Stránka 1 z 1

Prosím o odborný komentář, zd je log ComboFix, RSIT bude

Napsal: 11 čer 2013 20:55
od HiDDen
ComboFix 13-06-08.02 - Matěj 11.06.2013 21:40:21.3.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4094.2860 [GMT 2:00]
Spuštěný z: c:\users\Matýj\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NNE6TPFB\ComboFix.exe
AV: AVG Anti-Virus Business Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
FW: AVG Anti-Virus Business Edition 2012 *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: AVG Anti-Virus Business Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-05-11 do 2013-06-11 )))))))))))))))))))))))))))))))
.
.
2013-06-11 19:43 . 2013-06-11 19:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-03 12:03 . 2013-06-03 12:03 -------- d-----w- c:\program files (x86)\Microsoft ActiveSync
2013-06-03 12:02 . 2013-06-03 12:02 -------- d-----w- c:\windows\PCHEALTH
2013-06-02 21:12 . 2013-06-02 21:12 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2013-05-27 08:46 . 2013-05-27 08:46 -------- d-----w- c:\program files\CCleaner
2013-05-27 08:29 . 2013-05-27 08:29 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-27 08:29 . 2013-05-27 08:29 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-27 08:29 . 2013-05-27 08:29 -------- d-----w- c:\windows\SysWow64\Macromed
2013-05-27 08:29 . 2013-05-27 08:29 -------- d-----w- c:\windows\system32\Macromed
2013-05-26 23:25 . 2013-05-26 23:25 -------- d-----w- c:\program files (x86)\AGEIA Technologies
2013-05-26 23:25 . 2013-06-11 19:33 -------- d-----w- c:\programdata\NVIDIA
2013-05-26 23:24 . 2013-03-15 04:16 3477280 ----a-w- c:\windows\system32\nvsvc64.dll
2013-05-26 23:24 . 2013-03-15 04:16 63776 ----a-w- c:\windows\system32\nvshext.dll
2013-05-26 23:24 . 2013-03-15 04:16 6398240 ----a-w- c:\windows\system32\nvcpl.dll
2013-05-26 23:24 . 2013-03-15 04:16 877856 ----a-w- c:\windows\system32\nvvsvc.exe
2013-05-26 23:24 . 2013-03-15 04:16 2555680 ----a-w- c:\windows\system32\nvsvcr.dll
2013-05-26 23:24 . 2013-03-15 04:16 237856 ----a-w- c:\windows\system32\nvmctray.dll
2013-05-26 23:24 . 2013-03-13 16:24 3065455 ----a-w- c:\windows\system32\nvcoproc.bin
2013-05-26 22:41 . 2013-05-26 22:41 -------- d-----w- c:\windows\SysWow64\drivers\AVG
2013-05-26 22:40 . 2013-06-11 17:00 -------- d-----w- c:\windows\system32\drivers\AVG
2013-05-26 22:40 . 2013-05-26 22:40 -------- d-----w- C:\$AVG
2013-05-26 22:40 . 2013-05-26 22:55 -------- d-----w- c:\programdata\AVG2012
2013-05-26 22:39 . 2013-05-26 22:39 -------- d-----w- c:\program files (x86)\AVG
2013-05-23 21:13 . 2013-05-26 23:24 -------- d-----w- c:\programdata\NVIDIA Corporation
2013-05-23 21:13 . 2013-03-15 05:53 15508512 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-05-23 21:13 . 2013-03-15 05:53 13088000 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-05-23 21:13 . 2013-02-25 22:32 1814304 ----a-w- c:\windows\system32\nvdispco64.dll
2013-05-23 21:13 . 2011-08-03 11:50 67176 ----a-w- c:\windows\system32\OpenCL.dll
2013-05-23 21:13 . 2011-08-03 11:50 57960 ----a-w- c:\windows\SysWow64\OpenCL.dll
2013-05-23 21:13 . 2011-08-03 11:50 1453160 ----a-w- c:\windows\system32\nvgenco64.dll
2013-05-23 21:11 . 2013-05-23 21:11 -------- d-----w- C:\NVIDIA
2013-05-23 17:10 . 2013-06-01 08:58 -------- d-----w- c:\programdata\Skype
2013-05-21 19:23 . 2013-05-21 19:23 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2013-05-21 18:42 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys
2013-05-21 18:42 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll
2013-05-21 18:42 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-05-21 18:42 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-05-21 18:42 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll
2013-05-21 18:42 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2013-05-21 18:42 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2013-05-21 18:42 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2013-05-21 18:42 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2013-05-21 17:00 . 2013-05-21 17:00 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software
2013-05-18 16:00 . 2013-05-18 16:47 -------- d-----w- c:\program files (x86)\StarCraft II
2013-05-18 15:44 . 2013-06-01 08:59 -------- d-----w- c:\program files (x86)\Google
2013-05-18 15:18 . 2013-05-21 18:37 -------- d-----w- c:\program files (x86)\Diablo III
2013-05-18 15:18 . 2013-05-18 16:44 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2013-05-18 15:18 . 2013-05-18 16:20 -------- d-----w- c:\programdata\Blizzard Entertainment
2013-05-18 15:17 . 2013-05-18 15:17 -------- d-----w- c:\programdata\Battle.net
2013-05-18 14:07 . 2013-06-03 12:02 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-05-18 13:57 . 2013-02-16 23:40 28672 ----a-w- c:\windows\system32\IEUDINIT.EXE
2013-05-18 13:32 . 2013-05-18 13:32 -------- d-----w- c:\windows\CheckSur
2013-05-18 13:28 . 2013-05-26 22:34 -------- d-----w- c:\programdata\AVG2013
2013-05-18 13:26 . 2013-06-08 19:29 -------- d-sh--w- c:\windows\Installer
2013-05-18 13:26 . 2013-05-26 22:37 -------- d-----w- c:\programdata\MFAData
2013-05-18 13:26 . 2013-05-18 13:26 -------- d--h--w- c:\programdata\Common Files
2013-05-18 13:24 . 2013-05-18 13:24 -------- d-----w- c:\windows\SysWow64\Wat
2013-05-18 13:24 . 2013-05-18 13:24 -------- d-----w- c:\windows\system32\Wat
2013-05-18 12:59 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-05-18 12:59 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-05-18 12:59 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-05-18 12:59 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-05-18 12:54 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-05-18 12:50 . 2013-05-21 18:43 -------- d-----w- c:\windows\Panther
2013-05-18 12:49 . 2013-05-03 14:15 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-05-18 12:49 . 2013-05-13 23:48 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3285B98A-06DE-421F-A207-6E57DD54C82E}\mpengine.dll
2013-05-18 12:48 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-05-18 12:48 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-05-18 12:48 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-05-18 12:48 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-05-18 12:48 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-05-18 12:48 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-05-18 12:47 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-05-18 12:47 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-05-18 12:47 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-05-18 12:47 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-05-18 12:47 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-05-18 12:47 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-05-18 12:47 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-05-18 12:46 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-05-18 12:46 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-05-18 12:46 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-05-18 12:46 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-05-18 12:46 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-05-18 12:43 . 2012-12-07 12:26 308736 ----a-w- c:\windows\SysWow64\Wpc.dll
2013-05-18 12:42 . 2012-10-03 17:44 70656 ----a-w- c:\windows\system32\nlaapi.dll
2013-05-18 12:41 . 2012-03-17 07:58 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys
2013-05-18 12:33 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2013-05-18 12:33 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-05-18 12:26 . 2013-05-26 23:25 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
2013-05-18 12:26 . 2013-05-26 23:24 -------- d-----w- c:\program files\NVIDIA Corporation
2013-05-18 12:24 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-05-18 12:24 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-05-18 12:24 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-05-18 12:21 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-05-18 12:21 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-05-18 12:21 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-05-18 12:21 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-05-18 12:21 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-05-18 12:21 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-05-18 12:21 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-05-18 12:21 . 2012-06-02 13:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-05-18 12:21 . 2012-06-02 13:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-05-18 12:21 . 2013-05-18 12:21 -------- d-----w- c:\users\Matěj
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-02 00:06 . 2010-11-21 03:27 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-05-18 12:42 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-18 12:42 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-18 12:42 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-18 12:42 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-18 12:42 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-18 12:42 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-11 01:18 . 2013-04-11 01:18 384800 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2013-03-14 20:07 . 2013-03-14 20:07 559904 ----a-w- c:\windows\SysWow64\nvStreaming.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-11-19 2598520]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe;c:\program files (x86)\AVG\AVG2012\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys;c:\windows\SYSNATIVE\DRIVERS\avgfwd6a.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2012\avgfws.exe;c:\program files (x86)\AVG\AVG2012\avgfws.exe [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsfiltera.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2013-06-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 15:44]
.
2013-06-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 15:44]
.
.
--------- X64 Entries -----------
.
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-06-11 21:44:47
ComboFix-quarantined-files.txt 2013-06-11 19:44
ComboFix2.txt 2013-05-21 19:48
ComboFix3.txt 2013-05-21 19:39
.
Před spuštěním: Volných bajtů: 186 280 820 736
Po spuštění: Volných bajtů: 186 213 543 936
.
- - End Of File - - 9F58BAA2D32B2625A92A01B9600D3180
A36C5E4F47E84449FF07ED3517B43A31

Re: Prosím o odborný komentář, zd je log ComboFix, RSIT bude

Napsal: 11 čer 2013 21:03
od Rudy
Zdravím!
Proč spouštíte ComboFix, utilitu určenou pouze profesionálům? Hodláte si poškodit systém, nebo aplikace? Log RSIT je nyní k ničemu, neboť pokud byl PC zavirován, CF smaže všechny stopy. Běžná praxe je nejdřív RSIT (příp. DDS) a až to rádce zkontroluje a doporučí CF, skenujte.

Lze to vyřešit? Díky

Napsal: 11 čer 2013 21:04
od HiDDen
Logfile of random's system information tool 1.09 (written by random/random)
Run by Matěj at 2013-06-11 22:02:48
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 178 GB (75%) free of 238 GB
Total RAM: 4094 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:03:05, on 11.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Matěj.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe -update activex
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5624 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgfws.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Internet Explorer\iexplore.exe"
C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe -Embedding
"C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe" /command_id=37336067-4119-470e-81a1-35470267d61a /client_id=4c00030e-5fe1-453d-9abd-ec5c08e1265e
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3347878 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3282304 /prefetch:2
notepad.exe "C:\Users\MATJ~1\AppData\Local\Temp\log.txt"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:333059 /prefetch:2
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding
"C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgemca.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=ccfa5e2c-2393-4330-b3ad-ab77c4bb4b6b /coreSdkOptions=30 /logConfFile="C:\ProgramData\AVG2012\temp\9bdad221-3f4f-4e0f-a197-1a575c201e4b-71c-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=04e0d423-a525-4633-a963-f21cf039d425 /coreSdkOptions=18 /logConfFile="C:\ProgramData\AVG2012\temp\e7650227-2fc5-4240-a3a6-3444c7453f7e-914-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4040 CREDAT:3151193 /prefetch:2
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-4235390951-202566128-2439003484-100011_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-4235390951-202566128-2439003484-100011 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe12_ Global\UsGthrCtrlFltPipeMssGthrPipe12 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Users\Matěj\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_202_ActiveX.exe [2013-05-27 514440]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 3 months======

2013-06-11 22:02:49 ----D---- C:\Program Files\trend micro
2013-06-11 22:02:48 ----D---- C:\rsit
2013-06-11 21:56:34 ----SHD---- C:\$RECYCLE.BIN
2013-06-11 21:44:48 ----D---- C:\Windows\temp
2013-06-11 21:44:47 ----A---- C:\ComboFix.txt
2013-06-11 21:39:07 ----A---- C:\Windows\zip.exe
2013-06-11 21:39:07 ----A---- C:\Windows\SWSC.exe
2013-06-11 21:39:07 ----A---- C:\Windows\SWREG.exe
2013-06-11 21:39:07 ----A---- C:\Windows\sed.exe
2013-06-11 21:39:07 ----A---- C:\Windows\PEV.exe
2013-06-11 21:39:07 ----A---- C:\Windows\NIRCMD.exe
2013-06-11 21:39:07 ----A---- C:\Windows\MBR.exe
2013-06-11 21:39:07 ----A---- C:\Windows\grep.exe
2013-06-03 14:03:32 ----A---- C:\Windows\ODBC.INI
2013-06-03 14:03:05 ----D---- C:\Program Files (x86)\Microsoft ActiveSync
2013-06-03 14:02:26 ----D---- C:\Windows\PCHEALTH
2013-06-03 14:02:26 ----D---- C:\Program Files (x86)\Microsoft Office
2013-06-02 23:12:05 ----D---- C:\Program Files (x86)\Adobe
2013-05-27 10:46:15 ----D---- C:\Program Files\CCleaner
2013-05-27 10:29:44 ----D---- C:\Users\Matěj\AppData\Roaming\Macromedia
2013-05-27 10:29:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-05-27 10:29:37 ----D---- C:\Windows\SYSWOW64\Macromed
2013-05-27 10:29:35 ----D---- C:\Windows\system32\Macromed
2013-05-27 10:29:03 ----D---- C:\ProgramData\Adobe
2013-05-27 01:25:20 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-05-27 01:25:01 ----D---- C:\ProgramData\NVIDIA
2013-05-27 01:24:49 ----A---- C:\Windows\system32\nvsvc64.dll
2013-05-27 01:24:49 ----A---- C:\Windows\system32\nvshext.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvvsvc.exe
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvsvcr.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvmctray.dll
2013-05-27 01:24:48 ----A---- C:\Windows\system32\nvcpl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-05-27 01:23:17 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvopencl.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvoglv64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvinitx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvhdap64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvdispgenco6431422.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvdispco6431422.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuvid.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcuda.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvcompiler.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\nvapi64.dll
2013-05-27 01:23:17 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-05-27 01:23:17 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-05-27 01:06:57 ----D---- C:\Users\Matěj\AppData\Roaming\NVIDIA
2013-05-27 00:42:18 ----D---- C:\Users\Matěj\AppData\Roaming\AVG2012
2013-05-27 00:41:58 ----D---- C:\Windows\SYSWOW64\drivers\AVG
2013-05-27 00:40:37 ----D---- C:\Windows\system32\drivers\AVG
2013-05-27 00:40:37 ----D---- C:\$AVG
2013-05-27 00:40:36 ----D---- C:\ProgramData\AVG2012
2013-05-27 00:39:49 ----D---- C:\Program Files (x86)\AVG
2013-05-23 23:13:48 ----D---- C:\ProgramData\NVIDIA Corporation
2013-05-23 23:13:11 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-05-23 23:13:11 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\OpenCL.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvgenco64.dll
2013-05-23 23:13:11 ----A---- C:\Windows\system32\nvdispco64.dll
2013-05-23 23:11:56 ----D---- C:\NVIDIA
2013-05-23 19:10:13 ----D---- C:\Users\Matěj\AppData\Roaming\Skype
2013-05-23 19:10:07 ----D---- C:\ProgramData\Skype
2013-05-21 21:31:42 ----D---- C:\Qoobox
2013-05-21 21:31:26 ----D---- C:\Windows\erdnt
2013-05-21 21:23:29 ----A---- C:\Windows\system32\drivers\stflt.sys
2013-05-21 20:44:10 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-05-21 20:44:10 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-05-21 20:44:10 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2013-05-21 20:44:09 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\wksprtPS.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\wksprt.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\tsgqec.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpudd.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpendp_winip.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\rdpcorets.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\mstsc.exe
2013-05-21 20:44:09 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-05-21 20:44:09 ----A---- C:\Windows\system32\aaclient.dll
2013-05-21 20:44:08 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-05-21 20:44:08 ----A---- C:\Windows\system32\mstscax.dll
2013-05-21 20:42:31 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-05-21 20:42:31 ----A---- C:\Windows\system32\schannel.dll
2013-05-21 20:42:31 ----A---- C:\Windows\system32\drivers\cng.sys
2013-05-21 20:42:30 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-05-21 20:42:30 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-05-21 20:42:30 ----A---- C:\Windows\system32\lsasrv.dll
2013-05-21 20:42:30 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-05-21 20:42:29 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-05-21 20:42:29 ----A---- C:\Windows\system32\qdvd.dll
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbd.sys
2013-05-19 21:48:10 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-05-19 21:48:08 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-05-19 21:48:08 ----A---- C:\Windows\system32\fsutil.exe
2013-05-19 21:48:08 ----A---- C:\Windows\system32\esent.dll
2013-05-19 21:48:08 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-05-19 21:48:07 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\storport.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-05-19 21:48:07 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-05-18 18:00:43 ----D---- C:\Program Files (x86)\StarCraft II
2013-05-18 17:44:14 ----D---- C:\Program Files (x86)\Google
2013-05-18 17:18:28 ----D---- C:\ProgramData\Blizzard Entertainment
2013-05-18 17:18:28 ----D---- C:\Program Files (x86)\Diablo III
2013-05-18 17:17:01 ----D---- C:\ProgramData\Battle.net
2013-05-18 16:07:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-05-18 16:01:12 ----D---- C:\Users\Matěj\AppData\Roaming\Adobe
2013-05-18 15:57:49 ----A---- C:\Windows\system32\IEUDINIT.EXE
2013-05-18 15:32:18 ----D---- C:\Windows\CheckSur
2013-05-18 15:30:29 ----D---- C:\Users\Matěj\AppData\Roaming\AVG2013
2013-05-18 15:30:23 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\url.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-05-18 15:30:22 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\wininet.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\wextract.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\webcheck.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\vbscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\urlmon.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\url.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\occache.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msrating.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msls31.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshtml.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\mshta.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jscript9.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\jscript.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\inseng.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\imgutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iexpress.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieui.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iesetup.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iertutil.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iernonce.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iepeers.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieframe.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ieapfltr.dat
2013-05-18 15:30:22 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-18 15:30:22 ----A---- C:\Windows\system32\icardie.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\elshyph.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-18 15:30:22 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-18 15:29:41 ----D---- C:\Users\Matěj\AppData\Roaming\TuneUp Software
2013-05-18 15:28:59 ----D---- C:\ProgramData\AVG2013
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-18 15:28:24 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-05-18 15:28:24 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\XpsPrint.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WMPhoto.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\UIAnimation.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\FntCache.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\dxgi.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\DWrite.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d11.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10warp.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10level9.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10_1.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d3d10.dll
2013-05-18 15:28:24 ----A---- C:\Windows\system32\d2d1.dll
2013-05-18 15:26:41 ----SHD---- C:\Windows\Installer
2013-05-18 15:26:31 ----HD---- C:\ProgramData\Common Files
2013-05-18 15:26:31 ----D---- C:\ProgramData\MFAData
2013-05-18 15:24:44 ----D---- C:\Windows\SYSWOW64\Wat
2013-05-18 15:24:42 ----D---- C:\Windows\system32\Wat
2013-05-18 14:59:01 ----A---- C:\Windows\system32\Wdfres.dll
2013-05-18 14:59:01 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-05-18 14:59:01 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-05-18 14:54:48 ----A---- C:\Windows\system32\browserchoice.exe
2013-05-18 14:50:36 ----D---- C:\Windows\Panther
2013-05-18 14:49:54 ----A---- C:\Windows\system32\MRT.exe
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-05-18 14:48:16 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\fontsub.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\atmlib.dll
2013-05-18 14:48:16 ----A---- C:\Windows\system32\atmfd.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-05-18 14:47:52 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-05-18 14:47:52 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFx.dll
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFHost.exe
2013-05-18 14:47:51 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-05-18 14:46:46 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-05-18 14:46:46 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\wmi.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\imagehlp.dll
2013-05-18 14:46:46 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-05-18 14:44:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-05-18 14:44:19 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-05-18 14:44:19 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\wow64win.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\ntvdm64.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\KernelBase.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\kernel32.dll
2013-05-18 14:44:19 ----A---- C:\Windows\system32\conhost.exe
2013-05-18 14:44:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-05-18 14:44:18 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-05-18 14:44:18 ----A---- C:\Windows\system32\wow64cpu.dll
2013-05-18 14:44:18 ----A---- C:\Windows\system32\wow64.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-05-18 14:44:09 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\shell32.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\consent.exe
2013-05-18 14:44:09 ----A---- C:\Windows\system32\authui.dll
2013-05-18 14:44:09 ----A---- C:\Windows\system32\appinfo.dll
2013-05-18 14:44:00 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-05-18 14:44:00 ----A---- C:\Windows\system32\Wpc.dll
2013-05-18 14:44:00 ----A---- C:\Windows\system32\gameux.dll
2013-05-18 14:43:59 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2013-05-18 14:43:51 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-05-18 14:43:51 ----A---- C:\Windows\system32\tzres.dll
2013-05-18 14:43:24 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-05-18 14:43:24 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-05-18 14:43:24 ----A---- C:\Windows\system32\sbe.dll
2013-05-18 14:43:24 ----A---- C:\Windows\system32\CPFilters.dll
2013-05-18 14:43:21 ----A---- C:\Windows\system32\tquery.dll
2013-05-18 14:43:21 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-05-18 14:43:21 ----A---- C:\Windows\system32\mssrch.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-05-18 14:43:20 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssvp.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssphtb.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\mssph.dll
2013-05-18 14:43:20 ----A---- C:\Windows\system32\msscntrs.dll
2013-05-18 14:43:17 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-05-18 14:43:17 ----A---- C:\Windows\system32\ntshrui.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\user.exe
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-05-18 14:43:14 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-05-18 14:43:14 ----A---- C:\Windows\system32\winsrv.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\netevent.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\nlasvc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\nlaapi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\netevent.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\netcorehc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\ncsi.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-05-18 14:42:58 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-05-18 14:42:56 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-05-18 14:42:56 ----A---- C:\Windows\system32\poqexec.exe
2013-05-18 14:42:47 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-05-18 14:42:47 ----A---- C:\Windows\system32\webio.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbctrac.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccu32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccr32.dll
2013-05-18 14:42:44 ----A---- C:\Windows\system32\odbccp32.dll
2013-05-18 14:42:39 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-05-18 14:42:39 ----A---- C:\Windows\system32\mfc42u.dll
2013-05-18 14:42:39 ----A---- C:\Windows\system32\mfc42.dll
2013-05-18 14:42:38 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-05-18 14:42:38 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2013-05-18 14:42:38 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2013-05-18 14:42:38 ----A---- C:\Windows\system32\dhcpcore6.dll
2013-05-18 14:42:37 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2013-05-18 14:42:36 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-05-18 14:42:36 ----A---- C:\Windows\system32\quartz.dll
2013-05-18 14:42:35 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2013-05-18 14:42:35 ----A---- C:\Windows\system32\xmllite.dll
2013-05-18 14:42:35 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-05-18 14:42:34 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-05-18 14:42:34 ----A---- C:\Windows\system32\msxml6.dll
2013-05-18 14:42:34 ----A---- C:\Windows\system32\msxml3.dll
2013-05-18 14:42:33 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-05-18 14:42:33 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-05-18 14:42:33 ----A---- C:\Windows\system32\msxml3r.dll
2013-05-18 14:42:32 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-05-18 14:42:32 ----A---- C:\Windows\explorer.exe
2013-05-18 14:42:31 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-05-18 14:42:31 ----A---- C:\Windows\system32\win32spl.dll
2013-05-18 14:42:31 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-18 14:42:31 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-18 14:42:31 ----A---- C:\Windows\system32\cdd.dll
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-05-18 14:42:30 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-05-18 14:42:27 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-18 14:42:27 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-18 14:42:24 ----A---- C:\Windows\system32\OxpsConverter.exe
2013-05-18 14:42:21 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2013-05-18 14:42:21 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\netio.sys
2013-05-18 14:42:20 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-05-18 14:42:19 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-05-18 14:42:18 ----A---- C:\Windows\system32\win32k.sys
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdpwsx.dll
2013-05-18 14:42:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\sspisrv.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\sspicli.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\secur32.dll
2013-05-18 14:42:17 ----A---- C:\Windows\system32\lsass.exe
2013-05-18 14:42:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-05-18 14:42:16 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\ncrypt.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-05-18 14:42:16 ----A---- C:\Windows\system32\dnsapi.dll
2013-05-18 14:42:15 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-05-18 14:42:14 ----A---- C:\Windows\system32\drivers\srv.sys
2013-05-18 14:42:13 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-05-18 14:42:13 ----A---- C:\Windows\system32\dpnet.dll
2013-05-18 14:42:11 ----A---- C:\Windows\system32\profsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-05-18 14:42:09 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\cryptsvc.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\cryptnet.dll
2013-05-18 14:42:09 ----A---- C:\Windows\system32\crypt32.dll
2013-05-18 14:42:06 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-05-18 14:42:06 ----A---- C:\Windows\system32\wintrust.dll
2013-05-18 14:42:04 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-05-18 14:42:04 ----A---- C:\Windows\system32\usp10.dll
2013-05-18 14:42:02 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-05-18 14:42:02 ----A---- C:\Windows\system32\msi.dll
2013-05-18 14:42:02 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-05-18 14:42:01 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-05-18 14:42:01 ----A---- C:\Windows\system32\psisdecd.dll
2013-05-18 14:42:00 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-05-18 14:42:00 ----A---- C:\Windows\system32\kerberos.dll
2013-05-18 14:42:00 ----A---- C:\Windows\system32\drivers\afd.sys
2013-05-18 14:41:55 ----A---- C:\Windows\system32\winresume.exe
2013-05-18 14:41:55 ----A---- C:\Windows\system32\winload.exe
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kdusb.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kdcom.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\kd1394.dll
2013-05-18 14:41:55 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-05-18 14:41:54 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-05-18 14:41:54 ----A---- C:\Windows\system32\synceng.dll
2013-05-18 14:41:53 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-05-18 14:41:53 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-05-18 14:41:53 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-05-18 14:41:52 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-05-18 14:41:52 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\taskhost.exe
2013-05-18 14:41:52 ----A---- C:\Windows\system32\smss.exe
2013-05-18 14:41:52 ----A---- C:\Windows\system32\netapi32.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\csrsrv.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\browser.dll
2013-05-18 14:41:52 ----A---- C:\Windows\system32\browcli.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-05-18 14:41:51 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-05-18 14:41:51 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-05-18 14:41:50 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-05-18 14:41:50 ----A---- C:\Windows\system32\inetcomm.dll
2013-05-18 14:41:49 ----A---- C:\Windows\SYSWOW64\srclient.dll
2013-05-18 14:41:49 ----A---- C:\Windows\system32\srcore.dll
2013-05-18 14:41:49 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-05-18 14:41:47 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-05-18 14:41:47 ----A---- C:\Windows\system32\msvcrt.dll
2013-05-18 14:41:46 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-05-18 14:41:46 ----A---- C:\Windows\system32\prevhost.exe
2013-05-18 14:41:45 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-05-18 14:41:45 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-05-18 14:41:45 ----A---- C:\Windows\system32\oleaut32.dll
2013-05-18 14:41:45 ----A---- C:\Windows\system32\oleacc.dll
2013-05-18 14:41:44 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-05-18 14:41:44 ----A---- C:\Windows\system32\EncDec.dll
2013-05-18 14:41:43 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-05-18 14:41:42 ----A---- C:\Windows\system32\localspl.dll
2013-05-18 14:41:41 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-05-18 14:41:41 ----A---- C:\Windows\system32\ntdll.dll
2013-05-18 14:41:39 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-05-18 14:41:39 ----A---- C:\Windows\system32\cdosys.dll
2013-05-18 14:41:38 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-05-18 14:41:37 ----A---- C:\Windows\system32\spoolsv.exe
2013-05-18 14:41:37 ----A---- C:\Windows\splwow64.exe
2013-05-18 14:33:17 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-05-18 14:33:17 ----A---- C:\Windows\system32\packager.dll
2013-05-18 14:26:37 ----D---- C:\Program Files\NVIDIA Corporation
2013-05-18 14:26:37 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-05-18 14:24:51 ----A---- C:\Windows\system32\rdpcore.dll
2013-05-18 14:24:50 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-05-18 14:24:50 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wups2.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wucltux.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wuaueng.dll
2013-05-18 14:21:34 ----A---- C:\Windows\system32\wuauclt.exe
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wups.dll
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wudriver.dll
2013-05-18 14:21:27 ----A---- C:\Windows\system32\wuapi.dll
2013-05-18 14:21:23 ----D---- C:\Users\Matěj\AppData\Roaming\Identities
2013-05-18 14:21:19 ----A---- C:\Windows\system32\wuwebv.dll
2013-05-18 14:21:19 ----A---- C:\Windows\system32\wuapp.exe
2013-05-18 14:21:03 ----SD---- C:\Users\Matěj\AppData\Roaming\Microsoft
2013-05-18 14:21:03 ----D---- C:\Users\Matěj\AppData\Roaming\Media Center Programs
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Šablony
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Plocha
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Oblíbené položky
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Nabídka Start
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Dokumenty
2013-05-18 14:20:51 ----SHD---- C:\ProgramData\Data aplikací
2013-05-18 14:20:51 ----D---- C:\Recovery
2013-05-18 13:54:12 ----D---- C:\Windows\SoftwareDistribution
2013-05-18 13:52:04 ----D---- C:\Windows\Prefetch
2013-05-18 13:51:23 ----ASH---- C:\pagefile.sys
2013-05-18 13:51:22 ----SHD---- C:\System Volume Information
2013-05-18 13:51:22 ----ASH---- C:\hiberfil.sys
2013-04-11 03:18:40 ----A---- C:\Windows\system32\drivers\avgtdia.sys
2013-03-14 22:07:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe

======List of files/folders modified in the last 3 months======

2013-06-11 22:02:49 ----RD---- C:\Program Files
2013-06-11 21:56:12 ----D---- C:\Windows\SYSWOW64\drivers
2013-06-11 21:44:48 ----D---- C:\Windows
2013-06-11 21:43:38 ----A---- C:\Windows\system.ini
2013-06-11 21:42:16 ----D---- C:\Windows\SysWOW64
2013-06-11 21:42:16 ----D---- C:\Windows\AppPatch
2013-06-11 21:42:15 ----D---- C:\Program Files (x86)\Common Files
2013-06-11 21:38:52 ----D---- C:\Windows\system32\drivers
2013-06-11 21:38:11 ----D---- C:\Windows\System32
2013-06-11 21:38:11 ----D---- C:\Windows\inf
2013-06-11 21:38:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-11 21:32:28 ----D---- C:\Windows\system32\config
2013-06-11 19:03:05 ----D---- C:\Windows\system32\catroot2
2013-06-11 19:03:05 ----D---- C:\Windows\system32\catroot
2013-06-11 19:03:04 ----D---- C:\Windows\winsxs
2013-06-06 21:35:42 ----A---- C:\Windows\win.ini
2013-06-03 14:11:42 ----RSD---- C:\Windows\assembly
2013-06-03 14:11:30 ----RSD---- C:\Windows\Fonts
2013-06-03 14:03:05 ----RD---- C:\Program Files (x86)
2013-06-03 14:03:05 ----D---- C:\Windows\ShellNew
2013-06-03 14:02:26 ----SD---- C:\ProgramData\Microsoft
2013-06-03 14:00:25 ----D---- C:\Windows\system
2013-06-03 13:45:07 ----D---- C:\Windows\rescache
2013-05-27 10:46:17 ----D---- C:\Windows\system32\Tasks
2013-05-27 10:29:03 ----D---- C:\ProgramData
2013-05-27 01:25:08 ----D---- C:\Windows\system32\DriverStore
2013-05-27 01:24:40 ----D---- C:\Windows\Help
2013-05-26 23:47:12 ----D---- C:\Windows\system32\drivers\UMDF
2013-05-23 23:16:06 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-05-23 23:16:06 ----D---- C:\Windows\system32\cs-CZ
2013-05-23 23:07:20 ----RD---- C:\Users
2013-05-21 22:04:10 ----D---- C:\Windows\system32\LogFiles
2013-05-21 21:07:25 ----D---- C:\Windows\Microsoft.NET
2013-05-21 20:45:07 ----D---- C:\Windows\SYSWOW64\wbem
2013-05-21 20:45:07 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\system32\wbem
2013-05-21 20:45:07 ----D---- C:\Windows\system32\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\system32\drivers\en-US
2013-05-21 20:45:07 ----D---- C:\Windows\PolicyDefinitions
2013-05-21 20:43:05 ----D---- C:\Windows\Logs
2013-05-21 20:43:05 ----D---- C:\Windows\debug
2013-05-19 21:45:10 ----D---- C:\Windows\system32\wdi
2013-05-18 17:44:23 ----D---- C:\Windows\Tasks
2013-05-18 15:58:05 ----D---- C:\Windows\SYSWOW64\migration
2013-05-18 15:58:05 ----D---- C:\Program Files\Internet Explorer
2013-05-18 15:58:05 ----D---- C:\Program Files (x86)\Internet Explorer
2013-05-18 15:58:04 ----D---- C:\Windows\system32\migration
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\it-IT
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\es-ES
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\el-GR
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\de-DE
2013-05-18 15:58:03 ----D---- C:\Windows\SYSWOW64\da-DK
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-TW
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-HK
2013-05-18 15:58:03 ----D---- C:\Windows\system32\zh-CN
2013-05-18 15:58:03 ----D---- C:\Windows\system32\tr-TR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\sv-SE
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ru-RU
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pt-PT
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pt-BR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\pl-PL
2013-05-18 15:58:03 ----D---- C:\Windows\system32\nl-NL
2013-05-18 15:58:03 ----D---- C:\Windows\system32\nb-NO
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ko-KR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\ja-JP
2013-05-18 15:58:03 ----D---- C:\Windows\system32\it-IT
2013-05-18 15:58:03 ----D---- C:\Windows\system32\hu-HU
2013-05-18 15:58:03 ----D---- C:\Windows\system32\fr-FR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\fi-FI
2013-05-18 15:58:03 ----D---- C:\Windows\system32\es-ES
2013-05-18 15:58:03 ----D---- C:\Windows\system32\el-GR
2013-05-18 15:58:03 ----D---- C:\Windows\system32\de-DE
2013-05-18 15:58:03 ----D---- C:\Windows\system32\da-DK
2013-05-18 15:19:57 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-05-18 15:19:57 ----D---- C:\Windows\ehome
2013-05-18 15:19:57 ----D---- C:\Program Files\Common Files\System
2013-05-18 15:19:46 ----D---- C:\Windows\system32\Boot
2013-05-18 15:19:45 ----D---- C:\Program Files\Windows Journal
2013-05-18 14:21:02 ----D---- C:\Windows\system32\restore
2013-05-18 14:20:51 ----D---- C:\Program Files\Windows NT
2013-05-18 14:05:50 ----D---- C:\Windows\system32\CodeIntegrity
2013-05-18 13:54:33 ----D---- C:\Windows\system32\sysprep
2013-05-18 13:52:00 ----D---- C:\Windows\CSC
2013-05-02 02:06:08 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2012-04-19 28480]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2012-01-31 36944]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2011-05-23 48992]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2012-11-08 307040]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2011-12-23 47696]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-04-11 384800]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2012-12-10 127328]
R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\avgidsfiltera.sys [2011-12-23 29776]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-12-19 194488]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2012\avgfws.exe [2012-12-05 2321560]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [2012-11-02 5174392]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-03-15 877856]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-18 116648]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-18 1255736]

-----------------EOF-----------------

Re: Prosím o odborný komentář, zd je log ComboFix, RSIT bude

Napsal: 11 čer 2013 21:08
od Rudy
Tento log je po skenu CF zcela zbytečný. Viz výše. Posty byly sloučeny a příště pište poze do jednoho vlákna.