P.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\net1.exe
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\loadperf.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\input.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\chartv.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\fdeploy.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\cryptuiwizard.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\system32\TSWbPrxy.exe
2014-12-17 17:27:57 ----A---- C:\WINDOWS\system32\trkwks.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\system32\fdWCN.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\system32\dafBth.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\system32\asycfilt.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\system32\appmgmts.dll
2014-12-17 17:27:57 ----A---- C:\WINDOWS\system32\ActionCenterCPL.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\xwtpw32.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\WPDShServiceObj.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Storage.Compression.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\rgb9rast.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceWMDRM.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\iscsicpl.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\dskquota.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\avifil32.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\SYSWOW64\adsmsext.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\WLanHC.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\wlancfg.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\vaultcli.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\SMBHelperClass.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\mstask.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\msoert2.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\devenum.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\dafupnp.dll
2014-12-17 17:27:56 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\SYSWOW64\windowslivelogin.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\SYSWOW64\unregmp2.exe
2014-12-17 17:27:55 ----A---- C:\WINDOWS\SYSWOW64\mfvdsp.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\SYSWOW64\dot3ui.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\SYSWOW64\adsldpc.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\SYSWOW64\ActionCenterCPL.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\wusa.exe
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\VaultRoaming.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\TabbtnEx.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\SearchFilterHost.exe
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\sdiagprv.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\DeviceSetupManager.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\cryptsvc.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\certca.dll
2014-12-17 17:27:55 ----A---- C:\WINDOWS\system32\avifil32.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\verifier.exe
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\srmshell.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\remotepg.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\prncache.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\odbccp32.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\newdev.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\dsuiext.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\SYSWOW64\dssenh.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\tracerpt.exe
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\taskkill.exe
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\systemreset.exe
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\sdclt.exe
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\RASMM.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\raschap.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\ProximityCommon.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\ndishc.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\MP3DMOD.DLL
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\icsigd.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\fvenotify.exe
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\dsuiext.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\dnshc.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\discan.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2014-12-17 17:27:54 ----A---- C:\WINDOWS\system32\adsmsext.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\wkspbrokerAx.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\SSShim.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\oleprn.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\nlaapi.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\msvfw32.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\msaatext.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\fdSSDP.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\dccw.exe
2014-12-17 17:27:53 ----A---- C:\WINDOWS\SYSWOW64\cmifw.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\winsrv.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\P2P.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\nlmgp.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\ndfhcdiscovery.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\ndfetw.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\msrahc.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\imagehlp.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\fhsvc.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\eapsvc.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\ddrawex.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\cryptcatsvc.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\cmifw.dll
2014-12-17 17:27:53 ----A---- C:\WINDOWS\system32\AepRoam.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\wiashext.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\uexfat.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\shdocvw.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\powrprof.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\fms.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\credui.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\SYSWOW64\AuthBroker.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\wiashext.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\wecapi.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\wdi.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\uexfat.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\taskhostex.exe
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\spoolss.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\smbwmiv2.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\RstrtMgr.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\rekeywiz.exe
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\PortableDeviceStatus.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\oleprn.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\icfupgd.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\eudcedit.exe
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\ELSCore.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\EhStorShell.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\devrtl.dll
2014-12-17 17:27:52 ----A---- C:\WINDOWS\system32\cmstp.exe

[kostik123456]

3 LOG -

2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\Winlangdb.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Devices.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\ssdpapi.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\SPInf.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\shsetup.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\msasn1.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\FXSXP32.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\ELSCore.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\dsdmo.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\cryptxml.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\CallButtons.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\SYSWOW64\adrclient.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\WinOpcIrmProtector.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\WinMsoIrmProtector.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\wininit.exe
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\Windows.Media.Devices.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\Windows.Devices.Custom.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\shdocvw.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\RDSAppXHelper.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\raserver.exe
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\prvdmofcomp.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\PkgMgr.exe
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\IdCtrls.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\fveprompt.exe
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\dssenh.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\dot3ui.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\cryptdll.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\BthRadioMedia.dll
2014-12-17 17:27:51 ----A---- C:\WINDOWS\system32\alg.exe
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\WinRtTracing.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.HostName.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\taskkill.exe
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\raserver.exe
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceClassExtension.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\modemui.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\mfps.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\mfmjpegdec.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\mfAACEnc.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\globinputhost.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\wlandlg.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\umpo.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\SNTSearch.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\rasplap.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\manage-bde.exe
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\fmapi.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\dafWCN.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\d3d10_1.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\CscMig.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\BthpanContextHandler.dll
2014-12-17 17:27:50 ----A---- C:\WINDOWS\system32\browser.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\SYSWOW64\WinOpcIrmProtector.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\SYSWOW64\WinMsoIrmProtector.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.WiFiDirect.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\SYSWOW64\wevtfwd.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\SYSWOW64\systeminfo.exe
2014-12-17 17:27:49 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceStatus.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\SYSWOW64\msorcl32.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\Windows.Devices.Background.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\ssdpapi.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\pwlauncher.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\OpenWith.exe
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\msdart.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\mfAACEnc.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\logagent.exe
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\iasacct.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\fphc.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\dot3mm.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\DevicePairingFolder.dll
2014-12-17 17:27:49 ----A---- C:\WINDOWS\system32\certprop.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\SYSWOW64\WsmAuto.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\SYSWOW64\SMBHelperClass.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\SYSWOW64\setupugc.exe
2014-12-17 17:27:48 ----A---- C:\WINDOWS\SYSWOW64\SearchFilterHost.exe
2014-12-17 17:27:48 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommon.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\SYSWOW64\dfrgui.exe
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\WcnApi.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\themeservice.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\systeminfo.exe
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\Sens.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\playlistfolder.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\msconfig.exe
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\KeyboardFilterSvc.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\fhsrchph.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\fhsrchapi.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\fdBth.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\DeviceElementSource.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\correngine.dll
2014-12-17 17:27:48 ----A---- C:\WINDOWS\system32\apprepapi.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\vssadmin.exe
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\msdart.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\mimofcodec.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\icsigd.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\glu32.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\fdWCN.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\SYSWOW64\fdBth.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\winethc.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\wecutil.exe
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\uxlib.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\threadpoolwinrt.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\rtm.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\odbccu32.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\odbccr32.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\ConsentUX.dll
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\Bubbles.scr
2014-12-17 17:27:47 ----A---- C:\WINDOWS\system32\basecsp.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\vaultcli.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\odbccu32.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\odbccr32.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\logagent.exe
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\iscsiwmi.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\IdCtrls.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\DevicePairingFolder.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\cttune.exe
2014-12-17 17:27:46 ----A---- C:\WINDOWS\SYSWOW64\colbact.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\WsmAuto.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\wpninprc.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\wlidfdp.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\WABSyncProvider.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\usbceip.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\tapi32.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\samcli.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\Ribbons.scr
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\QUTIL.DLL
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\ncobjapi.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\Mystify.scr
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\fdSSDP.dll
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\EAPQEC.DLL
2014-12-17 17:27:46 ----A---- C:\WINDOWS\system32\cscapi.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\wdi.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\tasklist.exe
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\SimAuth.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\samcli.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\RstrtMgr.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\OpenWith.exe
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\eqossnap.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\wwansvc.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\verifier.exe
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\Utilman.exe
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\sethc.exe
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\scripto.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\ScDeviceEnum.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\mprdim.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\L2SecHC.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\KMSVC.DLL
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\kd_02_8086.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\iashlpr.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\iasads.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\glu32.dll
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\EaseOfAccessDialog.exe
2014-12-17 17:27:45 ----A---- C:\WINDOWS\system32\DAMM.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\xcopy.exe
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\wmpshell.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\networkexplorer.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\netplwiz.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\msdadiag.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\logman.exe
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\cmstp.exe
2014-12-17 17:27:44 ----A---- C:\WINDOWS\SYSWOW64\Bubbles.scr
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\xcopy.exe
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\TSpkg.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\scavengeui.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\profapi.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\polstore.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\nlahc.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\networkitemfactory.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\networkexplorer.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\NdisImPlatform.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\mtxdm.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\msacm32.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\drivers\rassstp.sys
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\cryptsp.dll
2014-12-17 17:27:44 ----A---- C:\WINDOWS\system32\colbact.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\TpmInit.exe
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\t2embed.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\syncui.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\Syncreg.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\secproc_ssp_isv.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\secproc_ssp.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\Ribbons.scr
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\ntlanman.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\Mystify.scr
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\mi.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\fphc.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\ConfigureExpandedStorage.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\SYSWOW64\compstui.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\TapiMigPlugin.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\srmtrace.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\SimAuth.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\setupugc.exe
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\sessionmsg.exe
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\rdsdwmdr.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\PrintDialogHost.exe
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\oledlg.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\netprovisionsp.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\nduprov.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\mfmjpegdec.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\korwbrkr.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\igdDiag.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\iasdatastore.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\dccw.exe
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\cttune.exe
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\bitsigd.dll
2014-12-17 17:27:43 ----A---- C:\WINDOWS\system32\autoplay.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\wlandlg.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Custom.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\prvdmofcomp.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\profapi.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\korwbrkr.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\icm32.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\iasacct.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\getmac.exe
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\cryptsp.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\cryptdll.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\SYSWOW64\CertPolEng.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\winsockhc.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\wiascanprofiles.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\Syncreg.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\sfc_os.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\secproc_ssp_isv.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\secproc_ssp.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\Query.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\profprov.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\powrprof.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\nshipsec.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\netid.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\MsSpellCheckingHost.exe
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\mi.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\gacinstall.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\drivers\pacer.sys
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\dot3hc.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\dot3api.dll
2014-12-17 17:27:42 ----A---- C:\WINDOWS\system32\CertPolEng.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\SYSWOW64\WABSyncProvider.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\SYSWOW64\synceng.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\SYSWOW64\scripto.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\SYSWOW64\ntdsapi.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\SYSWOW64\ndishc.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\SYSWOW64\charmap.exe
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\wmpshell.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\WfHC.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\RpcEpMap.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\QCLIPROV.DLL
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\packager.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\ntlanman.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\logman.exe
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\input.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\inetpp.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\getmac.exe
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\EhStorAPI.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\dsdmo.dll
2014-12-17 17:27:41 ----A---- C:\WINDOWS\system32\consent.exe
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\wtsapi32.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\wshext.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\wlansec.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Background.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\wecapi.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\usbceip.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\systemcpl.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\olecli32.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\netprovisionsp.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\ndfhcdiscovery.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\iashlpr.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\fmifs.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\driverquery.exe
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\colorui.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\SYSWOW64\autoplay.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\udhisapi.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\synceng.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\RpcRtRemote.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\PortableDeviceConnectApi.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\net1.exe
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\mbussdapi.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\eappgnui.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\ddptrace.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\cryptxml.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2014-12-17 17:27:40 ----A---- C:\WINDOWS\system32\AuditPolicyGPInterop.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\wiascanprofiles.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\WcnApi.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\threadpoolwinrt.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\TapiMigPlugin.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\RpcRtRemote.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\racpldlg.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\playlistfolder.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\MicrosoftAccountTokenProvider.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\loghours.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\fsutil.exe
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\EhStorAPI.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\dssec.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\ddrawex.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\SYSWOW64\cliconfg.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\WwanRadioManager.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\WSManMigrationPlugin.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\WlanRadioManager.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\wkscli.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\Windows.Media.Renewal.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\tasklist.exe
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\taskbarcpl.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\systemcpl.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\ocsetapi.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\fwcfg.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\fveskybackup.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\Dsui.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\drivers\fsdepends.sys
2014-12-17 17:27:39 ----A---- C:\WINDOWS\system32\ConnectedAccountState.dll
2014-12-17 17:27:39 ----A---- C:\WINDOWS\regedit.exe
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\wlgpclnt.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\winsockhc.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\udhisapi.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\Storprop.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\srvcli.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\powercfg.exe
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\net.exe
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\mciavi32.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\mbussdapi.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\makecab.exe
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\L2SecHC.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\iasads.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\dot3hc.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\dmsynth.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\devrtl.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\SYSWOW64\apprepsync.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\wlgpclnt.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\ustprov.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\pautoenr.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\MbaeParserTask.exe
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\FXSROUTE.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\frprov.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\fhcleanup.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\eqossnap.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\dot3svc.dll
2014-12-17 17:27:38 ----A---- C:\WINDOWS\system32\dab.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\wecutil.exe
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\ustprov.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\unimdmat.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\Query.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\ncobjapi.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\mssign32.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\iasdatastore.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\frprov.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\EAPQEC.DLL
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\dsrole.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\dot3cfg.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\SYSWOW64\cscapi.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\wtsapi32.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\umpowmi.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\scksp.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\regsvc.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\msdadiag.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\loghours.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\ksuser.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\iscsiwmiv2.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\dmloader.dll
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\DHCPQEC.DLL
2014-12-17 17:27:37 ----A---- C:\WINDOWS\system32\compstui.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\WSManMigrationPlugin.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\wkscli.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\usbui.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\MsSpellCheckingHost.exe
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\msiexec.exe
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\mapistub.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\mapi32.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\SYSWOW64\bcd.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\wshext.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\srvcli.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\netplwiz.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\makecab.exe
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\Groupinghc.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\dssec.dll
2014-12-17 17:27:36 ----A---- C:\WINDOWS\system32\Defrag.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\wlidfdp.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\WfHC.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\uxlib.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\Utilman.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\sfc_os.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\rdvvmtransport.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\PortableDeviceConnectApi.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\onexui.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\networkitemfactory.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\ftp.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\Dsui.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\DfsShlEx.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\ConnectedAccountState.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\SYSWOW64\bootcfg.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\xmlfilter.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\TpmInit.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\Pnrphc.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\pnpclean.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\mydocs.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\msisip.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\l2nacp.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\fhtask.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\drivers\vmbkmcl.sys
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\driverquery.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\dmsynth.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\dfrgui.exe
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\colorui.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\basesrv.dll
2014-12-17 17:27:35 ----A---- C:\WINDOWS\system32\aitagent.exe
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\vfwwdm32.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\QUTIL.DLL
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\netutils.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\netapi32.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\msident.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\mdminst.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\iscsiwmiv2.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\iccvid.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\gcdef.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\FXSCOM.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\format.com
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\dmloader.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\d3dxof.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\Robocopy.exe
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\recovery.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\radardt.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\PNPXAssoc.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\MsRdpWebAccess.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\msiexec.exe
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\MaintenanceUI.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\isoburn.exe
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\eappprxy.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\DfsShlEx.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\ddputils.dll
2014-12-17 17:27:34 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\twain_32.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\xmlfilter.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\winrscmd.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\regapi.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\QCLIPROV.DLL
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\onex.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\nslookup.exe
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\netid.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\fwcfg.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\EaseOfAccessDialog.exe
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\DHCPQEC.DLL
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\BWContextHandler.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\avicap32.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\WWanHC.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\Windows.Devices.Printers.Extensions.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\racpldlg.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\onexui.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\netutils.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\net.exe
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\mimefilt.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\httpapi.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\dispdiag.exe
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\credui.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\BWContextHandler.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\bidispl.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\atmfd.dll
2014-12-17 17:27:33 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\xwreg.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\UserAccountBroker.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\spfileq.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\SortWindows6Compat.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\PickerHost.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\NapiNSP.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\mydocs.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\MsRdpWebAccess.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\l2nacp.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\keymgr.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\isoburn.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\findnetprinters.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\efsadu.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\DWWIN.EXE
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\dmband.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\CredentialUIBroker.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\CameraSettingsUIHost.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\bidispl.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\AuditPolicyGPInterop.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\SYSWOW64\apprepapi.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\winbio.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\UserAccountControlSettings.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\umb.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\sendmail.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\sdiagschd.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\RegCtrl.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\msvcirt.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\McxDriv.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\luainstall.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\HelpPaneProxy.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\gcdef.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\FXSCOM.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\ftp.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\fontsub.dll
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\dasHost.exe
2014-12-17 17:27:32 ----A---- C:\WINDOWS\system32\DAConn.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\wiaacmgr.exe
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\uireng.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\stclient.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\samlib.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\RegCtrl.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\pdhui.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\netsh.exe
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\mmcshext.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\DevDispItemProvider.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\cnvfat.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\CloudNotifications.exe
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\cfgbkend.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\SYSWOW64\appidapi.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\wiaacmgr.exe
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\vdsutil.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\ucmhc.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\syncui.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\SyncHost.exe
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\stclient.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\SrpUxNativeSnapIn.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\RoamingSecurity.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\PlayToStatusProvider.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\mmcss.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\mmcshext.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\mciqtz32.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\iscsiwmi.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\irftp.exe
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\fhlisten.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\EmbeddedAppLauncherConfig.dll
2014-12-17 17:27:31 ----A---- C:\WINDOWS\system32\CloudNotifications.exe
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\wmpps.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Printers.Extensions.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\UserAccountControlSettings.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\SyncHost.exe
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\svchost.exe
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\spbcd.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\shrpubw.exe
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\luainstall.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\fdPnp.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\dot3api.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\btpanui.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\SYSWOW64\acppage.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\werui.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\rasauto.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\printfilterpipelineprxy.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\pcwutl.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\mapistub.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\mapi32.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\fmifs.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\findnetprinters.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\fdPnp.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\FdDevQuery.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\elslad.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\CredentialUIBroker.exe
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\cnvfat.dll
2014-12-17 17:27:30 ----A---- C:\WINDOWS\system32\cabview.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\ucmhc.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\rrinstaller.exe
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\pautoenr.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\openfiles.exe
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\ndfetw.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\mimefilt.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\mciqtz32.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\HelpPaneProxy.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\SYSWOW64\console.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\svchost.exe
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\spfileq.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\msvfw32.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\keyiso.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\easinvoker.exe
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\dot3dlg.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\DeviceDisplayStatusManager.dll
2014-12-17 17:27:29 ----A---- C:\WINDOWS\system32\AtBroker.exe
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\utildll.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\takeown.exe
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\srmtrace.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\signdrv.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\msimtf.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\msdmo.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\cryptext.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\SYSWOW64\cmdl32.exe
2014-12-17 17:27:28 ----A---- C:\WINDOWS\system32\wercplsupport.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\system32\rrinstaller.exe
2014-12-17 17:27:28 ----A---- C:\WINDOWS\system32\RDSPnf.exe
2014-12-17 17:27:28 ----A---- C:\WINDOWS\system32\PeerDistAD.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\system32\offreg.dll
2014-12-17 17:27:28 ----A---- C:\WINDOWS\system32\msimtf.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\wlanext.exe
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\winbio.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\RemoveDeviceContextHandler.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\PlayToStatusProvider.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\perfmon.exe
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\msvcirt.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\mskeyprotect.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\keyiso.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\EhStorAuthn.exe
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\docprop.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\DeviceDisplayStatusManager.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\cabview.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\SYSWOW64\AuthExt.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\xwreg.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\wldp.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\Windows.Globalization.Fontgroups.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\WcnNetsh.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\sxssrv.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\srclient.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\signdrv.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\PSModuleDiscoveryProvider.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\PlaySndSrv.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\onex.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\NapiNSP.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\mssprxy.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\lpkinstall.exe
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\FXSUTILITY.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\EhStorPwdMgr.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\bderepair.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\AuthExt.dll
2014-12-17 17:27:27 ----A---- C:\WINDOWS\system32\acppage.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\wshbth.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\wincredprovider.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\traffic.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\setx.exe
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\pcaui.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\hhsetup.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\FdDevQuery.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\eappprxy.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\dpapiprovider.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\cngprovider.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\capiprovider.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\SYSWOW64\batmeter.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\winrscmd.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\Windows.Devices.Portable.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\vdsvd.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\ThumbnailExtractionHost.exe
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\sdchange.exe
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\samlib.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\rtutils.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\rasmbmgr.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\netapi32.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\mssign32.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\MbaeXmlParser.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\hcproviders.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\fhevents.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\DevDispItemProvider.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\dataclen.dll
2014-12-17 17:27:26 ----A---- C:\WINDOWS\system32\BdeUISrv.exe
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\xolehlp.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\wwapi.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Portable.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\tcpmonui.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\SCardDlg.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\rtutils.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\PasswordOnWakeSettingFlyout.exe
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\msisip.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\SYSWOW64\dot3dlg.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\vmictimeprovider.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\usbui.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\t2embed.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\srrstr.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\RemoveDeviceContextHandler.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\RdpSa.exe
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\pcaui.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\PasswordOnWakeSettingFlyout.exe
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\odbccp32.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\odbcbcp.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\ndiscapCfg.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\msctfp.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\lsass.exe
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\hid.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\fdProxy.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\batmeter.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\avrt.dll
2014-12-17 17:27:25 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\whoami.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\version.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\UserLanguageProfileCallback.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\SrpUxNativeSnapIn.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\reg.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\ndiscapCfg.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\msports.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\hcproviders.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\hbaapi.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\elslad.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\EhStorPwdMgr.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\dhcpsapi.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\avrt.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\auditpol.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\SYSWOW64\adprovider.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\wwapi.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\Wwanpref.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\wlrmdr.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\wermgr.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\tvratings.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\SysResetErr.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\pwsso.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\pwlauncher.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\ProximityServicePal.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\PrintIsolationProxy.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\powercfg.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\ntdsapi.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\NcaSvc.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\LockScreenContentHost.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\fhmanagew.exe
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\efsadu.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\DeviceDriverRetrievalClient.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\certCredProvider.dll
2014-12-17 17:27:24 ----A---- C:\WINDOWS\system32\btpanui.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Globalization.Fontgroups.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\TSTheme.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\ThumbnailExtractionHost.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\sxsstore.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\SortServer2003Compat.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\sdchange.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\PSModuleDiscoveryProvider.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\olesvr32.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\nshhttp.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\mfpmp.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\mf3216.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\iscsidsc.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\elsTrans.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\dot3msm.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\dimsroam.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\cttunesvr.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\cmmon32.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\SYSWOW64\AzSqlExt.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\WSDPrintProxy.DLL
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\winbrand.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\version.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\unimdmat.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\sxsstore.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\shsetup.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\shrpubw.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\secur32.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\SCardDlg.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\RuntimeBroker.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\rtffilt.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\PrintBrmUi.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\ntprint.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\mciavi32.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\fhautoplay.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\elsTrans.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\dtsh.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\dswave.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\drivers\vmbus.sys
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\dot3cfg.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\cttunesvr.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\bdechangepin.exe
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\bcd.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\avicap32.dll
2014-12-17 17:27:23 ----A---- C:\WINDOWS\system32\appidapi.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\wmiprop.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\WerFaultSecure.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\uicom.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\tvratings.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\sethc.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\rundll32.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\PlaySndSrv.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\KeyboardFilterCore.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\htui.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\gpscript.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\feclient.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\eventcreate.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\cmutil.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\clfsw32.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\cleanmgr.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\SYSWOW64\certCredProvider.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\xolehlp.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\WSDScanProxy.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\winnsi.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\vmbuspipe.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\utildll.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\sspisrv.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\sppnp.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\newdev.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\netcfg.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\msscntrs.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\msident.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\MsCtfMonitor.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\lpremove.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\gpprnext.dll
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\EhStorAuthn.exe
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\drivers\winhv.sys
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\drivers\vpci.sys
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\drivers\vmstorfl.sys
2014-12-17 17:27:22 ----A---- C:\WINDOWS\system32\auditpol.exe
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\winbrand.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\sfc.exe
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\rtffilt.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\pnrpnsp.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\perfos.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\perfctrs.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\nsi.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\mode.com
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\gpprnext.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\forfiles.exe
2014-12-17 17:27:21 ----A---- C:\WINDOWS\SYSWOW64\dtsh.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\wshbth.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\uicom.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\TSTheme.exe
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\repair-bde.exe
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\more.com
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\MirrorDrvCompat.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\KeyboardFilterCore.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\drivers\NdisImPlatform.sys
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\cryptext.dll
2014-12-17 17:27:21 ----A---- C:\WINDOWS\system32\cryptbase.dll
2014-12-17 17:27:20 ----A---- C:\WINDOWS\SYSWOW64\msscntrs.dll
2014-12-17 17:27:20 ----A---- C:\WINDOWS\system32\wiarpc.dll
2014-12-17 17:27:20 ----A---- C:\WINDOWS\system32\dimsjob.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\wsnmp32.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\where.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\RdpSa.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\mspatchc.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\more.com
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\iscsicli.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\FXSEXT32.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\fc.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\dswave.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\drttransport.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\dot3gpclnt.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\comp.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\SYSWOW64\cipher.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\wshcon.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.TimeBroker.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\storagewmi_passthru.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\sti_ci.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\SettingSyncPolicy.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\RotMgr.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\perfmon.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\nsi.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\Magnification.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\LldpNotify.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\format.com
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\DWWIN.EXE
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\dsrole.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\drttransport.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\dot3gpclnt.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\Dot3Conn.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\ddodiag.exe
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\BthMtpContextHandler.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\AzSqlExt.dll
2014-12-17 17:27:19 ----A---- C:\WINDOWS\system32\AuthFWGP.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\winnsi.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\typeperf.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\timeout.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\rdrleakdiag.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\rasphone.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\napdsnap.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\mtxdm.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\MsCtfMonitor.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\MirrorDrvCompat.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\iaspolcy.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\choice.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\gpscript.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\cryptbase.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\clip.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\ByteCodeGenerator.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\SYSWOW64\AuthFWGP.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\wmiprop.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\uireng.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\msdtc.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\fc.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\dot3msm.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\comp.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\ByteCodeGenerator.exe
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\bthpanapi.dll
2014-12-17 17:27:18 ----A---- C:\WINDOWS\system32\bcdsrv.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\wshcon.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\wmdmlog.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.ps.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.TimeBroker.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\waitfor.exe
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\runonce.exe
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\radarrs.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\pwrshplugin.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\mtxlegih.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\Magnification.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\inetmib1.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\expand.exe
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\dialer.exe
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\cfmifs.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\AuditNativeSnapIn.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\Windows.Devices.Enumeration.ps.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\wincredprovider.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\WerFaultSecure.exe
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\sxshared.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\srhelper.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\SmsDeviceAccessRevocation.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\RelPost.exe
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\pcadm.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\NcdAutoSetup.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\mspatchc.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\mskeyprotect.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\msdmo.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\msauserext.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\iaspolcy.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\FDResPub.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\drivers\mpsdrv.sys
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\dpapiprovider.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\cngprovider.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\capiprovider.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\AuditNativeSnapIn.dll
2014-12-17 17:27:17 ----A---- C:\WINDOWS\system32\adprovider.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\winrs.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\WcsPlugInService.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\w32topl.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\ureg.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\srumapi.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncPolicy.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\sc.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\relog.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\PkgMgr.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\odbcbcp.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\mssitlb.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\msctfp.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\mcicda.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\linkinfo.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\kernel.appcore.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\hid.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\drtprov.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\dfscli.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\crypttpmeksvc.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\cmpbk32.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\cmlua.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\cmcfg32.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\SYSWOW64\certenc.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\wscisvif.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\WPDShextAutoplay.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\wmdmps.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\Windows.System.Display.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\wfdprov.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\wfapigp.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\srumapi.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\sfc.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\SetProxyCredential.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\scext.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\rundll32.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\pwrshplugin.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\pnrpnsp.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\napdsnap.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\mssitlb.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\modemui.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\mode.com
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\kernel.appcore.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\chkwudrv.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\gpscript.exe
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\easconsent.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\docprop.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\dimsroam.dll
2014-12-17 17:27:16 ----A---- C:\WINDOWS\system32\dhcpsapi.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\wscisvif.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Display.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\tbs.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\storagewmi_passthru.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\shutdown.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\setupcln.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\serwvdrv.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\pid.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\mmci.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\chkdsk.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\hidserv.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\findstr.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\fdWNet.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\efsutil.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\dimsjob.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\convert.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\SYSWOW64\browcli.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\XInput1_4.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\wwancfg.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\wlanext.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\WcsPlugInService.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\unregmp2.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\sxstrace.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\streamci.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\PeerDistHttpTrans.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\odbcconf.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\lmhsvc.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\keymgr.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\iscsiexe.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\icm32.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\charmap.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\gpscript.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\FXSST.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\fsutil.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\feclient.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\fdWNet.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\expand.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\dmocx.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\dfp.exe
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\datusage.dll
2014-12-17 17:27:15 ----A---- C:\WINDOWS\system32\bootsect.exe
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\wsdchngr.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\WPDShextAutoplay.exe
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Profile.SystemManufacturers.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\Websocket.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\MuiUnattend.exe
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\msvidc32.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\mspatcha.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\eapprovp.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc6.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\SYSWOW64\AtBroker.exe
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\wsepno.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\wersvc.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\vdsldr.exe
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\tbs.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\SrTasks.exe
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\shgina.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\profext.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\netsh.exe
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\drivers\nsiproxy.sys
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\delegatorprovider.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\cryptuiwizard.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\cfmifs.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\bthserv.dll
2014-12-17 17:27:14 ----A---- C:\WINDOWS\system32\bitsperf.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\wmiclnt.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\userinit.exe
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\tree.com
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\tcpmib.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\sscore.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\replace.exe
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\RdpSaProxy.exe
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\NETSTAT.EXE
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\NcdProp.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\iscsium.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\icacls.exe
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\hnetmon.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\dmocx.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\diskcopy.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\deskmon.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\DefaultPrinterProvider.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\cryptdlg.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\SYSWOW64\cngcredui.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\wsdchngr.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\Windows.System.Profile.SystemManufacturers.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\whoami.exe
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\tree.com
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\sscore.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\shimgvw.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\serwvdrv.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\MsiCofire.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\ias.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\findstr.exe
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\eapprovp.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\drivers\wimmount.sys
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\drivers\UCX01000.SYS
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\DefaultPrinterProvider.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\certenc.dll
2014-12-17 17:27:13 ----A---- C:\WINDOWS\system32\bcdboot.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\XInput1_4.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\WSManHTTPConfig.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\shpafact.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\shimgvw.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\shgina.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\SecEdit.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\rpcnsh.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\perfdisk.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\icmui.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\fsutilext.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\esentprf.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\encapi.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\dsparse.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\doskey.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\dmutil.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\delegatorprovider.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\ddodiag.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\cacls.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\bitsperf.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\SYSWOW64\attrib.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\WSManHTTPConfig.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\wmdmlog.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\wlidnsp.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\witnesswmiv2provider.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\Windows.System.RemoteDesktop.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\Websocket.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\vds_ps.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\tcpmonui.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\shpafact.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\seclogon.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\runonce.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\regapi.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\PrintIsolationHost.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\NetEvtFwdr.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\icsunattend.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\hhsetup.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\hbaapi.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\deskmon.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\convert.exe
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\cmlua.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\clfsw32.dll
2014-12-17 17:27:12 ----A---- C:\WINDOWS\system32\brdgcfg.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\xwizard.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\wsmprovhost.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\WsmAgent.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\winrshost.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\WinFax.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.RemoteDesktop.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\wfdprov.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\snmpapi.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\secur32.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\ReAgentc.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\proquota.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\prevhost.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\netiougc.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\ipconfig.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\ifmon.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\ias.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\chkntfs.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\CheckNetIsolation.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\httpapi.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\find.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\dvdupgrd.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\deskadp.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\dbnmpntw.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\SYSWOW64\compact.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\wiatrace.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\tcpmib.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\setupcln.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\replace.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\perfos.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\NcdProp.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\mcicda.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\chkdsk.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\encapi.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\efslsaext.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\drtprov.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\drivers\tbs.sys
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\CompMgmtLauncher.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\cngcredui.dll
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\bridgeunattend.exe
2014-12-17 17:27:11 ----A---- C:\WINDOWS\system32\BdeHdCfg.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\vds_ps.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\sxstrace.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\RpcPing.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\regini.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\perfproc.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\msiltcfg.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\lodctr.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\icsunattend.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\dsauth.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\SYSWOW64\credwiz.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\xwizard.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\xmlprovi.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\w32topl.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\ureg.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\prevhost.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\pnpui.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\nsisvc.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\mfcsubs.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\linkinfo.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\iscsidsc.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\hotplug.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\hnetmon.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\EventAggregation.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\dfdts.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\deskadp.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\cmmon32.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\cmdl32.exe
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\bi.dll
2014-12-17 17:27:10 ----A---- C:\WINDOWS\system32\BackgroundTransferHost.exe
2014-12-17 17:27:09 ----A---- C:\WINDOWS\SYSWOW64\napipsec.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\SYSWOW64\wshqos.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\SYSWOW64\wlidnsp.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\SYSWOW64\StorSvc.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\SYSWOW64\sisbkup.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\SYSWOW64\netbtugc.exe
2014-12-17 17:27:08 ----A---- C:\WINDOWS\SYSWOW64\mfcsubs.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\SYSWOW64\FwRemoteSvr.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\wsmprovhost.exe
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\WsmAgent.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\wshqos.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\traffic.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\tapilua.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\sysntfy.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\RdpSaProxy.exe
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\msports.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\loadperf.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\IconCodecService.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\chkntfs.exe
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\FileAppxStreamingDataSource.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\fdPHost.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\dsparse.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\djoin.exe
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\cmpbk32.dll
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\attrib.exe
2014-12-17 17:27:08 ----A---- C:\WINDOWS\system32\atmlib.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\xmlprovi.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\wshelper.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\wlaninst.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\winusb.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\syskey.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\shunimpl.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\sdiagnhost.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\sdbinst.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\ocsetapi.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\netbios.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\mssprxy.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\mskeyprotcli.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\mgmtapi.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\idndl.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\fontview.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\fltLib.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\extrac32.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\davhlpr.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\cmstplua.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\capisp.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\SYSWOW64\BackgroundTransferHost.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\WorkFolders.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\WofTasks.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\winrshost.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\winipsec.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\WinFax.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\Storprop.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\SpaceAgent.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\regsvr32.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\pstask.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\ProximityCommonPal.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\pnppolicy.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\MemoryDiagnostic.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\FXST30.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\efsutil.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\DFDWiz.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\crypttpmeksvc.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\cmutil.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\cmcfg32.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\cipher.exe
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\browcli.dll
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\ARP.EXE
2014-12-17 17:27:07 ----A---- C:\WINDOWS\system32\appidsvc.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\winrnr.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\sxshared.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\regsvr32.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\RdpSaUacHelper.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\ProximityCommonPal.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\print.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\nci.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\msrle32.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\IconCodecService.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\fixmapi.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\diskcopy.com
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\diskcomp.com
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\DefaultDeviceManager.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\DDORes.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\dciman32.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\cscdll.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\CertEnrollCtrl.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\at.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\ARP.EXE
2014-12-17 17:27:06 ----A---- C:\WINDOWS\SYSWOW64\Apphlpdm.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\wpnsruprov.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\winrnr.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\wephostsvc.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\srwmi.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\RdpSaUacHelper.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\rasphone.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\pnrpauto.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\lsmproxy.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\kernelceip.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\fsutilext.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\fixmapi.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\find.exe
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\cmstplua.dll
2014-12-17 17:27:06 ----A---- C:\WINDOWS\system32\bdeui.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\werdiagcontroller.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\virtdisk.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\userinitext.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\upnpcont.exe
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\slpts.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\rasctrs.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\qmgrprxy.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\OnDemandConnRouteHelper.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\ntlanui2.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\label.exe
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\GlobCollationHost.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\eventvwr.exe
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\deviceassociation.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\SYSWOW64\clb.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\wsnmp32.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\WcnEapAuthProxy.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\userinitext.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\uniplat.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\TimeSyncTask.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\SubscriptionMgr.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\regidle.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\ReAgentTask.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\napipsec.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\mdminst.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\ifmon.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\htui.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\energytask.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\doskey.exe
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\dmutil.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\diskcopy.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\diskcomp.com
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\ddp_ps.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\BthSQM.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\bthci.dll
2014-12-17 17:27:05 ----A---- C:\WINDOWS\system32\bcdedit.exe
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\wksprtPS.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\uniplat.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\TtlsExt.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\schedcli.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\shfolder.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\pots.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\CHxReadingStringIME.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\drprov.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\vpnikeapi.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\umpoext.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\ReAgentc.exe
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\print.exe
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\pid.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\openfiles.exe
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\MuiUnattend.exe
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\msvidc32.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\msshooks.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\mskeyprotcli.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\msiltcfg.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\iscsium.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\ifsutilx.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\CHxReadingStringIME.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\GlobCollationHost.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\dfscli.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\DDORes.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\console.dll
2014-12-17 17:27:04 ----A---- C:\WINDOWS\system32\aecache.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\winipsec.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\wcmapi.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\vdmdbg.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\syssetup.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\subst.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\spopk.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\ROUTE.EXE
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\PING.EXE
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\pcaui.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\pcacli.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\odbctrac.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\midimap.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\ktmutil.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\irclass.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\ifsutilx.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\HOSTNAME.EXE
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\gptext.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\finger.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\SYSWOW64\dhcpcmonitor.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\wmiclnt.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\wdiasqmmodule.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\vss_ps.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\TtlsExt.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\spbcd.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\snmpapi.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\shunimpl.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\setbcdlocale.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\sdiagnhost.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\sc.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\PnPUnattend.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\odbctrac.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\ntlanui2.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\nltest.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\NetVscCoinstall.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\NETSTAT.EXE
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\netiougc.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\hidserv.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\dnscacheugc.exe
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\dispex.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\dispci.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\dciman32.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2014-12-17 17:27:03 ----A---- C:\WINDOWS\system32\cliconfg.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\WINSRPC.DLL
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\vpnikeapi.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\tpmcompc.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\SortWindows61.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\serialui.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\rastlsext.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\raschapext.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\panmap.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\osbaseln.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\npmproxy.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\Nlsdl.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\nlmsprep.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\msshooks.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\mobsync.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\mmcico.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\mciwave.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\iyuv_32.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\grpconv.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\dpapi.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\dispex.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\diskperf.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\DDACLSys.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\SYSWOW64\d3dramp.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\WINSRPC.DLL
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\winlogonext.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\WcnEapPeerProxy.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\wcmapi.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\virtdisk.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\SyncInfrastructureps.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\sscoreext.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\slpts.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\RpcPing.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\rasctrs.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\pdhui.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\pcaui.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\ncuprov.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\mspatcha.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\mobsync.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\midimap.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\iscsicpl.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\idndl.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\grpconv.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\FXSTIFF.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\FXSMON.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\dxpps.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\dvdupgrd.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\dhcpcsvc6.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\deviceassociation.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\cscdll.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\cryptdlg.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\catsrvps.dll
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\bootcfg.exe
2014-12-17 17:27:02 ----A---- C:\WINDOWS\system32\bitsprx5.dll

[kostik123456]

4 LOG -

2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\verclsid.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\umdmxfrm.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\Startupscan.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\srm_ps.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\softpub.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\smphost.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\RmClient.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\recover.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\rasadhlp.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\perfnet.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\newdev.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\ndadmin.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\NcaApi.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\muifontsetup.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\mssip32.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\mscpxl32.dLL
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\mscat32.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\mountvol.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\gpupdate.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\dpapimig.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\control.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\catsrvps.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\bitsprx7.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\bitsprx6.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\bitsprx5.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\bitsprx4.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\bitsprx3.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\SYSWOW64\bitsprx2.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\winusb.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\VmdCoinstall.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\userinit.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\umdmxfrm.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\subst.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\StorSvc.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\srm_ps.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\schedcli.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\shutdown.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\Register-CimProvider.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\rasadhlp.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\perfdisk.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\PATHPING.EXE
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\odbcconf.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\msrle32.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\ksetup.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\KdsCli.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\inetmib1.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\icmui.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\hwrcomp.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\FwRemoteSvr.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\esentprf.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\efssvc.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\drprov.dll
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\DevicePairingWizard.exe
2014-12-17 17:27:01 ----A---- C:\WINDOWS\system32\dbnmpntw.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\wmsgapi.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\wininitext.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\wiatrace.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\whhelper.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\unlodctr.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\tcmsetup.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\TapiSysprep.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\SyncInfrastructureps.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\spwinsat.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\Register-CimProvider.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\rasautou.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\ndproxystub.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\dmintf.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\cmdext.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\SYSWOW64\browseui.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\WSCollect.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\wksprtPS.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\Windows.Devices.Background.ps.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\VscMgrPS.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\verclsid.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\upnpcont.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\tpmcompc.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\TaskSchdPS.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\tabcal.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\sisbkup.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\setx.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\pnpts.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\perfproc.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\perfnet.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\pcwrun.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\pcacli.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\osbaseln.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\nslookup.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\npmproxy.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\newdev.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\netbios.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\ndproxystub.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\montr_ci.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\label.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\klist.exe
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\keepaliveprovider.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\jnwmon.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\irmon.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\httpprxp.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\fvecerts.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\dmintf.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\defragproxy.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\DefaultDeviceManager.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\davhlpr.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\credssp.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\cmdext.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\blb_ps.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\bitsprx6.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\AuthHostProxy.dll
2014-12-17 17:27:00 ----A---- C:\WINDOWS\system32\at.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\wsock32.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\wshrm.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\wshirda.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\wmdmps.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\wmcodecdspps.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\vss_ps.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\VscMgrPS.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\UserAccountControlSettings.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\usbperf.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\TSChannel.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\tapiperf.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\SyncHostps.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\SensApi.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\RemoveDeviceElevated.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\RdpSaPs.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\rasdial.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\perfts.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\oleacchooks.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\nlmproxy.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\nddeapi.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\msidle.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\lsmproxy.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\LAPRXY.DLL
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\chcp.com
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\hdwwiz.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\fltMC.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\DevicePairingWizard.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\DevicePairingProxy.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\SYSWOW64\C_G18030.DLL
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\wwaninst.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\wsmplpxy.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\wshelper.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\WofUtil.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\winrs.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\UI0Detect.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\takeown.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\SyncHostps.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\spopk.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\RemoveDeviceElevated.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\RdpSaPs.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\pots.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\nrpsrv.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\nlmproxy.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\nci.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\NcaApi.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\nbtstat.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\msyuv.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\msidle.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\mgmtapi.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\MdRes.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\icacls.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\CheckNetIsolation.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\chcp.com
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\fhsvcctl.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\DevicePairingProxy.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\DeviceEject.exe
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\d3d8thk.dll
2014-12-17 17:26:59 ----A---- C:\WINDOWS\system32\cofiredm.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\XInput9_1_0.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\wsmplpxy.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\wscproxystub.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\WlS0WndH.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\winrssrv.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\TimeDateMUICallback.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\SystemEventsBrokerClient.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\spnet.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\secinit.exe
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\sas.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\ProximityRtapiPal.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\OskSupport.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\mtxex.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\mprext.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\ir50_qcx.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\ir50_qc.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\ir50_32.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\ir41_qcx.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\ir41_qc.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\ir32_32.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\getuname.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\fdBthProxy.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\efsui.exe
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\cfmifsproxy.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\C_IS2022.DLL
2014-12-17 17:26:58 ----A---- C:\WINDOWS\SYSWOW64\acledit.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\wmcodecdspps.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\wininitext.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\VmApplicationHealthMonitorProxy.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\UserAccountControlSettings.exe
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\TSChannel.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\svsvc.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\smphost.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\rasautou.exe
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\radarrs.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\perfctrs.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\MultiDigiMon.exe
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\mf3216.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\LAPRXY.DLL
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\iyuv_32.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\dsauth.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\dpapi.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\dnsext.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\diskcopy.com
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\dhcpcmonitor.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\cfmifsproxy.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\bitsprx7.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2014-12-17 17:26:58 ----A---- C:\WINDOWS\system32\adhapi.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\wowreg32.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\tsbyuv.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\TaskSchdPS.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\sort.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\runas.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\odbcji32.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\ntprint.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\msyuv.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\iscsied.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\SYSWOW64\iprtprio.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\XInput9_1_0.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\wsock32.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\wshrm.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\wshirda.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\wscproxystub.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\wmsgapi.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\WlS0WndH.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\winrssrv.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\TsUsbGDCoInstaller.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\tapiperf.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\SystemEventsBrokerClient.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\serialui.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\SensApi.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\SecEdit.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\riched32.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\recover.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\PNPXAssocPrx.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\nshhttp.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\Nlsdl.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\netbtugc.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\nddeapi.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\ndadmin.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\MdSched.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\ipconfig.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\fltLib.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\fdBthProxy.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\dxgwdi.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\drivers\netvsc63.sys
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\compact.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\CertEnrollCtrl.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\browseui.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\baaupdate.exe
2014-12-17 17:26:57 ----A---- C:\WINDOWS\system32\appsruprov.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\wpcsvc.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\spwmp.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\PATHPING.EXE
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\osuninst.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\odtext32.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\odpdx32.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\odfox32.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\odexl32.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\oddbse32.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\Narrator.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\msiwer.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\msimg32.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\msidcrl40.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\MRINFO.EXE
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\mprmsg.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\miguiresource.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\Fondue.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\SYSWOW64\comcat.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\waitfor.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\typeperf.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\tsbyuv.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\SortWindows61.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\SortServer2003Compat.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\setspn.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\sas.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\rpcnsh.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\relog.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\oleacchooks.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\mmci.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\inetppui.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\choice.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\hwrreg.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\fthsvc.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\fontview.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\finger.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\Eap3Host.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\DDACLSys.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\control.exe
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\clb.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\capisp.dll
2014-12-17 17:26:56 ----A---- C:\WINDOWS\system32\acledit.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\SYSWOW64\tzutil.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\SYSWOW64\txfw32.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\SYSWOW64\TRACERT.EXE
2014-12-17 17:26:55 ----A---- C:\WINDOWS\SYSWOW64\SmartScreenSettings.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\SYSWOW64\printui.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\SYSWOW64\InfDefaultInstall.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\WUDFCoinstaller.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\wshnetbs.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\wlaninst.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\whhelper.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\where.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\usbperf.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\txfw32.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\timeout.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\TimeDateMUICallback.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\TetheringIeProvider.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\syssetup.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\syskey.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\sysclass.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\Startupscan.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\SortWindows6Compat.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\sort.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\shfolder.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\sdhcinst.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\sccls.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\regedt32.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\reg.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\ProximityRtapiPal.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\PING.EXE
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\osuninst.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\OskSupport.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\MUILanguageCleanup.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\muifontsetup.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\mtxex.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\msiwer.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\msimg32.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\mprmsg.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\mmcico.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\localui.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\iscsied.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\irclass.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\iprtprio.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\hdwwiz.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\gpupdate.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\gptext.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\forfiles.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\extrac32.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\eventcreate.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\DDOIProxy.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\comcat.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\clip.exe
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\C_IS2022.DLL
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\BdeSysprep.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\AutoWorkplaceN.dll
2014-12-17 17:26:55 ----A---- C:\WINDOWS\system32\Apphlpdm.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\TapiUnattend.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\RunLegacyCPLElevated.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\regedt32.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\odbcad32.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\Netplwiz.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\mciseq.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\LocationNotifications.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\iscsicpl.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\DpiScaling.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\ComputerDefaults.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\SYSWOW64\cliconfg.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\wpcsvc.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\TapiSysprep.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\spwmp.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\spwinsat.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\spnet.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\spmpm.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\softpub.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\rastlsext.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\raschapext.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\procinst.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\perfts.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\panmap.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\nlmsprep.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\Narrator.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\mssip32.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\msidcrl40.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\mscat32.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\mpnotify.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\miguiresource.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\LogonUI.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\ktmutil.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\getuname.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\FXSUNATD.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\eventvwr.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\drivers\netbios.sys
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\dpapimig.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\CIRCoInst.dll
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\C_G18030.DLL
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\appidcertstorecheck.exe
2014-12-17 17:26:54 ----A---- C:\WINDOWS\system32\acproxy.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\winver.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Enumeration.ps.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Custom.ps.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Background.ps.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\systray.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\SystemPropertiesRemote.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\SystemPropertiesProtection.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\SystemPropertiesPerformance.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\SystemPropertiesHardware.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\SystemPropertiesDataExecutionPrevention.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\SystemPropertiesComputerName.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\SystemPropertiesAdvanced.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\resmon.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\msra.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\LaunchTM.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\hh.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\fdProxy.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\dvdplay.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\ctfmon.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\SYSWOW64\colorcpl.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\wowreg32.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\tzutil.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\TCPSVCS.EXE
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\SmartScreenSettings.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\secinit.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\rasdial.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\printui.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\odbcad32.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\ntprint.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\mprext.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\iscsicpl.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\fsavailux.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\easinvoker.proxystub.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\DpiScaling.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\credwiz.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\cliconfg.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\CallButtons.ProxyStub.dll
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\backgroundTaskHost.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\system32\AxInstUI.exe
2014-12-17 17:26:53 ----A---- C:\WINDOWS\hh.exe
2014-12-17 17:26:52 ----A---- C:\WINDOWS\system32\sdbinst.exe
2014-12-17 17:26:52 ----A---- C:\WINDOWS\system32\Netplwiz.exe
2014-12-17 17:26:52 ----A---- C:\WINDOWS\system32\bthudtask.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\write.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\winhlp32.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\wship6.dll
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\write.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\TCPSVCS.EXE
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\scrnsave.scr
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\ktmw32.dll
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\DeviceProperties.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\DDOIProxy.dll
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\cmdkey.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\backgroundTaskHost.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\SYSWOW64\AuthFWSnapin.dll
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\write.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\winver.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\werdiagcontroller.dll
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\WallpaperHost.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\VaultCmd.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\unlodctr.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\SystemPropertiesRemote.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\SystemPropertiesPerformance.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\sigverif.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\scrnsave.scr
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\RunLegacyCPLElevated.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\regini.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\rdrleakdiag.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\plasrv.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\pcalua.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\OptionalFeatures.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\MSchedExe.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\MRINFO.EXE
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\mciseq.dll
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\lodctr.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\Locator.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\iscsicli.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\Fondue.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\fltMC.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\DsmUserTask.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\dialer.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\ComputerDefaults.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\colorcpl.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\cacls.exe
2014-12-17 17:26:51 ----A---- C:\WINDOWS\system32\AuthFWSnapin.dll
2014-12-17 17:26:50 ----A---- C:\WINDOWS\SYSWOW64\CallButtons.ProxyStub.dll
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\tskill.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\tscon.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\SystemPropertiesProtection.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\SystemPropertiesHardware.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\SystemPropertiesDataExecutionPrevention.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\SystemPropertiesComputerName.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\SystemPropertiesAdvanced.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\snmptrap.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\rwinsta.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\runas.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\RmClient.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\resmon.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\reset.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\qwinsta.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\quser.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\query.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\qprocess.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\proquota.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\PnPutil.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\msg.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\logoff.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\LaunchTM.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\chgusr.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\chgport.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\chglogon.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\change.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\dllhst3g.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\DeviceProperties.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\cofire.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\cmdkey.exe
2014-12-17 17:26:50 ----A---- C:\WINDOWS\system32\bootim.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\WSHTCPIP.DLL
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\usp10.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\RpcNs4.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\help.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\dcomcnfg.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\dabapi.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\bthudtask.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\SYSWOW64\AuthFWWizFwk.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\WSHTCPIP.DLL
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\wship6.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\usp10.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\TRACERT.EXE
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\TcpipSetup.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\tcmsetup.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\TapiUnattend.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\systray.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\ROUTE.EXE
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\qappsrv.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\OobeFldr.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\mountvol.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\mciwave.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\LocationNotifications.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\ktmw32.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\InfDefaultInstall.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\HOSTNAME.EXE
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\help.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\efsui.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\dvdplay.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\drivers\scfilter.sys
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\diskperf.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\dabapi.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\ctfmon.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\BitLockerWizardElev.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\BitLockerWizard.exe
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\AuthFWWizFwk.dll
2014-12-17 17:26:49 ----A---- C:\WINDOWS\system32\AppxStreamingDataSourcePS.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\srm.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\shimeng.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\pstorec.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\OobeFldr.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\normaliz.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\dxmasf.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\DeviceUxRes.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\SYSWOW64\C_ISCII.DLL
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\workerdd.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\srm.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\shimeng.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\RpcNs4.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\pstorec.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\normaliz.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\dxmasf.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\usbcir.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\TsUsbGD.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\rootmdm.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\rasacd.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\qwavedrv.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\Ndu.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\ndiscap.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\mslldp.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\drivers\bthhfenum.sys
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\DeviceUxRes.dll
2014-12-17 17:26:48 ----A---- C:\WINDOWS\system32\C_ISCII.DLL
2014-12-17 17:26:47 ----A---- C:\WINDOWS\SYSWOW64\ws2help.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\SYSWOW64\wmi.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\SYSWOW64\rnr20.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\SYSWOW64\lpk.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\SYSWOW64\iprop.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\system32\ws2help.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\system32\wmi.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\system32\rnr20.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2014-12-17 17:26:47 ----A---- C:\WINDOWS\system32\lpk.dll
2014-12-17 17:22:52 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-12-17 17:22:51 ----A---- C:\WINDOWS\system32\vpnike.dll
2014-12-17 17:22:51 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-12-17 17:22:51 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-12-17 17:22:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-12-17 17:22:50 ----A---- C:\WINDOWS\system32\shell32.dll
2014-12-17 17:22:49 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-12-17 17:22:49 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-12-17 17:22:49 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-12-17 17:22:49 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-12-17 17:22:49 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-12-17 17:22:48 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-12-17 17:22:48 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-12-17 17:22:48 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-12-17 17:22:48 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2014-12-17 17:22:47 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\WSDApi.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\vssapi.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\spoolsv.exe
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\msctf.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-12-17 17:22:47 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\SYSWOW64\WSDApi.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\SYSWOW64\vssapi.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\system32\untfs.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-12-17 17:22:46 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2014-12-17 17:22:46 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-12-17 17:22:46 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\SYSWOW64\WinSCard.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\SYSWOW64\rascfg.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-12-17 17:22:45 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\wow64.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\WinSCard.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\QSHVHOST.DLL
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2014-12-17 17:22:45 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-12-17 17:22:44 ----A---- C:\WINDOWS\SYSWOW64\vsstrace.dll
2014-12-17 17:22:44 ----A---- C:\WINDOWS\SYSWOW64\setup16.exe
2014-12-17 17:22:44 ----A---- C:\WINDOWS\SYSWOW64\rasdiag.dll
2014-12-17 17:22:44 ----A---- C:\WINDOWS\SYSWOW64\QSVRMGMT.DLL
2014-12-17 17:22:44 ----A---- C:\WINDOWS\SYSWOW64\QSHVHOST.DLL
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\vsstrace.dll
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\rasdiag.dll
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\rascfg.dll
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\QSVRMGMT.DLL
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-12-17 17:22:44 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2014-12-17 17:22:44 ----A---- C:\WINDOWS\splwow64.exe
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\wow32.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\user.exe
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\rasser.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\rasmxs.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\ntvdm64.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\instnm.exe
2014-12-17 17:22:43 ----A---- C:\WINDOWS\SYSWOW64\eventcls.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\wow64cpu.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\rasser.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\rasmxs.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\ntvdm64.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\eventcls.dll
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\sermouse.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\intelpep.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2014-12-17 17:22:43 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2014-12-17 17:22:40 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-12-17 17:22:40 ----A---- C:\WINDOWS\system32\winbici.dll
2014-12-17 17:22:40 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-12-17 17:22:40 ----A---- C:\WINDOWS\system32\BulkOperationHost.exe
2014-12-17 17:12:02 ----D---- C:\WINDOWS\system32\appmgmt
2014-12-17 17:04:36 ----D---- C:\ProgramData\Adobe
2014-12-17 17:04:04 ----D---- C:\WINDOWS\SYSWOW64\Adobe
2014-12-17 17:00:19 ----A---- C:\WINDOWS\system32\lockscreencn.dll
2014-12-17 16:59:49 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2014-12-17 16:59:49 ----A---- C:\WINDOWS\system32\drivers\vwififlt.sys
2014-12-17 16:59:48 ----A---- C:\WINDOWS\system32\srms.dat
2014-12-17 16:59:16 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\WinArchiver
2014-12-17 16:59:03 ----A---- C:\WINDOWS\system32\hal.dll
2014-12-17 16:58:31 ----D---- C:\Program Files\WinArchiver
2014-12-17 16:58:31 ----A---- C:\WINDOWS\system32\drivers\waemu.sys
2014-12-17 16:58:04 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2014-12-17 16:58:04 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-12-17 16:34:39 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\ClassicShell
2014-12-17 16:34:39 ----D---- C:\ProgramData\ClassicShell
2014-12-17 16:34:18 ----D---- C:\Program Files\Classic Shell
2014-12-17 16:32:22 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\WinRAR
2014-12-17 16:31:35 ----D---- C:\Program Files\WinRAR
2014-12-16 21:43:37 ----D---- C:\Program Files (x86)\Google
2014-12-16 21:36:31 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\ATI
2014-12-16 21:36:31 ----D---- C:\ProgramData\ATI
2014-12-16 21:36:21 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Identities
2014-12-16 21:31:55 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2014-12-16 21:26:31 ----SD---- C:\Users\Kostík a Irenočka\AppData\Roaming\Microsoft
2014-12-16 21:26:31 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Media Center Programs
2014-12-16 21:22:45 ----D---- C:\Program Files\ATI Technologies
2014-12-16 21:22:27 ----D---- C:\Program Files (x86)\ATI Technologies
2014-12-16 21:22:11 ----D---- C:\ProgramData\Package Cache
2014-12-16 21:21:49 ----D---- C:\AMD
2014-12-16 21:21:44 ----D---- C:\Program Files\Common Files\ATI Technologies
2014-12-16 21:21:42 ----D---- C:\Program Files\AMD
2014-12-16 21:21:24 ----D---- C:\WINDOWS\Prefetch
2014-12-16 21:19:41 ----DC---- C:\WINDOWS\Panther
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\wininet.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\jscript.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-12-16 21:17:45 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-12-16 21:16:59 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-12-16 21:16:59 ----A---- C:\WINDOWS\system32\SystemSettingsDatabase.dll
2014-12-16 21:16:59 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-12-16 21:16:59 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-12-16 21:16:59 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-12-16 21:16:59 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-12-16 21:16:59 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-12-16 21:16:59 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-12-16 21:16:31 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2014-12-16 21:16:31 ----A---- C:\WINDOWS\system32\crypt32.dll
2014-12-16 21:16:18 ----A---- C:\WINDOWS\system32\kdusb.dll
2014-12-16 21:16:06 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2014-12-16 21:16:06 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-16 21:15:59 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll
2014-12-16 21:15:59 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-12-16 21:15:59 ----A---- C:\WINDOWS\system32\pku2u.dll
2014-12-16 21:15:59 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-12-16 21:15:53 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2014-12-16 21:15:53 ----A---- C:\WINDOWS\system32\winshfhc.dll
2014-12-16 21:15:53 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-12-16 21:15:53 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-12-16 21:15:53 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-12-16 21:15:33 ----A---- C:\WINDOWS\SYSWOW64\DeviceSetupStatusProvider.dll
2014-12-16 21:15:33 ----A---- C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-16 21:15:19 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-12-16 21:15:19 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-12-16 21:15:19 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-12-16 21:15:19 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-12-16 21:15:19 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-12-16 21:15:19 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\wextract.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\url.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\occache.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\msrating.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\mshta.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\inseng.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\ieui.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-12-16 21:15:18 ----A---- C:\WINDOWS\system32\hlink.dll
2014-12-16 21:13:29 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-12-16 21:12:37 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-12-16 21:12:37 ----A---- C:\WINDOWS\system32\wups2.dll
2014-12-16 21:12:37 ----A---- C:\WINDOWS\system32\wups.dll
2014-12-16 21:12:37 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-12-16 21:12:28 ----A---- C:\WINDOWS\SYSWOW64\poqexec.exe
2014-12-16 21:12:28 ----A---- C:\WINDOWS\system32\poqexec.exe
2014-12-16 21:12:20 ----A---- C:\WINDOWS\system32\win32k.sys
2014-12-16 19:22:16 ----D---- C:\WINDOWS\system32\MRT
2014-12-16 19:22:15 ----A---- C:\WINDOWS\system32\MRT.exe
2014-12-16 19:11:36 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2014-12-16 18:05:25 ----D---- C:\Users\Kostík a Irenočka\AppData\Roaming\Adobe
2014-12-16 18:04:56 ----D---- C:\ProgramData\PRICache
2014-12-16 18:04:42 ----D---- C:\WINDOWS\SoftwareDistribution
2014-12-16 18:03:40 ----D---- C:\WINDOWS\CSC
2014-12-16 18:01:49 ----A---- C:\WINDOWS\system32\netcfg-166500.txt
2014-12-16 18:01:46 ----A---- C:\WINDOWS\system32\netcfg-162968.txt
2014-12-16 17:59:27 ----SHD---- C:\ProgramData\Šablony
2014-12-16 17:59:27 ----SHD---- C:\ProgramData\Plocha
2014-12-16 17:59:27 ----SHD---- C:\ProgramData\Nabídka Start
2014-12-16 17:59:27 ----SHD---- C:\ProgramData\Dokumenty
2014-12-16 17:59:27 ----SHD---- C:\ProgramData\Data aplikací
2014-12-16 17:59:09 ----ASH---- C:\hiberfil.sys
2014-12-16 17:57:42 ----A---- C:\WINDOWS\system32\netcfg-51875.txt
2014-12-16 17:57:41 ----A---- C:\WINDOWS\system32\netcfg-51609.txt
2014-12-16 17:57:41 ----A---- C:\WINDOWS\system32\netcfg-51250.txt
2014-12-16 17:57:41 ----A---- C:\WINDOWS\system32\netcfg-50937.txt
2014-12-16 17:57:41 ----A---- C:\WINDOWS\system32\netcfg-50687.txt
2014-12-16 17:57:40 ----A---- C:\WINDOWS\system32\netcfg-50468.txt
2014-12-16 17:57:40 ----A---- C:\WINDOWS\system32\netcfg-50281.txt
2014-12-16 17:57:40 ----A---- C:\WINDOWS\system32\netcfg-50078.txt
2014-12-16 17:57:39 ----A---- C:\WINDOWS\system32\netcfg-48812.txt
2014-12-16 17:57:37 ----A---- C:\WINDOWS\system32\netcfg-46812.txt
2014-12-16 17:56:59 ----ASH---- C:\swapfile.sys
2014-12-16 17:56:58 ----ASH---- C:\pagefile.sys
2014-12-16 17:56:57 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 month======

2014-12-21 10:50:14 ----RD---- C:\Program Files
2014-12-21 10:44:09 ----D---- C:\WINDOWS\Temp
2014-12-21 10:43:05 ----D---- C:\WINDOWS\system32\sru
2014-12-20 12:08:19 ----D---- C:\WINDOWS\debug
2014-12-20 12:07:40 ----D---- C:\WINDOWS\Inf
2014-12-20 12:07:40 ----D---- C:\Windows
2014-12-20 11:56:39 ----D---- C:\WINDOWS\Microsoft.NET
2014-12-20 11:48:19 ----RD---- C:\WINDOWS\assembly
2014-12-20 11:20:51 ----HD---- C:\Program Files\WindowsApps
2014-12-19 11:53:39 ----D---- C:\WINDOWS\Logs
2014-12-18 20:44:09 ----RD---- C:\WINDOWS\System32
2014-12-18 20:41:42 ----D---- C:\WINDOWS\system32\drivers
2014-12-18 20:32:00 ----HD---- C:\ProgramData
2014-12-18 19:54:06 ----D---- C:\WINDOWS\SysWOW64
2014-12-18 19:53:37 ----D---- C:\WINDOWS\system32\DriverStore
2014-12-18 19:53:25 ----D---- C:\WINDOWS\system32\Tasks
2014-12-18 19:53:19 ----D---- C:\WINDOWS\WinSxS
2014-12-18 19:47:57 ----SHD---- C:\WINDOWS\Installer
2014-12-18 19:47:46 ----RD---- C:\Program Files (x86)
2014-12-18 19:45:57 ----D---- C:\Program Files (x86)\Common Files
2014-12-18 19:28:21 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-12-18 19:17:43 ----D---- C:\WINDOWS\system32\config
2014-12-18 18:37:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-18 18:26:46 ----D---- C:\WINDOWS\system32\wdi
2014-12-18 17:29:07 ----D---- C:\WINDOWS\AppReadiness
2014-12-18 17:15:23 ----D---- C:\Program Files\Common Files
2014-12-18 17:15:12 ----D---- C:\WINDOWS\CbsTemp
2014-12-18 16:24:40 ----A---- C:\WINDOWS\win.ini
2014-12-18 16:24:15 ----RSD---- C:\WINDOWS\Fonts
2014-12-17 22:15:14 ----D---- C:\WINDOWS\system32\catroot
2014-12-17 21:43:42 ----SD---- C:\ProgramData\Microsoft
2014-12-17 19:21:42 ----A---- C:\WINDOWS\SYSWOW64\msvcr71.dll
2014-12-17 19:21:42 ----A---- C:\WINDOWS\SYSWOW64\msvcp71.dll
2014-12-17 19:03:15 ----D---- C:\Program Files\Common Files\System
2014-12-17 18:56:21 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-12-17 18:56:21 ----D---- C:\WINDOWS\system32\cs-CZ
2014-12-17 18:49:24 ----D---- C:\WINDOWS\system32\catroot2
2014-12-17 18:48:25 ----D---- C:\WINDOWS\twain_32
2014-12-17 18:30:00 ----D---- C:\WINDOWS\SYSWOW64\MUI
2014-12-17 18:30:00 ----D---- C:\WINDOWS\system32\MUI
2014-12-17 18:24:54 ----D---- C:\WINDOWS\ShellNew
2014-12-17 18:24:53 ----D---- C:\Program Files\Common Files\microsoft shared
2014-12-17 18:24:13 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-12-17 17:54:02 ----RD---- C:\WINDOWS\ToastData
2014-12-17 17:54:01 ----D---- C:\WINDOWS\SYSWOW64\setup
2014-12-17 17:54:00 ----D---- C:\WINDOWS\system32\setup
2014-12-17 17:53:59 ----D---- C:\WINDOWS\apppatch
2014-12-17 17:53:57 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2014-12-17 17:53:57 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2014-12-17 17:53:56 ----D---- C:\WINDOWS\MediaViewer
2014-12-17 17:53:56 ----D---- C:\WINDOWS\FileManager
2014-12-17 17:53:56 ----D---- C:\WINDOWS\Camera
2014-12-17 17:53:36 ----D---- C:\Program Files\Windows Portable Devices
2014-12-17 17:53:36 ----D---- C:\Program Files\Windows Multimedia Platform
2014-12-17 17:53:36 ----D---- C:\Program Files\Windows Media Player
2014-12-17 17:53:36 ----D---- C:\Program Files\Windows Mail
2014-12-17 17:53:36 ----D---- C:\Program Files\Internet Explorer
2014-12-17 17:53:35 ----D---- C:\Program Files\Windows Photo Viewer
2014-12-17 17:53:35 ----D---- C:\Program Files\Windows Journal
2014-12-17 17:53:33 ----SHD---- C:\WINDOWS\BitLockerDiscoveryVolumeContents
2014-12-17 17:53:33 ----D---- C:\WINDOWS\WinStore
2014-12-17 17:53:33 ----D---- C:\WINDOWS\SYSWOW64\oobe
2014-12-17 17:53:33 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-12-17 17:53:33 ----D---- C:\WINDOWS\SYSWOW64\en-US
2014-12-17 17:53:33 ----D---- C:\WINDOWS\SYSWOW64\Com
2014-12-17 17:53:33 ----D---- C:\WINDOWS\servicing
2014-12-17 17:53:32 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-12-17 17:53:32 ----D---- C:\WINDOWS\SYSWOW64\sppui
2014-12-17 17:53:31 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2014-12-17 17:53:31 ----D---- C:\WINDOWS\SYSWOW64\Dism
2014-12-17 17:53:18 ----D---- C:\WINDOWS\system32\Sysprep
2014-12-17 17:53:18 ----D---- C:\WINDOWS\system32\oobe
2014-12-17 17:53:18 ----D---- C:\WINDOWS\system32\migration
2014-12-17 17:53:18 ----D---- C:\WINDOWS\system32\en-US
2014-12-17 17:53:18 ----D---- C:\WINDOWS\system32\Com
2014-12-17 17:53:18 ----D---- C:\WINDOWS\PolicyDefinitions
2014-12-17 17:53:18 ----D---- C:\WINDOWS\IME
2014-12-17 17:53:16 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2014-12-17 17:53:16 ----D---- C:\WINDOWS\system32\sppui
2014-12-17 17:53:14 ----D---- C:\WINDOWS\system32\wbem
2014-12-17 17:53:14 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-12-17 17:53:12 ----SD---- C:\WINDOWS\system32\dsc
2014-12-17 17:53:12 ----SD---- C:\WINDOWS\system32\CompatTel
2014-12-17 17:53:12 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-12-17 17:53:12 ----D---- C:\WINDOWS\system32\migwiz
2014-12-17 17:53:12 ----D---- C:\WINDOWS\system32\Dism
2014-12-17 17:52:53 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-12-17 17:52:53 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2014-12-17 17:52:53 ----D---- C:\Program Files (x86)\Windows Media Player
2014-12-17 17:52:53 ----D---- C:\Program Files (x86)\Windows Mail
2014-12-17 17:52:53 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-17 17:52:52 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-12-17 17:52:50 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-12-17 17:52:49 ----D---- C:\Program Files\WindowsPowerShell
2014-12-17 17:52:30 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-12-17 17:38:20 ----SH---- C:\WINDOWS\system32\desktop.ini
2014-12-17 17:36:47 ----A---- C:\WINDOWS\SYSWOW64\msclmd.dll
2014-12-17 17:36:47 ----A---- C:\WINDOWS\system32\msclmd.dll
2014-12-17 17:03:57 ----D---- C:\WINDOWS\Tasks
2014-12-17 16:52:42 ----RD---- C:\Users
2014-12-17 16:33:35 ----D---- C:\WINDOWS\system32\restore
2014-12-16 21:37:38 ----SHD---- C:\$Recycle.Bin
2014-12-16 21:32:55 ----D---- C:\Program Files\Windows NT
2014-12-16 21:32:28 ----D---- C:\WINDOWS\Registration
2014-12-16 21:32:08 ----D---- C:\WINDOWS\system32\LogFiles
2014-12-16 21:30:06 ----RSD---- C:\WINDOWS\Media
2014-12-16 21:27:47 ----D---- C:\WINDOWS\SYSWOW64\WCN
2014-12-16 21:27:47 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2014-12-16 21:27:47 ----D---- C:\WINDOWS\SYSWOW64\SMI
2014-12-16 21:27:46 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2014-12-16 21:27:46 ----D---- C:\WINDOWS\SYSWOW64\IME
2014-12-16 21:27:46 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2014-12-16 21:27:46 ----D---- C:\WINDOWS\SYSWOW64\catroot
2014-12-16 21:27:44 ----D---- C:\WINDOWS\system32\WCN
2014-12-16 21:27:44 ----D---- C:\WINDOWS\system32\spool
2014-12-16 21:27:43 ----D---- C:\WINDOWS\system32\IME
2014-12-16 21:27:24 ----D---- C:\WINDOWS\Help
2014-12-16 21:27:24 ----D---- C:\WINDOWS\DigitalLocker
2014-12-16 21:27:21 ----SHD---- C:\Program Files\Windows Sidebar
2014-12-16 21:27:21 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-12-16 21:26:58 ----D---- C:\WINDOWS\system32\Recovery
2014-12-16 21:17:01 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-12-16 21:15:55 ----D---- C:\Program Files\Windows Defender
2014-12-16 21:15:55 ----D---- C:\Program Files (x86)\Windows Defender
2014-12-16 20:44:57 ----D---- C:\WINDOWS\AUInstallAgent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;@oem21.inf,%AfwDescriptionFree%;Avast! Firewall Driver; C:\WINDOWS\system32\DRIVERS\aswNdisFlt.sys [2014-12-18 449936]
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-12-18 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-12-18 267632]
R0 waemu;waemu; C:\WINDOWS\system32\Drivers\waemu.sys [2014-06-19 142096]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2014-12-18 28184]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-12-18 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-12-18 1050432]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-12-18 436624]
R1 Eve;@oem20.inf,%EVE_Desc%;EVE Protocol Driver; C:\WINDOWS\system32\DRIVERS\eve.sys [2014-04-10 41304]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-12-18 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-12-18 83280]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-12-18 116728]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2014-04-18 36600]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-12-18 271752]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 dvdfab;dvdfab; C:\WINDOWS\system32\drivers\dvdfab.sys [2011-08-15 79232]
R3 e1iexpress;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 - ovladač I pro síťová připojení PCI Express; C:\WINDOWS\system32\DRIVERS\e1i63x64.sys [2013-06-18 460288]
R3 MEIx64;@oem3.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-19 56344]
R3 PciSPorts;@oem4.inf,%PCI.SerialPort%;High-Speed PCI Serial Port; C:\WINDOWS\system32\DRIVERS\PciSPorts.sys [2008-12-19 122880]
R3 TBS6928_64;@oem19.inf,%DISPLAY_NAME%;TBS 6928 DVBS/S2 service; C:\WINDOWS\system32\DRIVERS\TBS6928_64.sys [2012-12-19 1934792]
R3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Ovladač zvuků USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-09-24 121088]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2014-06-21 212736]
S3 dot4;@oem6.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-09-25 151968]
S3 Dot4Print;@oem7.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-09-25 27040]
S3 dot4usb;@oem6.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-09-25 49056]
S3 epmntdrv;epmntdrv; \??\C:\WINDOWS\syswow64\epmntdrv.sys [2014-11-18 15968]
S3 EuGdiDrv;EuGdiDrv; \??\C:\WINDOWS\syswow64\EuGdiDrv.sys [2014-11-18 10208]
S3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2014-11-21 25816]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2014-11-21 64216]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2014-10-29 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-12-18 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-12-18 104416]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2014-10-29 38792]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2011-03-04 73728]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-07-02 244904]
R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2014-11-28 5419792]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-12-18 4012248]
R3 ehRecvr;@%SystemRoot%\ehome\ehrecvr.exe,-101; C:\WINDOWS\ehome\ehRecvr.exe [2014-09-24 697856]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2014-10-29 38792]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2014/12/17 19:22:51; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2011-04-20 241648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-16 107912]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016]
S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-17 267440]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792]
S3 ehSched;@%SystemRoot%\ehome\ehsched.exe,-101; C:\WINDOWS\ehome\ehsched.exe [2014-09-24 176128]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-16 107912]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-11-26 114800]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 Mcx2Svc;@%SystemRoot%\ehome\ehres.dll,-15501; C:\WINDOWS\system32\svchost.exe [2014-10-29 38792]

-----------------EOF-----------------