Ahoj, jiz nejakou dobu mam zpomaleny internet a nepomohl ani reimage systemoveho disku tohoto meho soukromeho notebooku. Obcas, kdyz zacnu pouzivat internet, tak se stane, ze se pretizi router a prestane komunikovat s providerem a musim ho vypojit ze zasuvky a znovu nechat zinicializovat. Jina zarizeni pripojena do teze site (sluzebni notebook) tyto problemy nevykazuji. Nize prikladam vypis z logu od RSIT.
P. S. Jeste chci dodat, ze antivirak AVG 2013 ani Spybot2.1 ani Norman Malware Cleaner nic nenasel. Jeste se mi stava, ze nejake stranky mam blokovane napr. www.teamcowboy.com nebo www.volleywood.net - respektive browser hlasi "stranka se neda zobrazit" (hlaska v IE). Na firemnim notebooku to vse jede, jak ma (pretizeni ani blokovani stranek neexistuje).
Logfile of random's system information tool 1.09 (written by random/random)
Run by Zbynek at 2013-07-09 22:58:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 63 GB (62%) free of 102 GB
Total RAM: 4086 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:58:05, on 9.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
D:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
D:\Program Files (x86)\FreeCommander\FreeCommander.exe
C:\Program Files\trend micro\Zbynek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\windows\AsScrPro.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini"
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\RunOnce: [Reboot] AsusSender.exe C:\Windows\Reboot.exe 60 (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://my.ppg.com/dana-cached/sc/Junip ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\SysWOW64\AsusService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13513 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=65b13346-80cd-4054-9d1e-37089096075f /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\ef66366a-96ec-4f71-abf9-195f0560880c-1ec-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\WLANExt.exe 36369424
\??\C:\windows\system32\conhost.exe "1453013012-104234647714118416041390524143-8636712502025140877-1519739594-981075553
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\AsusService.exe
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Trend Micro\Titanium\TiMiniService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe"
\??\C:\windows\system32\conhost.exe "1291836822-1666835141-1112409334-12922935871649614087-12495062885949090781550574269
WLIDSvcM.exe 2220
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe" auto
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe" autorun
"C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"D:\Program Files (x86)\Opera\opera.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:267521 /prefetch:2
C:\windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe -Embedding
"C:\windows\System32\MsSpellCheckingFacility.exe" -Embedding
"D:\Program Files (x86)\FreeCommander\FreeCommander.exe"
"D:\Install\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17 264528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"LiveUpdate"=AsusSender.exe C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe auto []
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 192520]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 321872]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-11-01 165912]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-11-01 385560]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-11-01 364056]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-08-24 11447912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"=C:\windows\AsScrPro.exe [2011-04-29 3058304]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"CapsHook"=AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe [2011-01-07 414384]
"OOBESetup"=C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe [2011-01-04 345088]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-29 2018032]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-04-29 4408368]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2011-04-25 305088]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-10-24 261120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-08 15:12:43 ----A---- C:\AdwCleaner[R2].txt
2013-07-08 12:42:14 ----A---- C:\AdwCleaner[R1].txt
2013-07-08 12:36:47 ----D---- C:\rsit
2013-07-05 11:18:39 ----D---- C:\Users\Zbynek\AppData\Roaming\XnView
2013-07-01 13:54:23 ----A---- C:\windows\wininit.ini
2013-07-01 13:27:06 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:59:59 ----D---- C:\Users\Zbynek\AppData\Roaming\LavasoftStatistics
2013-07-01 12:56:44 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-07-01 12:56:43 ----A---- C:\windows\system32\sbbd.exe
2013-07-01 12:56:39 ----D---- C:\Users\Zbynek\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 12:46:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-01 12:46:36 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-01 11:03:57 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-01 10:52:00 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-07-01 10:51:59 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-07-01 00:02:03 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-07-01 00:02:03 ----A---- C:\windows\system32\elshyph.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\occache.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\url.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\wininet.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\urlmon.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-01 00:01:57 ----A---- C:\windows\system32\msrating.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\msls31.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\iertutil.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\url.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\jsproxy.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iesetup.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iernonce.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iedkcs32.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dat
2013-07-01 00:01:56 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-01 00:01:56 ----A---- C:\windows\system32\icardie.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtrans.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtmsft.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\wextract.exe
2013-07-01 00:01:55 ----A---- C:\windows\system32\webcheck.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\vbscript.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\mshtmled.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\msfeeds.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\licmgr10.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\inseng.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\iexpress.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\pngfilt.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\occache.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshtml.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshta.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\msfeedsbs.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\jscript.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\imgutil.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\ieUnatt.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\iepeers.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\mshtmler.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\msfeedssync.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\jscript9.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\ieui.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\iesysprep.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\IEAdvpack.dll
2013-07-01 00:01:52 ----A---- C:\windows\system32\ieframe.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-30 23:58:31 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbGD.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\aaclient.dll
2013-06-30 23:58:26 ----A---- C:\windows\SYSWOW64\mstsc.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\wksprt.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\TSWbPrxy.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpudd.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpendp_winip.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\mstsc.exe
2013-06-30 23:58:25 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-06-30 23:58:25 ----A---- C:\windows\system32\rdpcorets.dll
2013-06-30 23:58:24 ----A---- C:\windows\system32\mstscax.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-06-30 23:55:25 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-06-30 23:55:25 ----A---- C:\windows\system32\WMPhoto.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10_1.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10_1core.dll
2013-06-30 23:55:14 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\d3d10.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\FntCache.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\DWrite.dll
2013-06-30 23:55:12 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-06-30 23:55:12 ----A---- C:\windows\system32\d2d1.dll
2013-06-30 23:54:16 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-06-30 23:54:16 ----A---- C:\windows\system32\qdvd.dll
2013-06-30 23:54:13 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-06-30 23:54:13 ----A---- C:\windows\system32\schannel.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\lsasrv.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\cng.sys
2013-06-30 23:39:49 ----D---- C:\ProgramData\ASUS WebStorage
2013-06-30 18:12:58 ----A---- C:\windows\system32\MRT.exe
2013-06-30 18:08:52 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-06-30 18:08:49 ----A---- C:\windows\system32\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\system32\drivers\bthport.sys
2013-06-30 18:08:47 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\certutil.exe
2013-06-30 18:08:39 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-06-30 18:08:39 ----A---- C:\windows\system32\certenc.dll
2013-06-30 18:08:25 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-06-30 18:08:24 ----A---- C:\windows\system32\cdosys.dll
2013-06-30 18:08:15 ----A---- C:\windows\system32\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\SYSWOW64\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\system32\fsutil.exe
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\storport.sys
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-06-30 18:08:13 ----A---- C:\windows\SYSWOW64\fsutil.exe
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-06-30 18:08:12 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-06-30 18:08:01 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbport.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbd.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-06-30 18:06:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-06-30 18:06:49 ----A---- C:\windows\system32\win32k.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\cdd.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmfd.dll
2013-06-28 20:57:14 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-06-28 20:57:13 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-06-28 20:57:13 ----A---- C:\windows\system32\wmi.dll
2013-06-28 20:55:18 ----A---- C:\windows\system32\winsrv.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-06-28 20:55:14 ----A---- C:\windows\SYSWOW64\user.exe
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml6.dll
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml3.dll
2013-06-28 20:55:08 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-06-28 20:55:07 ----A---- C:\windows\system32\msxml3r.dll
2013-06-28 20:55:06 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-06-28 20:55:06 ----A---- C:\windows\system32\msvcrt.dll
2013-06-28 20:55:05 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-06-28 20:55:04 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-06-28 20:55:03 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-06-28 20:55:03 ----A---- C:\windows\system32\ncrypt.dll
2013-06-28 20:55:01 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browser.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browcli.dll
2013-06-28 20:54:55 ----A---- C:\windows\system32\localspl.dll
2013-06-28 20:54:53 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-06-28 20:54:53 ----A---- C:\windows\system32\synceng.dll
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\rdpwsx.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\dpnet.dll
2013-06-28 20:54:46 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-06-28 20:54:45 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-06-28 20:54:45 ----A---- C:\windows\system32\kerberos.dll
2013-06-28 20:48:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-06-28 20:48:09 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-06-28 20:48:08 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\smss.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\csrsrv.dll
2013-06-28 20:48:07 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-06-27 23:48:18 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2013-06-27 23:48:18 ----A---- C:\windows\system32\CPFilters.dll
2013-06-27 23:48:17 ----A---- C:\windows\SYSWOW64\sbe.dll
2013-06-27 23:48:17 ----A---- C:\windows\system32\sbe.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccu32.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbccp32.dll
2013-06-27 23:48:10 ----A---- C:\windows\SYSWOW64\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\lsass.exe
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspisrv.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspicli.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\secur32.dll
2013-06-27 23:48:08 ----A---- C:\windows\system32\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnsrslvr.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnscacheugc.exe
2013-06-27 23:48:05 ----A---- C:\windows\system32\psisdecd.dll
2013-06-27 23:48:04 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2013-06-27 23:48:02 ----A---- C:\windows\system32\mfc42u.dll
2013-06-27 23:48:01 ----A---- C:\windows\SYSWOW64\mfc42.dll
2013-06-27 23:48:01 ----A---- C:\windows\system32\mfc42.dll
2013-06-27 23:48:00 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2013-06-27 23:47:59 ----A---- C:\windows\system32\FXSCOVER.exe
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv2.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv.sys
2013-06-27 23:47:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-06-27 23:47:55 ----A---- C:\windows\system32\ntdll.dll
2013-06-27 23:47:53 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-06-27 23:47:53 ----A---- C:\windows\system32\quartz.dll
2013-06-27 23:47:50 ----A---- C:\windows\system32\drivers\bowser.sys
2013-06-27 23:47:48 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleacc.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleacc.dll
2013-06-27 23:47:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-06-27 23:47:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2013-06-27 23:47:43 ----A---- C:\windows\system32\inetcomm.dll
2013-06-27 23:47:42 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-06-27 23:47:42 ----A---- C:\windows\system32\EncDec.dll
2013-06-27 23:47:40 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-06-27 23:47:40 ----A---- C:\windows\system32\rdpcore.dll
2013-06-27 23:47:39 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-06-27 23:46:39 ----A---- C:\windows\SYSWOW64\packager.dll
2013-06-27 23:46:39 ----A---- C:\windows\system32\packager.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwansvc.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwanprotdim.dll
2013-06-27 23:13:41 ----A---- C:\windows\system32\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-06-27 23:13:40 ----A---- C:\windows\system32\gameux.dll
2013-06-27 23:13:08 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-06-27 23:13:08 ----A---- C:\windows\system32\usp10.dll
2013-06-27 23:12:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-06-27 23:12:31 ----A---- C:\windows\system32\tzres.dll
2013-06-27 23:11:46 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-06-27 23:11:46 ----A---- C:\windows\system32\cryptdlg.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcore6.dll
2013-06-27 23:11:22 ----A---- C:\windows\system32\taskhost.exe
2013-06-27 22:58:16 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-06-27 22:58:16 ----A---- C:\windows\system32\d3d11.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\nlasvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\iphlpsvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\drivers\netio.sys
2013-06-27 22:20:18 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\nlaapi.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\ndis.sys
2013-06-27 22:20:12 ----A---- C:\windows\system32\profsvc.dll
2013-06-27 22:20:11 ----A---- C:\windows\system32\OxpsConverter.exe
2013-06-27 22:20:08 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-06-27 22:20:08 ----A---- C:\windows\system32\wintrust.dll
2013-06-27 22:19:38 ----A---- C:\windows\system32\msi.dll
2013-06-27 22:19:37 ----A---- C:\windows\SYSWOW64\msi.dll
2013-06-27 22:17:52 ----A---- C:\windows\system32\KernelBase.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\wow64win.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\kernel32.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\conhost.exe
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----A---- C:\windows\system32\ntvdm64.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----A---- C:\windows\system32\wow64.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----A---- C:\windows\system32\wow64cpu.dll
2013-06-27 22:17:17 ----A---- C:\windows\system32\shell32.dll
2013-06-27 22:17:15 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\consent.exe
2013-06-27 22:17:14 ----A---- C:\windows\system32\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\appinfo.dll
2013-06-27 22:16:58 ----A---- C:\windows\SYSWOW64\xmllite.dll
2013-06-27 22:16:58 ----A---- C:\windows\system32\xmllite.dll
2013-06-27 22:16:54 ----A---- C:\windows\SYSWOW64\explorer.exe
2013-06-27 22:16:54 ----A---- C:\windows\explorer.exe
2013-06-27 22:16:51 ----A---- C:\windows\system32\tquery.dll
2013-06-27 22:16:51 ----A---- C:\windows\system32\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\tquery.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\mssph.dll
2013-06-27 22:16:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\system32\mssph.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\msscntrs.dll
2013-06-27 22:16:47 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2013-06-27 22:16:38 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-06-27 22:16:38 ----A---- C:\windows\system32\ntshrui.dll
2013-06-27 22:16:35 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-06-27 22:16:35 ----A---- C:\windows\system32\poqexec.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\drvinst.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devrtl.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devobj.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2013-06-27 22:16:07 ----A---- C:\windows\system32\umpnpmgr.dll
2013-06-27 22:16:05 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-06-27 22:16:05 ----A---- C:\windows\system32\srcore.dll
2013-06-27 08:00:30 ----SHD---- C:\Boot
2013-06-27 07:04:22 ----D---- C:\windows\SoftwareDistribution
2013-06-27 07:01:21 ----ASH---- C:\pagefile.sys
2013-06-27 07:01:21 ----ASH---- C:\hiberfil.sys
2013-06-27 07:01:20 ----SHD---- C:\System Volume Information
2013-06-26 23:38:56 ----D---- C:\windows\SYSWOW64\Wat
2013-06-26 23:38:56 ----D---- C:\windows\system32\Wat
2013-06-26 23:15:50 ----A---- C:\windows\system32\Wdfres.dll
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-06-26 23:15:24 ----A---- C:\windows\system32\browserchoice.exe
2013-06-26 23:14:40 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-06-26 23:14:34 ----D---- C:\windows\system32\Macromed
2013-06-26 23:14:05 ----A---- C:\windows\system32\WUDFSvc.dll
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-06-26 23:14:04 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFHost.exe
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-06-26 23:14:02 ----A---- C:\windows\system32\WUDFx.dll
2013-06-26 23:12:27 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-06-26 23:12:26 ----A---- C:\windows\SYSWOW64\prevhost.exe
2013-06-26 23:12:26 ----A---- C:\windows\system32\prevhost.exe
2013-06-26 23:11:25 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-06-26 23:11:23 ----A---- C:\windows\system32\spoolsv.exe
2013-06-26 23:11:23 ----A---- C:\windows\splwow64.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winresume.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winload.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdusb.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdcom.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kd1394.dll
2013-06-26 22:53:07 ----D---- C:\ProgramData\Citrix
2013-06-26 22:52:51 ----D---- C:\Users\Zbynek\AppData\Roaming\ICAClient
2013-06-26 22:52:44 ----D---- C:\Program Files (x86)\Citrix
2013-06-26 22:50:13 ----D---- C:\Users\Zbynek\AppData\Roaming\Juniper Networks
2013-06-26 22:46:01 ----A---- C:\windows\system32\wups2.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wucltux.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuaueng.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuauclt.exe
2013-06-26 22:45:48 ----A---- C:\windows\system32\wups.dll
2013-06-26 22:45:48 ----A---- C:\windows\system32\wudriver.dll
2013-06-26 22:45:47 ----A---- C:\windows\system32\wuapi.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuwebv.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuapp.exe
2013-06-26 22:41:42 ----D---- C:\Users\Zbynek\AppData\Roaming\AVG2013
2013-06-26 22:40:58 ----D---- C:\Users\Zbynek\AppData\Roaming\TuneUp Software
2013-06-26 22:40:45 ----HD---- C:\$AVG
2013-06-26 22:40:45 ----D---- C:\ProgramData\AVG2013
2013-06-26 22:35:08 ----HD---- C:\ProgramData\Common Files
2013-06-26 22:35:08 ----D---- C:\ProgramData\MFAData
2013-06-26 22:30:51 ----D---- C:\Users\Zbynek\AppData\Roaming\Opera
2013-06-26 22:24:11 ----SHD---- C:\$RECYCLE.BIN
2013-06-26 22:21:07 ----A---- C:\windows\Language.ini
2013-06-26 22:20:45 ----D---- C:\windows\ConfigSetRoot
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTKHDRC.dat
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-06-26 22:20:34 ----A---- C:\windows\system32\AsusScr_1215N_ENG.scr
2013-06-26 22:20:12 ----D---- C:\Program Files (x86)\ASM104xUSB3
2013-06-26 22:19:49 ----D---- C:\windows\system32\SRSLabs
2013-06-26 22:19:48 ----D---- C:\Program Files\Realtek
2013-06-26 22:19:47 ----D---- C:\windows\SYSWOW64\RTCOM
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\SamSfPa.dat
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\rtkhdaud.dat
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtPgEx64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtlCPAPI64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkCfg64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkAPO64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkApi64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEP64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEL64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEG64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEED64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTCOM64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DHT64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DAA64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RCoInst64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\drivers\RTKVHD64.sys
2013-06-26 22:19:20 ----A---- C:\windows\system32\FMAPO64.dll
2013-06-26 22:19:19 ----D---- C:\Program Files (x86)\Realtek
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAR64.dll
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAC64.dll
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\Temp
2013-06-26 22:19:17 ----A---- C:\windows\RtlExUpd.dll
2013-06-26 22:17:41 ----SD---- C:\Users\Zbynek\AppData\Roaming\Microsoft
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Macromedia
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\InstallShield
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Identities
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\ASUS WebStorage
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Adobe
2013-06-26 22:14:47 ----SHD---- C:\Recovery
======List of files/folders modified in the last 1 month======
2013-07-09 22:58:03 ----D---- C:\Program Files\Trend Micro
2013-07-09 22:53:34 ----D---- C:\windows\Temp
2013-07-09 21:53:15 ----D---- C:\ProgramData\NVIDIA
2013-07-09 20:00:25 ----D---- C:\windows\system32\config
2013-07-09 19:49:19 ----SHD---- C:\windows\Installer
2013-07-07 22:39:29 ----D---- C:\windows\Microsoft.NET
2013-07-07 22:32:32 ----RSD---- C:\windows\assembly
2013-07-05 11:06:48 ----D---- C:\windows\System32
2013-07-05 11:06:48 ----D---- C:\windows\inf
2013-07-05 11:06:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-01 13:54:29 ----SD---- C:\ProgramData\Microsoft
2013-07-01 13:54:23 ----D---- C:\Windows
2013-07-01 13:27:12 ----D---- C:\windows\system32\Tasks
2013-07-01 13:27:06 ----HD---- C:\ProgramData
2013-07-01 13:21:59 ----AD---- C:\windows\system32\drivers
2013-07-01 13:21:44 ----D---- C:\windows\winsxs
2013-07-01 12:50:35 ----D---- C:\windows\SysWOW64
2013-07-01 12:46:36 ----RD---- C:\Program Files (x86)
2013-07-01 12:46:36 ----RD---- C:\Program Files
2013-07-01 11:11:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-01 11:11:46 ----D---- C:\windows\system32\cs-CZ
2013-07-01 11:03:58 ----D---- C:\windows\SYSWOW64\en-US
2013-07-01 11:03:58 ----D---- C:\windows\system32\en-US
2013-07-01 10:50:57 ----D---- C:\windows\system32\catroot
2013-07-01 10:50:56 ----D---- C:\windows\system32\catroot2
2013-07-01 10:07:06 ----D---- C:\windows\SYSWOW64\sk-SK
2013-07-01 10:07:06 ----D---- C:\windows\system32\sk-SK
2013-07-01 10:07:06 ----D---- C:\Program Files\Internet Explorer
2013-07-01 10:07:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-01 10:07:05 ----D---- C:\windows\SYSWOW64\pl-PL
2013-07-01 10:07:04 ----D---- C:\windows\SYSWOW64\hu-HU
2013-07-01 10:07:04 ----D---- C:\windows\system32\pl-PL
2013-07-01 10:07:03 ----D---- C:\windows\system32\hu-HU
2013-07-01 10:06:57 ----D---- C:\windows\SYSWOW64\migration
2013-07-01 10:06:53 ----D---- C:\windows\PolicyDefinitions
2013-07-01 10:06:52 ----D---- C:\windows\system32\migration
2013-07-01 10:06:46 ----D---- C:\windows\SYSWOW64\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\drivers\en-US
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-PT
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-BR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\ko-KR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\it-IT
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-TW
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-HK
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-CN
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\tr-TR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\sv-SE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ru-RU
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nl-NL
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nb-NO
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ja-JP
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fr-FR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fi-FI
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\es-ES
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\el-GR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\de-DE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\da-DK
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-PT
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-BR
2013-07-01 10:06:39 ----D---- C:\windows\system32\it-IT
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-TW
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-HK
2013-07-01 10:06:38 ----D---- C:\windows\system32\tr-TR
2013-07-01 10:06:38 ----D---- C:\windows\system32\sv-SE
2013-07-01 10:06:38 ----D---- C:\windows\system32\nl-NL
2013-07-01 10:06:38 ----D---- C:\windows\system32\ko-KR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fr-FR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fi-FI
2013-07-01 10:06:38 ----D---- C:\windows\system32\es-ES
2013-07-01 10:06:38 ----D---- C:\windows\system32\el-GR
2013-07-01 10:06:38 ----D---- C:\windows\system32\de-DE
2013-07-01 10:06:37 ----D---- C:\windows\system32\zh-CN
2013-07-01 10:06:37 ----D---- C:\windows\system32\ru-RU
2013-07-01 10:06:37 ----D---- C:\windows\system32\nb-NO
2013-07-01 10:06:37 ----D---- C:\windows\system32\ja-JP
2013-07-01 10:06:37 ----D---- C:\windows\system32\da-DK
2013-07-01 10:06:32 ----D---- C:\windows\system32\DriverStore
2013-07-01 10:06:31 ----D---- C:\windows\SYSWOW64\drivers
2013-07-01 10:04:34 ----D---- C:\windows\Logs
2013-06-30 23:47:00 ----D---- C:\windows\system32\wdi
2013-06-30 23:42:14 ----D---- C:\AsusVibeData
2013-06-30 23:42:06 ----D---- C:\Program Files (x86)\Asus
2013-06-30 18:13:00 ----D---- C:\windows\debug
2013-06-30 15:31:00 ----D---- C:\windows\AppPatch
2013-06-30 15:30:56 ----D---- C:\Program Files\Windows Journal
2013-06-27 23:52:56 ----D---- C:\windows\ehome
2013-06-27 23:52:56 ----D---- C:\Program Files\Common Files\System
2013-06-27 23:28:42 ----RSD---- C:\windows\Fonts
2013-06-27 22:57:12 ----D---- C:\windows\Prefetch
2013-06-27 22:18:49 ----D---- C:\windows\system32\LogFiles
2013-06-27 07:13:45 ----D---- C:\windows\rescache
2013-06-27 07:13:21 ----D---- C:\windows\SYSWOW64\NV
2013-06-27 07:13:21 ----D---- C:\windows\system32\NV
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\pl-PL
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\hu-HU
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\cs-CZ
2013-06-26 23:38:53 ----D---- C:\windows\system32\Boot
2013-06-26 22:50:19 ----D---- C:\windows\Downloaded Program Files
2013-06-26 22:38:27 ----D---- C:\windows\system32\restore
2013-06-26 22:32:50 ----D---- C:\windows\system32\CodeIntegrity
2013-06-26 22:21:11 ----D---- C:\ProgramData\Trend Micro
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-26 22:17:40 ----RD---- C:\Users
2013-06-26 22:14:49 ----D---- C:\windows\panther
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-07-01 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-06 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\windows\SysWow64\drivers\AsIO.sys [2010-06-28 13440]
R1 AsUpIO;AsUpIO; C:\windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952]
R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2011-04-25 87600]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 90704]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 144464]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 105552]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-05-21 341032]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-05-21 102440]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-05-21 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-05-21 21544]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-10-24 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-08-24 2472680]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-07-29 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 DETECT PS2: ;DETECT PS2: ; \??\C:\Program Files (x86)\ASUS\LiveUpdate\DetectSys.sys [2010-05-27 6144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AsusService;Asus Launcher Service; C:\windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-05-14 4937264]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-06 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 267480]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-06-26 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zpomaleny internet
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomaleny internet
Zdravím!
Spusťte nejprve tuto utilitu:
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte na Search (Prohledat)
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomaleny internet
Ahoj Rudy, diky za kontakt. Zde je vyzadany log
# AdwCleaner v2.303 - Log vytvooen 10/07/2013 v 21:59:41
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Zbynek - ZBYNEK-NOTAK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Zbynek\Desktop\adwcleaner.exe
# Volba [Prohledat]
***** [Služby] *****
***** [Soubory / Složky] *****
Soubor Nalezeno : C:\Users\Public\Desktop\eBay.lnk
***** [Registry] *****
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
***** [Internetové prohlížeee] *****
-\\ Internet Explorer v10.0.9200.16618
[OK] Registry jsou eisté.
-\\ Opera v [Nemohu získat verzi]
Soubor : C:\Users\Zbynek\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] Soubor je eistý.
*************************
AdwCleaner[R1].txt - [1018 octets] - [08/07/2013 12:42:14]
AdwCleaner[R2].txt - [1079 octets] - [08/07/2013 15:12:43]
AdwCleaner[R3].txt - [1024 octets] - [10/07/2013 21:59:41]
########## EOF - C:\AdwCleaner[R3].txt - [1084 octets] ##########
# AdwCleaner v2.303 - Log vytvooen 10/07/2013 v 21:59:41
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Zbynek - ZBYNEK-NOTAK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Zbynek\Desktop\adwcleaner.exe
# Volba [Prohledat]
***** [Služby] *****
***** [Soubory / Složky] *****
Soubor Nalezeno : C:\Users\Public\Desktop\eBay.lnk
***** [Registry] *****
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
***** [Internetové prohlížeee] *****
-\\ Internet Explorer v10.0.9200.16618
[OK] Registry jsou eisté.
-\\ Opera v [Nemohu získat verzi]
Soubor : C:\Users\Zbynek\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] Soubor je eistý.
*************************
AdwCleaner[R1].txt - [1018 octets] - [08/07/2013 12:42:14]
AdwCleaner[R2].txt - [1079 octets] - [08/07/2013 15:12:43]
AdwCleaner[R3].txt - [1024 octets] - [10/07/2013 21:59:41]
########## EOF - C:\AdwCleaner[R3].txt - [1084 octets] ##########
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomaleny internet
Spusťte znovu ADWCleaner a klikněte na >Delete< (smazat). Vložte nový log.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomaleny internet
Rudy,
Here we go!
# AdwCleaner v2.303 - Log vytvooen 10/07/2013 v 22:56:56
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Zbynek - ZBYNEK-NOTAK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Zbynek\Desktop\adwcleaner.exe
# Volba [Vymazat]
***** [Služby] *****
***** [Soubory / Složky] *****
Soubor Vymazáno : C:\Users\Public\Desktop\eBay.lnk
***** [Registry] *****
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
***** [Internetové prohlížeee] *****
-\\ Internet Explorer v10.0.9200.16618
[OK] Registry jsou eisté.
-\\ Opera v [Nemohu získat verzi]
Soubor : C:\Users\Zbynek\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] Soubor je eistý.
*************************
AdwCleaner[R1].txt - [1018 octets] - [08/07/2013 12:42:14]
AdwCleaner[R2].txt - [1079 octets] - [08/07/2013 15:12:43]
AdwCleaner[R3].txt - [1153 octets] - [10/07/2013 21:59:41]
AdwCleaner[R4].txt - [1213 octets] - [10/07/2013 22:56:13]
AdwCleaner[S1].txt - [1142 octets] - [10/07/2013 22:56:56]
########## EOF - C:\AdwCleaner[S1].txt - [1202 octets] ##########
Here we go!
# AdwCleaner v2.303 - Log vytvooen 10/07/2013 v 22:56:56
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Zbynek - ZBYNEK-NOTAK
# Spuštin systém : Normální
# Spuštino z : C:\Users\Zbynek\Desktop\adwcleaner.exe
# Volba [Vymazat]
***** [Služby] *****
***** [Soubory / Složky] *****
Soubor Vymazáno : C:\Users\Public\Desktop\eBay.lnk
***** [Registry] *****
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Klíe Vymazáno : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
***** [Internetové prohlížeee] *****
-\\ Internet Explorer v10.0.9200.16618
[OK] Registry jsou eisté.
-\\ Opera v [Nemohu získat verzi]
Soubor : C:\Users\Zbynek\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] Soubor je eistý.
*************************
AdwCleaner[R1].txt - [1018 octets] - [08/07/2013 12:42:14]
AdwCleaner[R2].txt - [1079 octets] - [08/07/2013 15:12:43]
AdwCleaner[R3].txt - [1153 octets] - [10/07/2013 21:59:41]
AdwCleaner[R4].txt - [1213 octets] - [10/07/2013 22:56:13]
AdwCleaner[S1].txt - [1142 octets] - [10/07/2013 22:56:56]
########## EOF - C:\AdwCleaner[S1].txt - [1202 octets] ##########
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomaleny internet
Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomaleny internet
Zde je prislusny log
Logfile of random's system information tool 1.09 (written by random/random)
Run by Zbynek at 2013-07-11 17:14:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 63 GB (62%) free of 102 GB
Total RAM: 4086 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:14:22, on 11.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe
C:\Program Files (x86)\Asus\APRP\aprp.exe
C:\windows\SysWOW64\RunDll32.exe
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files\trend micro\Zbynek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\windows\AsScrPro.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini"
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\RunOnce: [Reboot] AsusSender.exe C:\Windows\Reboot.exe 60 (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://my.ppg.com/dana-cached/sc/Junip ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\SysWOW64\AsusService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13468 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=91d8c97d-4b72-4d53-8c8c-136f8f3bb911 /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\2ccb0142-87b3-464a-b5b0-e838d185e041-1ec-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 35072080
\??\C:\windows\system32\conhost.exe "701173337458916659189456863693473495710681401356021320-1626234041-1822180324
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\AsusService.exe
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Trend Micro\Titanium\TiMiniService.exe"
"C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe"
\??\C:\windows\system32\conhost.exe "-15546496448929136961534646815-1369052218-900954391-1470190336-593237202615201261
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2392
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe" auto
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
"C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe" autorun
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
"C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe"
"C:\Program Files (x86)\Asus\APRP\aprp.exe"
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\windows\system32\sppsvc.exe
"D:\Install\RSITx64.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe" /AppMode=UPDATE /pri=2 /sched=2 /source=inet /path="" /caller=SCHEDULER
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17 264528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"LiveUpdate"=AsusSender.exe C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe auto []
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 192520]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 321872]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-11-01 165912]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-11-01 385560]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-11-01 364056]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-08-24 11447912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"=C:\windows\AsScrPro.exe [2011-04-29 3058304]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"CapsHook"=AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe [2011-01-07 414384]
"OOBESetup"=C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe [2011-01-04 345088]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-29 2018032]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-04-29 4408368]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2011-04-25 305088]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-10-24 261120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-10 22:56:56 ----A---- C:\AdwCleaner[S1].txt
2013-07-10 22:56:13 ----A---- C:\AdwCleaner[R4].txt
2013-07-10 21:59:41 ----A---- C:\AdwCleaner[R3].txt
2013-07-08 15:12:43 ----A---- C:\AdwCleaner[R2].txt
2013-07-08 12:42:14 ----A---- C:\AdwCleaner[R1].txt
2013-07-08 12:36:47 ----D---- C:\rsit
2013-07-05 11:18:39 ----D---- C:\Users\Zbynek\AppData\Roaming\XnView
2013-07-01 13:54:23 ----A---- C:\windows\wininit.ini
2013-07-01 13:27:06 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:59:59 ----D---- C:\Users\Zbynek\AppData\Roaming\LavasoftStatistics
2013-07-01 12:56:44 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-07-01 12:56:43 ----A---- C:\windows\system32\sbbd.exe
2013-07-01 12:56:39 ----D---- C:\Users\Zbynek\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 12:46:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-01 12:46:36 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-01 11:03:57 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-01 10:52:00 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-07-01 10:51:59 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-07-01 00:02:03 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-07-01 00:02:03 ----A---- C:\windows\system32\elshyph.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\occache.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\url.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\wininet.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\urlmon.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-01 00:01:57 ----A---- C:\windows\system32\msrating.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\msls31.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\iertutil.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\url.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\jsproxy.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iesetup.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iernonce.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iedkcs32.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dat
2013-07-01 00:01:56 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-01 00:01:56 ----A---- C:\windows\system32\icardie.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtrans.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtmsft.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\wextract.exe
2013-07-01 00:01:55 ----A---- C:\windows\system32\webcheck.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\vbscript.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\mshtmled.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\msfeeds.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\licmgr10.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\inseng.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\iexpress.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\pngfilt.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\occache.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshtml.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshta.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\msfeedsbs.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\jscript.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\imgutil.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\ieUnatt.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\iepeers.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\mshtmler.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\msfeedssync.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\jscript9.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\ieui.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\iesysprep.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\IEAdvpack.dll
2013-07-01 00:01:52 ----A---- C:\windows\system32\ieframe.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-30 23:58:31 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbGD.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\aaclient.dll
2013-06-30 23:58:26 ----A---- C:\windows\SYSWOW64\mstsc.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\wksprt.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\TSWbPrxy.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpudd.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpendp_winip.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\mstsc.exe
2013-06-30 23:58:25 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-06-30 23:58:25 ----A---- C:\windows\system32\rdpcorets.dll
2013-06-30 23:58:24 ----A---- C:\windows\system32\mstscax.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-06-30 23:55:25 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-06-30 23:55:25 ----A---- C:\windows\system32\WMPhoto.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10_1.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10_1core.dll
2013-06-30 23:55:14 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\d3d10.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\FntCache.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\DWrite.dll
2013-06-30 23:55:12 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-06-30 23:55:12 ----A---- C:\windows\system32\d2d1.dll
2013-06-30 23:54:16 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-06-30 23:54:16 ----A---- C:\windows\system32\qdvd.dll
2013-06-30 23:54:13 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-06-30 23:54:13 ----A---- C:\windows\system32\schannel.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\lsasrv.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\cng.sys
2013-06-30 23:39:49 ----D---- C:\ProgramData\ASUS WebStorage
2013-06-30 18:12:58 ----A---- C:\windows\system32\MRT.exe
2013-06-30 18:08:52 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-06-30 18:08:49 ----A---- C:\windows\system32\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\system32\drivers\bthport.sys
2013-06-30 18:08:47 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\certutil.exe
2013-06-30 18:08:39 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-06-30 18:08:39 ----A---- C:\windows\system32\certenc.dll
2013-06-30 18:08:25 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-06-30 18:08:24 ----A---- C:\windows\system32\cdosys.dll
2013-06-30 18:08:15 ----A---- C:\windows\system32\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\SYSWOW64\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\system32\fsutil.exe
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\storport.sys
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-06-30 18:08:13 ----A---- C:\windows\SYSWOW64\fsutil.exe
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-06-30 18:08:12 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-06-30 18:08:01 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbport.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbd.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-06-30 18:06:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-06-30 18:06:49 ----A---- C:\windows\system32\win32k.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\cdd.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmfd.dll
2013-06-28 20:57:14 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-06-28 20:57:13 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-06-28 20:57:13 ----A---- C:\windows\system32\wmi.dll
2013-06-28 20:55:18 ----A---- C:\windows\system32\winsrv.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-06-28 20:55:14 ----A---- C:\windows\SYSWOW64\user.exe
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml6.dll
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml3.dll
2013-06-28 20:55:08 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-06-28 20:55:07 ----A---- C:\windows\system32\msxml3r.dll
2013-06-28 20:55:06 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-06-28 20:55:06 ----A---- C:\windows\system32\msvcrt.dll
2013-06-28 20:55:05 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-06-28 20:55:04 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-06-28 20:55:03 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-06-28 20:55:03 ----A---- C:\windows\system32\ncrypt.dll
2013-06-28 20:55:01 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browser.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browcli.dll
2013-06-28 20:54:55 ----A---- C:\windows\system32\localspl.dll
2013-06-28 20:54:53 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-06-28 20:54:53 ----A---- C:\windows\system32\synceng.dll
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\rdpwsx.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\dpnet.dll
2013-06-28 20:54:46 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-06-28 20:54:45 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-06-28 20:54:45 ----A---- C:\windows\system32\kerberos.dll
2013-06-28 20:48:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-06-28 20:48:09 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-06-28 20:48:08 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\smss.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\csrsrv.dll
2013-06-28 20:48:07 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-06-27 23:48:18 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2013-06-27 23:48:18 ----A---- C:\windows\system32\CPFilters.dll
2013-06-27 23:48:17 ----A---- C:\windows\SYSWOW64\sbe.dll
2013-06-27 23:48:17 ----A---- C:\windows\system32\sbe.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccu32.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbccp32.dll
2013-06-27 23:48:10 ----A---- C:\windows\SYSWOW64\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\lsass.exe
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspisrv.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspicli.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\secur32.dll
2013-06-27 23:48:08 ----A---- C:\windows\system32\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnsrslvr.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnscacheugc.exe
2013-06-27 23:48:05 ----A---- C:\windows\system32\psisdecd.dll
2013-06-27 23:48:04 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2013-06-27 23:48:02 ----A---- C:\windows\system32\mfc42u.dll
2013-06-27 23:48:01 ----A---- C:\windows\SYSWOW64\mfc42.dll
2013-06-27 23:48:01 ----A---- C:\windows\system32\mfc42.dll
2013-06-27 23:48:00 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2013-06-27 23:47:59 ----A---- C:\windows\system32\FXSCOVER.exe
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv2.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv.sys
2013-06-27 23:47:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-06-27 23:47:55 ----A---- C:\windows\system32\ntdll.dll
2013-06-27 23:47:53 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-06-27 23:47:53 ----A---- C:\windows\system32\quartz.dll
2013-06-27 23:47:50 ----A---- C:\windows\system32\drivers\bowser.sys
2013-06-27 23:47:48 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleacc.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleacc.dll
2013-06-27 23:47:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-06-27 23:47:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2013-06-27 23:47:43 ----A---- C:\windows\system32\inetcomm.dll
2013-06-27 23:47:42 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-06-27 23:47:42 ----A---- C:\windows\system32\EncDec.dll
2013-06-27 23:47:40 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-06-27 23:47:40 ----A---- C:\windows\system32\rdpcore.dll
2013-06-27 23:47:39 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-06-27 23:46:39 ----A---- C:\windows\SYSWOW64\packager.dll
2013-06-27 23:46:39 ----A---- C:\windows\system32\packager.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwansvc.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwanprotdim.dll
2013-06-27 23:13:41 ----A---- C:\windows\system32\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-06-27 23:13:40 ----A---- C:\windows\system32\gameux.dll
2013-06-27 23:13:08 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-06-27 23:13:08 ----A---- C:\windows\system32\usp10.dll
2013-06-27 23:12:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-06-27 23:12:31 ----A---- C:\windows\system32\tzres.dll
2013-06-27 23:11:46 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-06-27 23:11:46 ----A---- C:\windows\system32\cryptdlg.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcore6.dll
2013-06-27 23:11:22 ----A---- C:\windows\system32\taskhost.exe
2013-06-27 22:58:16 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-06-27 22:58:16 ----A---- C:\windows\system32\d3d11.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\nlasvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\iphlpsvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\drivers\netio.sys
2013-06-27 22:20:18 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\nlaapi.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\ndis.sys
2013-06-27 22:20:12 ----A---- C:\windows\system32\profsvc.dll
2013-06-27 22:20:11 ----A---- C:\windows\system32\OxpsConverter.exe
2013-06-27 22:20:08 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-06-27 22:20:08 ----A---- C:\windows\system32\wintrust.dll
2013-06-27 22:19:38 ----A---- C:\windows\system32\msi.dll
2013-06-27 22:19:37 ----A---- C:\windows\SYSWOW64\msi.dll
2013-06-27 22:17:52 ----A---- C:\windows\system32\KernelBase.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\wow64win.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\kernel32.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\conhost.exe
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----A---- C:\windows\system32\ntvdm64.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----A---- C:\windows\system32\wow64.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----A---- C:\windows\system32\wow64cpu.dll
2013-06-27 22:17:17 ----A---- C:\windows\system32\shell32.dll
2013-06-27 22:17:15 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\consent.exe
2013-06-27 22:17:14 ----A---- C:\windows\system32\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\appinfo.dll
2013-06-27 22:16:58 ----A---- C:\windows\SYSWOW64\xmllite.dll
2013-06-27 22:16:58 ----A---- C:\windows\system32\xmllite.dll
2013-06-27 22:16:54 ----A---- C:\windows\SYSWOW64\explorer.exe
2013-06-27 22:16:54 ----A---- C:\windows\explorer.exe
2013-06-27 22:16:51 ----A---- C:\windows\system32\tquery.dll
2013-06-27 22:16:51 ----A---- C:\windows\system32\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\tquery.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\mssph.dll
2013-06-27 22:16:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\system32\mssph.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\msscntrs.dll
2013-06-27 22:16:47 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2013-06-27 22:16:38 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-06-27 22:16:38 ----A---- C:\windows\system32\ntshrui.dll
2013-06-27 22:16:35 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-06-27 22:16:35 ----A---- C:\windows\system32\poqexec.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\drvinst.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devrtl.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devobj.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2013-06-27 22:16:07 ----A---- C:\windows\system32\umpnpmgr.dll
2013-06-27 22:16:05 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-06-27 22:16:05 ----A---- C:\windows\system32\srcore.dll
2013-06-27 08:00:30 ----SHD---- C:\Boot
2013-06-27 07:04:22 ----D---- C:\windows\SoftwareDistribution
2013-06-27 07:01:21 ----ASH---- C:\pagefile.sys
2013-06-27 07:01:21 ----ASH---- C:\hiberfil.sys
2013-06-27 07:01:20 ----SHD---- C:\System Volume Information
2013-06-26 23:38:56 ----D---- C:\windows\SYSWOW64\Wat
2013-06-26 23:38:56 ----D---- C:\windows\system32\Wat
2013-06-26 23:15:50 ----A---- C:\windows\system32\Wdfres.dll
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-06-26 23:15:24 ----A---- C:\windows\system32\browserchoice.exe
2013-06-26 23:14:40 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-06-26 23:14:34 ----D---- C:\windows\system32\Macromed
2013-06-26 23:14:05 ----A---- C:\windows\system32\WUDFSvc.dll
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-06-26 23:14:04 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFHost.exe
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-06-26 23:14:02 ----A---- C:\windows\system32\WUDFx.dll
2013-06-26 23:12:27 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-06-26 23:12:26 ----A---- C:\windows\SYSWOW64\prevhost.exe
2013-06-26 23:12:26 ----A---- C:\windows\system32\prevhost.exe
2013-06-26 23:11:25 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-06-26 23:11:23 ----A---- C:\windows\system32\spoolsv.exe
2013-06-26 23:11:23 ----A---- C:\windows\splwow64.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winresume.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winload.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdusb.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdcom.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kd1394.dll
2013-06-26 22:53:07 ----D---- C:\ProgramData\Citrix
2013-06-26 22:52:51 ----D---- C:\Users\Zbynek\AppData\Roaming\ICAClient
2013-06-26 22:52:44 ----D---- C:\Program Files (x86)\Citrix
2013-06-26 22:50:13 ----D---- C:\Users\Zbynek\AppData\Roaming\Juniper Networks
2013-06-26 22:46:01 ----A---- C:\windows\system32\wups2.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wucltux.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuaueng.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuauclt.exe
2013-06-26 22:45:48 ----A---- C:\windows\system32\wups.dll
2013-06-26 22:45:48 ----A---- C:\windows\system32\wudriver.dll
2013-06-26 22:45:47 ----A---- C:\windows\system32\wuapi.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuwebv.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuapp.exe
2013-06-26 22:41:42 ----D---- C:\Users\Zbynek\AppData\Roaming\AVG2013
2013-06-26 22:40:58 ----D---- C:\Users\Zbynek\AppData\Roaming\TuneUp Software
2013-06-26 22:40:45 ----HD---- C:\$AVG
2013-06-26 22:40:45 ----D---- C:\ProgramData\AVG2013
2013-06-26 22:35:08 ----HD---- C:\ProgramData\Common Files
2013-06-26 22:35:08 ----D---- C:\ProgramData\MFAData
2013-06-26 22:30:51 ----D---- C:\Users\Zbynek\AppData\Roaming\Opera
2013-06-26 22:24:11 ----SHD---- C:\$RECYCLE.BIN
2013-06-26 22:21:07 ----A---- C:\windows\Language.ini
2013-06-26 22:20:45 ----D---- C:\windows\ConfigSetRoot
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTKHDRC.dat
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-06-26 22:20:34 ----A---- C:\windows\system32\AsusScr_1215N_ENG.scr
2013-06-26 22:20:12 ----D---- C:\Program Files (x86)\ASM104xUSB3
2013-06-26 22:19:49 ----D---- C:\windows\system32\SRSLabs
2013-06-26 22:19:48 ----D---- C:\Program Files\Realtek
2013-06-26 22:19:47 ----D---- C:\windows\SYSWOW64\RTCOM
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\SamSfPa.dat
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\rtkhdaud.dat
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtPgEx64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtlCPAPI64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkCfg64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkAPO64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkApi64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEP64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEL64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEG64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEED64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTCOM64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DHT64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DAA64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RCoInst64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\drivers\RTKVHD64.sys
2013-06-26 22:19:20 ----A---- C:\windows\system32\FMAPO64.dll
2013-06-26 22:19:19 ----D---- C:\Program Files (x86)\Realtek
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAR64.dll
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAC64.dll
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\Temp
2013-06-26 22:19:17 ----A---- C:\windows\RtlExUpd.dll
2013-06-26 22:17:41 ----SD---- C:\Users\Zbynek\AppData\Roaming\Microsoft
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Macromedia
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\InstallShield
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Identities
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\ASUS WebStorage
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Adobe
2013-06-26 22:14:47 ----SHD---- C:\Recovery
======List of files/folders modified in the last 1 month======
2013-07-11 17:14:23 ----D---- C:\windows\Temp
2013-07-11 17:14:19 ----D---- C:\Program Files\Trend Micro
2013-07-11 17:10:58 ----D---- C:\ProgramData\NVIDIA
2013-07-11 07:41:19 ----D---- C:\windows\system32\config
2013-07-09 19:49:19 ----SHD---- C:\windows\Installer
2013-07-07 22:39:29 ----D---- C:\windows\Microsoft.NET
2013-07-07 22:32:32 ----RSD---- C:\windows\assembly
2013-07-05 11:06:48 ----D---- C:\windows\System32
2013-07-05 11:06:48 ----D---- C:\windows\inf
2013-07-05 11:06:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-01 13:54:29 ----SD---- C:\ProgramData\Microsoft
2013-07-01 13:54:23 ----D---- C:\Windows
2013-07-01 13:27:12 ----D---- C:\windows\system32\Tasks
2013-07-01 13:27:06 ----HD---- C:\ProgramData
2013-07-01 13:21:59 ----AD---- C:\windows\system32\drivers
2013-07-01 13:21:44 ----D---- C:\windows\winsxs
2013-07-01 12:50:35 ----D---- C:\windows\SysWOW64
2013-07-01 12:46:36 ----RD---- C:\Program Files (x86)
2013-07-01 12:46:36 ----RD---- C:\Program Files
2013-07-01 11:11:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-01 11:11:46 ----D---- C:\windows\system32\cs-CZ
2013-07-01 11:03:58 ----D---- C:\windows\SYSWOW64\en-US
2013-07-01 11:03:58 ----D---- C:\windows\system32\en-US
2013-07-01 10:50:57 ----D---- C:\windows\system32\catroot
2013-07-01 10:50:56 ----D---- C:\windows\system32\catroot2
2013-07-01 10:07:06 ----D---- C:\windows\SYSWOW64\sk-SK
2013-07-01 10:07:06 ----D---- C:\windows\system32\sk-SK
2013-07-01 10:07:06 ----D---- C:\Program Files\Internet Explorer
2013-07-01 10:07:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-01 10:07:05 ----D---- C:\windows\SYSWOW64\pl-PL
2013-07-01 10:07:04 ----D---- C:\windows\SYSWOW64\hu-HU
2013-07-01 10:07:04 ----D---- C:\windows\system32\pl-PL
2013-07-01 10:07:03 ----D---- C:\windows\system32\hu-HU
2013-07-01 10:06:57 ----D---- C:\windows\SYSWOW64\migration
2013-07-01 10:06:53 ----D---- C:\windows\PolicyDefinitions
2013-07-01 10:06:52 ----D---- C:\windows\system32\migration
2013-07-01 10:06:46 ----D---- C:\windows\SYSWOW64\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\drivers\en-US
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-PT
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-BR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\ko-KR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\it-IT
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-TW
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-HK
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-CN
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\tr-TR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\sv-SE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ru-RU
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nl-NL
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nb-NO
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ja-JP
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fr-FR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fi-FI
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\es-ES
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\el-GR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\de-DE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\da-DK
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-PT
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-BR
2013-07-01 10:06:39 ----D---- C:\windows\system32\it-IT
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-TW
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-HK
2013-07-01 10:06:38 ----D---- C:\windows\system32\tr-TR
2013-07-01 10:06:38 ----D---- C:\windows\system32\sv-SE
2013-07-01 10:06:38 ----D---- C:\windows\system32\nl-NL
2013-07-01 10:06:38 ----D---- C:\windows\system32\ko-KR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fr-FR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fi-FI
2013-07-01 10:06:38 ----D---- C:\windows\system32\es-ES
2013-07-01 10:06:38 ----D---- C:\windows\system32\el-GR
2013-07-01 10:06:38 ----D---- C:\windows\system32\de-DE
2013-07-01 10:06:37 ----D---- C:\windows\system32\zh-CN
2013-07-01 10:06:37 ----D---- C:\windows\system32\ru-RU
2013-07-01 10:06:37 ----D---- C:\windows\system32\nb-NO
2013-07-01 10:06:37 ----D---- C:\windows\system32\ja-JP
2013-07-01 10:06:37 ----D---- C:\windows\system32\da-DK
2013-07-01 10:06:32 ----D---- C:\windows\system32\DriverStore
2013-07-01 10:06:31 ----D---- C:\windows\SYSWOW64\drivers
2013-07-01 10:04:34 ----D---- C:\windows\Logs
2013-06-30 23:47:00 ----D---- C:\windows\system32\wdi
2013-06-30 23:42:14 ----D---- C:\AsusVibeData
2013-06-30 23:42:06 ----D---- C:\Program Files (x86)\Asus
2013-06-30 18:13:00 ----D---- C:\windows\debug
2013-06-30 15:31:00 ----D---- C:\windows\AppPatch
2013-06-30 15:30:56 ----D---- C:\Program Files\Windows Journal
2013-06-27 23:52:56 ----D---- C:\windows\ehome
2013-06-27 23:52:56 ----D---- C:\Program Files\Common Files\System
2013-06-27 23:28:42 ----RSD---- C:\windows\Fonts
2013-06-27 22:57:12 ----D---- C:\windows\Prefetch
2013-06-27 22:18:49 ----D---- C:\windows\system32\LogFiles
2013-06-27 07:13:45 ----D---- C:\windows\rescache
2013-06-27 07:13:21 ----D---- C:\windows\SYSWOW64\NV
2013-06-27 07:13:21 ----D---- C:\windows\system32\NV
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\pl-PL
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\hu-HU
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\cs-CZ
2013-06-26 23:38:53 ----D---- C:\windows\system32\Boot
2013-06-26 22:50:19 ----D---- C:\windows\Downloaded Program Files
2013-06-26 22:38:27 ----D---- C:\windows\system32\restore
2013-06-26 22:32:50 ----D---- C:\windows\system32\CodeIntegrity
2013-06-26 22:21:11 ----D---- C:\ProgramData\Trend Micro
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-26 22:17:40 ----RD---- C:\Users
2013-06-26 22:14:49 ----D---- C:\windows\panther
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-07-01 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-06 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\windows\SysWow64\drivers\AsIO.sys [2010-06-28 13440]
R1 AsUpIO;AsUpIO; C:\windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952]
R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2011-04-25 87600]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 90704]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 144464]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 105552]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-05-21 341032]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-05-21 102440]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-05-21 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-05-21 21544]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-10-24 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-08-24 2472680]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-07-29 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 DETECT PS2: ;DETECT PS2: ; \??\C:\Program Files (x86)\ASUS\LiveUpdate\DetectSys.sys [2010-05-27 6144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AsusService;Asus Launcher Service; C:\windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-05-14 4937264]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-06 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 267480]
S3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-06-26 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Zbynek at 2013-07-11 17:14:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 63 GB (62%) free of 102 GB
Total RAM: 4086 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:14:22, on 11.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe
C:\Program Files (x86)\Asus\APRP\aprp.exe
C:\windows\SysWOW64\RunDll32.exe
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files\trend micro\Zbynek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\windows\AsScrPro.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini"
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\RunOnce: [Reboot] AsusSender.exe C:\Windows\Reboot.exe 60 (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://my.ppg.com/dana-cached/sc/Junip ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\SysWOW64\AsusService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13468 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=91d8c97d-4b72-4d53-8c8c-136f8f3bb911 /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\2ccb0142-87b3-464a-b5b0-e838d185e041-1ec-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 35072080
\??\C:\windows\system32\conhost.exe "701173337458916659189456863693473495710681401356021320-1626234041-1822180324
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\AsusService.exe
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Trend Micro\Titanium\TiMiniService.exe"
"C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe"
\??\C:\windows\system32\conhost.exe "-15546496448929136961534646815-1369052218-900954391-1470190336-593237202615201261
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2392
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe" auto
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
"C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe" autorun
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
"C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe"
"C:\Program Files (x86)\Asus\APRP\aprp.exe"
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\windows\system32\sppsvc.exe
"D:\Install\RSITx64.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe" /AppMode=UPDATE /pri=2 /sched=2 /source=inet /path="" /caller=SCHEDULER
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17 264528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"LiveUpdate"=AsusSender.exe C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe auto []
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 192520]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 321872]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-11-01 165912]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-11-01 385560]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-11-01 364056]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-08-24 11447912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"=C:\windows\AsScrPro.exe [2011-04-29 3058304]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"CapsHook"=AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe [2011-01-07 414384]
"OOBESetup"=C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe [2011-01-04 345088]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-29 2018032]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-04-29 4408368]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2011-04-25 305088]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-10-24 261120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-10 22:56:56 ----A---- C:\AdwCleaner[S1].txt
2013-07-10 22:56:13 ----A---- C:\AdwCleaner[R4].txt
2013-07-10 21:59:41 ----A---- C:\AdwCleaner[R3].txt
2013-07-08 15:12:43 ----A---- C:\AdwCleaner[R2].txt
2013-07-08 12:42:14 ----A---- C:\AdwCleaner[R1].txt
2013-07-08 12:36:47 ----D---- C:\rsit
2013-07-05 11:18:39 ----D---- C:\Users\Zbynek\AppData\Roaming\XnView
2013-07-01 13:54:23 ----A---- C:\windows\wininit.ini
2013-07-01 13:27:06 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:59:59 ----D---- C:\Users\Zbynek\AppData\Roaming\LavasoftStatistics
2013-07-01 12:56:44 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-07-01 12:56:43 ----A---- C:\windows\system32\sbbd.exe
2013-07-01 12:56:39 ----D---- C:\Users\Zbynek\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 12:46:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-01 12:46:36 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-01 11:03:57 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-01 10:52:00 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-07-01 10:51:59 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-07-01 00:02:03 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-07-01 00:02:03 ----A---- C:\windows\system32\elshyph.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\occache.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\url.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\wininet.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\urlmon.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-01 00:01:57 ----A---- C:\windows\system32\msrating.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\msls31.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\iertutil.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\url.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\jsproxy.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iesetup.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iernonce.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iedkcs32.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dat
2013-07-01 00:01:56 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-01 00:01:56 ----A---- C:\windows\system32\icardie.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtrans.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtmsft.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\wextract.exe
2013-07-01 00:01:55 ----A---- C:\windows\system32\webcheck.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\vbscript.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\mshtmled.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\msfeeds.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\licmgr10.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\inseng.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\iexpress.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\pngfilt.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\occache.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshtml.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshta.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\msfeedsbs.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\jscript.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\imgutil.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\ieUnatt.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\iepeers.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\mshtmler.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\msfeedssync.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\jscript9.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\ieui.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\iesysprep.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\IEAdvpack.dll
2013-07-01 00:01:52 ----A---- C:\windows\system32\ieframe.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-30 23:58:31 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbGD.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\aaclient.dll
2013-06-30 23:58:26 ----A---- C:\windows\SYSWOW64\mstsc.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\wksprt.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\TSWbPrxy.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpudd.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpendp_winip.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\mstsc.exe
2013-06-30 23:58:25 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-06-30 23:58:25 ----A---- C:\windows\system32\rdpcorets.dll
2013-06-30 23:58:24 ----A---- C:\windows\system32\mstscax.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-06-30 23:55:25 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-06-30 23:55:25 ----A---- C:\windows\system32\WMPhoto.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10_1.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10_1core.dll
2013-06-30 23:55:14 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\d3d10.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\FntCache.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\DWrite.dll
2013-06-30 23:55:12 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-06-30 23:55:12 ----A---- C:\windows\system32\d2d1.dll
2013-06-30 23:54:16 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-06-30 23:54:16 ----A---- C:\windows\system32\qdvd.dll
2013-06-30 23:54:13 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-06-30 23:54:13 ----A---- C:\windows\system32\schannel.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\lsasrv.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\cng.sys
2013-06-30 23:39:49 ----D---- C:\ProgramData\ASUS WebStorage
2013-06-30 18:12:58 ----A---- C:\windows\system32\MRT.exe
2013-06-30 18:08:52 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-06-30 18:08:49 ----A---- C:\windows\system32\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\system32\drivers\bthport.sys
2013-06-30 18:08:47 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\certutil.exe
2013-06-30 18:08:39 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-06-30 18:08:39 ----A---- C:\windows\system32\certenc.dll
2013-06-30 18:08:25 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-06-30 18:08:24 ----A---- C:\windows\system32\cdosys.dll
2013-06-30 18:08:15 ----A---- C:\windows\system32\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\SYSWOW64\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\system32\fsutil.exe
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\storport.sys
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-06-30 18:08:13 ----A---- C:\windows\SYSWOW64\fsutil.exe
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-06-30 18:08:12 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-06-30 18:08:01 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbport.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbd.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-06-30 18:06:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-06-30 18:06:49 ----A---- C:\windows\system32\win32k.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\cdd.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmfd.dll
2013-06-28 20:57:14 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-06-28 20:57:13 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-06-28 20:57:13 ----A---- C:\windows\system32\wmi.dll
2013-06-28 20:55:18 ----A---- C:\windows\system32\winsrv.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-06-28 20:55:14 ----A---- C:\windows\SYSWOW64\user.exe
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml6.dll
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml3.dll
2013-06-28 20:55:08 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-06-28 20:55:07 ----A---- C:\windows\system32\msxml3r.dll
2013-06-28 20:55:06 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-06-28 20:55:06 ----A---- C:\windows\system32\msvcrt.dll
2013-06-28 20:55:05 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-06-28 20:55:04 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-06-28 20:55:03 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-06-28 20:55:03 ----A---- C:\windows\system32\ncrypt.dll
2013-06-28 20:55:01 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browser.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browcli.dll
2013-06-28 20:54:55 ----A---- C:\windows\system32\localspl.dll
2013-06-28 20:54:53 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-06-28 20:54:53 ----A---- C:\windows\system32\synceng.dll
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\rdpwsx.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\dpnet.dll
2013-06-28 20:54:46 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-06-28 20:54:45 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-06-28 20:54:45 ----A---- C:\windows\system32\kerberos.dll
2013-06-28 20:48:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-06-28 20:48:09 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-06-28 20:48:08 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\smss.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\csrsrv.dll
2013-06-28 20:48:07 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-06-27 23:48:18 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2013-06-27 23:48:18 ----A---- C:\windows\system32\CPFilters.dll
2013-06-27 23:48:17 ----A---- C:\windows\SYSWOW64\sbe.dll
2013-06-27 23:48:17 ----A---- C:\windows\system32\sbe.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccu32.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbccp32.dll
2013-06-27 23:48:10 ----A---- C:\windows\SYSWOW64\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\lsass.exe
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspisrv.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspicli.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\secur32.dll
2013-06-27 23:48:08 ----A---- C:\windows\system32\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnsrslvr.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnscacheugc.exe
2013-06-27 23:48:05 ----A---- C:\windows\system32\psisdecd.dll
2013-06-27 23:48:04 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2013-06-27 23:48:02 ----A---- C:\windows\system32\mfc42u.dll
2013-06-27 23:48:01 ----A---- C:\windows\SYSWOW64\mfc42.dll
2013-06-27 23:48:01 ----A---- C:\windows\system32\mfc42.dll
2013-06-27 23:48:00 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2013-06-27 23:47:59 ----A---- C:\windows\system32\FXSCOVER.exe
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv2.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv.sys
2013-06-27 23:47:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-06-27 23:47:55 ----A---- C:\windows\system32\ntdll.dll
2013-06-27 23:47:53 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-06-27 23:47:53 ----A---- C:\windows\system32\quartz.dll
2013-06-27 23:47:50 ----A---- C:\windows\system32\drivers\bowser.sys
2013-06-27 23:47:48 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleacc.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleacc.dll
2013-06-27 23:47:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-06-27 23:47:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2013-06-27 23:47:43 ----A---- C:\windows\system32\inetcomm.dll
2013-06-27 23:47:42 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-06-27 23:47:42 ----A---- C:\windows\system32\EncDec.dll
2013-06-27 23:47:40 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-06-27 23:47:40 ----A---- C:\windows\system32\rdpcore.dll
2013-06-27 23:47:39 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-06-27 23:46:39 ----A---- C:\windows\SYSWOW64\packager.dll
2013-06-27 23:46:39 ----A---- C:\windows\system32\packager.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwansvc.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwanprotdim.dll
2013-06-27 23:13:41 ----A---- C:\windows\system32\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-06-27 23:13:40 ----A---- C:\windows\system32\gameux.dll
2013-06-27 23:13:08 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-06-27 23:13:08 ----A---- C:\windows\system32\usp10.dll
2013-06-27 23:12:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-06-27 23:12:31 ----A---- C:\windows\system32\tzres.dll
2013-06-27 23:11:46 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-06-27 23:11:46 ----A---- C:\windows\system32\cryptdlg.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcore6.dll
2013-06-27 23:11:22 ----A---- C:\windows\system32\taskhost.exe
2013-06-27 22:58:16 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-06-27 22:58:16 ----A---- C:\windows\system32\d3d11.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\nlasvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\iphlpsvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\drivers\netio.sys
2013-06-27 22:20:18 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\nlaapi.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\ndis.sys
2013-06-27 22:20:12 ----A---- C:\windows\system32\profsvc.dll
2013-06-27 22:20:11 ----A---- C:\windows\system32\OxpsConverter.exe
2013-06-27 22:20:08 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-06-27 22:20:08 ----A---- C:\windows\system32\wintrust.dll
2013-06-27 22:19:38 ----A---- C:\windows\system32\msi.dll
2013-06-27 22:19:37 ----A---- C:\windows\SYSWOW64\msi.dll
2013-06-27 22:17:52 ----A---- C:\windows\system32\KernelBase.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\wow64win.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\kernel32.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\conhost.exe
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----A---- C:\windows\system32\ntvdm64.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----A---- C:\windows\system32\wow64.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----A---- C:\windows\system32\wow64cpu.dll
2013-06-27 22:17:17 ----A---- C:\windows\system32\shell32.dll
2013-06-27 22:17:15 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\consent.exe
2013-06-27 22:17:14 ----A---- C:\windows\system32\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\appinfo.dll
2013-06-27 22:16:58 ----A---- C:\windows\SYSWOW64\xmllite.dll
2013-06-27 22:16:58 ----A---- C:\windows\system32\xmllite.dll
2013-06-27 22:16:54 ----A---- C:\windows\SYSWOW64\explorer.exe
2013-06-27 22:16:54 ----A---- C:\windows\explorer.exe
2013-06-27 22:16:51 ----A---- C:\windows\system32\tquery.dll
2013-06-27 22:16:51 ----A---- C:\windows\system32\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\tquery.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\mssph.dll
2013-06-27 22:16:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\system32\mssph.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\msscntrs.dll
2013-06-27 22:16:47 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2013-06-27 22:16:38 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-06-27 22:16:38 ----A---- C:\windows\system32\ntshrui.dll
2013-06-27 22:16:35 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-06-27 22:16:35 ----A---- C:\windows\system32\poqexec.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\drvinst.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devrtl.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devobj.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2013-06-27 22:16:07 ----A---- C:\windows\system32\umpnpmgr.dll
2013-06-27 22:16:05 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-06-27 22:16:05 ----A---- C:\windows\system32\srcore.dll
2013-06-27 08:00:30 ----SHD---- C:\Boot
2013-06-27 07:04:22 ----D---- C:\windows\SoftwareDistribution
2013-06-27 07:01:21 ----ASH---- C:\pagefile.sys
2013-06-27 07:01:21 ----ASH---- C:\hiberfil.sys
2013-06-27 07:01:20 ----SHD---- C:\System Volume Information
2013-06-26 23:38:56 ----D---- C:\windows\SYSWOW64\Wat
2013-06-26 23:38:56 ----D---- C:\windows\system32\Wat
2013-06-26 23:15:50 ----A---- C:\windows\system32\Wdfres.dll
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-06-26 23:15:24 ----A---- C:\windows\system32\browserchoice.exe
2013-06-26 23:14:40 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-06-26 23:14:34 ----D---- C:\windows\system32\Macromed
2013-06-26 23:14:05 ----A---- C:\windows\system32\WUDFSvc.dll
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-06-26 23:14:04 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFHost.exe
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-06-26 23:14:02 ----A---- C:\windows\system32\WUDFx.dll
2013-06-26 23:12:27 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-06-26 23:12:26 ----A---- C:\windows\SYSWOW64\prevhost.exe
2013-06-26 23:12:26 ----A---- C:\windows\system32\prevhost.exe
2013-06-26 23:11:25 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-06-26 23:11:23 ----A---- C:\windows\system32\spoolsv.exe
2013-06-26 23:11:23 ----A---- C:\windows\splwow64.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winresume.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winload.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdusb.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdcom.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kd1394.dll
2013-06-26 22:53:07 ----D---- C:\ProgramData\Citrix
2013-06-26 22:52:51 ----D---- C:\Users\Zbynek\AppData\Roaming\ICAClient
2013-06-26 22:52:44 ----D---- C:\Program Files (x86)\Citrix
2013-06-26 22:50:13 ----D---- C:\Users\Zbynek\AppData\Roaming\Juniper Networks
2013-06-26 22:46:01 ----A---- C:\windows\system32\wups2.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wucltux.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuaueng.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuauclt.exe
2013-06-26 22:45:48 ----A---- C:\windows\system32\wups.dll
2013-06-26 22:45:48 ----A---- C:\windows\system32\wudriver.dll
2013-06-26 22:45:47 ----A---- C:\windows\system32\wuapi.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuwebv.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuapp.exe
2013-06-26 22:41:42 ----D---- C:\Users\Zbynek\AppData\Roaming\AVG2013
2013-06-26 22:40:58 ----D---- C:\Users\Zbynek\AppData\Roaming\TuneUp Software
2013-06-26 22:40:45 ----HD---- C:\$AVG
2013-06-26 22:40:45 ----D---- C:\ProgramData\AVG2013
2013-06-26 22:35:08 ----HD---- C:\ProgramData\Common Files
2013-06-26 22:35:08 ----D---- C:\ProgramData\MFAData
2013-06-26 22:30:51 ----D---- C:\Users\Zbynek\AppData\Roaming\Opera
2013-06-26 22:24:11 ----SHD---- C:\$RECYCLE.BIN
2013-06-26 22:21:07 ----A---- C:\windows\Language.ini
2013-06-26 22:20:45 ----D---- C:\windows\ConfigSetRoot
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTKHDRC.dat
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-06-26 22:20:34 ----A---- C:\windows\system32\AsusScr_1215N_ENG.scr
2013-06-26 22:20:12 ----D---- C:\Program Files (x86)\ASM104xUSB3
2013-06-26 22:19:49 ----D---- C:\windows\system32\SRSLabs
2013-06-26 22:19:48 ----D---- C:\Program Files\Realtek
2013-06-26 22:19:47 ----D---- C:\windows\SYSWOW64\RTCOM
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\SamSfPa.dat
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\rtkhdaud.dat
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtPgEx64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtlCPAPI64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkCfg64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkAPO64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkApi64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEP64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEL64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEG64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEED64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTCOM64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DHT64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DAA64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RCoInst64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\drivers\RTKVHD64.sys
2013-06-26 22:19:20 ----A---- C:\windows\system32\FMAPO64.dll
2013-06-26 22:19:19 ----D---- C:\Program Files (x86)\Realtek
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAR64.dll
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAC64.dll
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\Temp
2013-06-26 22:19:17 ----A---- C:\windows\RtlExUpd.dll
2013-06-26 22:17:41 ----SD---- C:\Users\Zbynek\AppData\Roaming\Microsoft
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Macromedia
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\InstallShield
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Identities
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\ASUS WebStorage
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Adobe
2013-06-26 22:14:47 ----SHD---- C:\Recovery
======List of files/folders modified in the last 1 month======
2013-07-11 17:14:23 ----D---- C:\windows\Temp
2013-07-11 17:14:19 ----D---- C:\Program Files\Trend Micro
2013-07-11 17:10:58 ----D---- C:\ProgramData\NVIDIA
2013-07-11 07:41:19 ----D---- C:\windows\system32\config
2013-07-09 19:49:19 ----SHD---- C:\windows\Installer
2013-07-07 22:39:29 ----D---- C:\windows\Microsoft.NET
2013-07-07 22:32:32 ----RSD---- C:\windows\assembly
2013-07-05 11:06:48 ----D---- C:\windows\System32
2013-07-05 11:06:48 ----D---- C:\windows\inf
2013-07-05 11:06:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-01 13:54:29 ----SD---- C:\ProgramData\Microsoft
2013-07-01 13:54:23 ----D---- C:\Windows
2013-07-01 13:27:12 ----D---- C:\windows\system32\Tasks
2013-07-01 13:27:06 ----HD---- C:\ProgramData
2013-07-01 13:21:59 ----AD---- C:\windows\system32\drivers
2013-07-01 13:21:44 ----D---- C:\windows\winsxs
2013-07-01 12:50:35 ----D---- C:\windows\SysWOW64
2013-07-01 12:46:36 ----RD---- C:\Program Files (x86)
2013-07-01 12:46:36 ----RD---- C:\Program Files
2013-07-01 11:11:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-01 11:11:46 ----D---- C:\windows\system32\cs-CZ
2013-07-01 11:03:58 ----D---- C:\windows\SYSWOW64\en-US
2013-07-01 11:03:58 ----D---- C:\windows\system32\en-US
2013-07-01 10:50:57 ----D---- C:\windows\system32\catroot
2013-07-01 10:50:56 ----D---- C:\windows\system32\catroot2
2013-07-01 10:07:06 ----D---- C:\windows\SYSWOW64\sk-SK
2013-07-01 10:07:06 ----D---- C:\windows\system32\sk-SK
2013-07-01 10:07:06 ----D---- C:\Program Files\Internet Explorer
2013-07-01 10:07:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-01 10:07:05 ----D---- C:\windows\SYSWOW64\pl-PL
2013-07-01 10:07:04 ----D---- C:\windows\SYSWOW64\hu-HU
2013-07-01 10:07:04 ----D---- C:\windows\system32\pl-PL
2013-07-01 10:07:03 ----D---- C:\windows\system32\hu-HU
2013-07-01 10:06:57 ----D---- C:\windows\SYSWOW64\migration
2013-07-01 10:06:53 ----D---- C:\windows\PolicyDefinitions
2013-07-01 10:06:52 ----D---- C:\windows\system32\migration
2013-07-01 10:06:46 ----D---- C:\windows\SYSWOW64\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\drivers\en-US
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-PT
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-BR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\ko-KR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\it-IT
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-TW
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-HK
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-CN
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\tr-TR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\sv-SE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ru-RU
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nl-NL
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nb-NO
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ja-JP
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fr-FR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fi-FI
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\es-ES
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\el-GR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\de-DE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\da-DK
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-PT
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-BR
2013-07-01 10:06:39 ----D---- C:\windows\system32\it-IT
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-TW
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-HK
2013-07-01 10:06:38 ----D---- C:\windows\system32\tr-TR
2013-07-01 10:06:38 ----D---- C:\windows\system32\sv-SE
2013-07-01 10:06:38 ----D---- C:\windows\system32\nl-NL
2013-07-01 10:06:38 ----D---- C:\windows\system32\ko-KR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fr-FR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fi-FI
2013-07-01 10:06:38 ----D---- C:\windows\system32\es-ES
2013-07-01 10:06:38 ----D---- C:\windows\system32\el-GR
2013-07-01 10:06:38 ----D---- C:\windows\system32\de-DE
2013-07-01 10:06:37 ----D---- C:\windows\system32\zh-CN
2013-07-01 10:06:37 ----D---- C:\windows\system32\ru-RU
2013-07-01 10:06:37 ----D---- C:\windows\system32\nb-NO
2013-07-01 10:06:37 ----D---- C:\windows\system32\ja-JP
2013-07-01 10:06:37 ----D---- C:\windows\system32\da-DK
2013-07-01 10:06:32 ----D---- C:\windows\system32\DriverStore
2013-07-01 10:06:31 ----D---- C:\windows\SYSWOW64\drivers
2013-07-01 10:04:34 ----D---- C:\windows\Logs
2013-06-30 23:47:00 ----D---- C:\windows\system32\wdi
2013-06-30 23:42:14 ----D---- C:\AsusVibeData
2013-06-30 23:42:06 ----D---- C:\Program Files (x86)\Asus
2013-06-30 18:13:00 ----D---- C:\windows\debug
2013-06-30 15:31:00 ----D---- C:\windows\AppPatch
2013-06-30 15:30:56 ----D---- C:\Program Files\Windows Journal
2013-06-27 23:52:56 ----D---- C:\windows\ehome
2013-06-27 23:52:56 ----D---- C:\Program Files\Common Files\System
2013-06-27 23:28:42 ----RSD---- C:\windows\Fonts
2013-06-27 22:57:12 ----D---- C:\windows\Prefetch
2013-06-27 22:18:49 ----D---- C:\windows\system32\LogFiles
2013-06-27 07:13:45 ----D---- C:\windows\rescache
2013-06-27 07:13:21 ----D---- C:\windows\SYSWOW64\NV
2013-06-27 07:13:21 ----D---- C:\windows\system32\NV
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\pl-PL
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\hu-HU
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\cs-CZ
2013-06-26 23:38:53 ----D---- C:\windows\system32\Boot
2013-06-26 22:50:19 ----D---- C:\windows\Downloaded Program Files
2013-06-26 22:38:27 ----D---- C:\windows\system32\restore
2013-06-26 22:32:50 ----D---- C:\windows\system32\CodeIntegrity
2013-06-26 22:21:11 ----D---- C:\ProgramData\Trend Micro
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-26 22:17:40 ----RD---- C:\Users
2013-06-26 22:14:49 ----D---- C:\windows\panther
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-07-01 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-06 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\windows\SysWow64\drivers\AsIO.sys [2010-06-28 13440]
R1 AsUpIO;AsUpIO; C:\windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952]
R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2011-04-25 87600]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 90704]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 144464]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 105552]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-05-21 341032]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-05-21 102440]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-05-21 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-05-21 21544]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-10-24 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-08-24 2472680]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-07-29 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 DETECT PS2: ;DETECT PS2: ; \??\C:\Program Files (x86)\ASUS\LiveUpdate\DetectSys.sys [2010-05-27 6144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AsusService;Asus Launcher Service; C:\windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-05-14 4937264]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-06 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 267480]
S3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-06-26 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomaleny internet
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.:files
C:\Program Files (x86)\Microsoft\BingBar
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
:services
BBSvc
BBUpdate
:commands
[Purity]
[Emptytemp]
[Emptyflash]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomaleny internet
Zde je novy RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by Zbynek at 2013-07-11 20:30:32
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 65 GB (64%) free of 102 GB
Total RAM: 4086 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:30:38, on 11.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files\trend micro\Zbynek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\windows\AsScrPro.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini"
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\RunOnce: [Reboot] AsusSender.exe C:\Windows\Reboot.exe 60 (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://my.ppg.com/dana-cached/sc/Junip ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\SysWOW64\AsusService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13145 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=374bff03-4c66-480b-9772-173852dc5f45 /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\f284c943-dfbc-475b-864e-906c2965f96f-1ec-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 26442752
\??\C:\windows\system32\conhost.exe "55864282-309184925138017818021459519111848659220-4491168321850420368-538422026
C:\windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\AsusService.exe
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Trend Micro\Titanium\TiMiniService.exe"
"taskhost.exe"
"C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe"
\??\C:\windows\system32\conhost.exe "-1696255314-374994676-725468916-12287684411691532548-100403724213223215931469317638
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
WLIDSvcM.exe 2576
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\AsScrPro.exe"
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe" auto
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe" autorun
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
"C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\wbem\wmiprvse.exe
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\windows\system32\sppsvc.exe
C:\windows\system32\wbem\wmiprvse.exe
"D:\Install\RSITx64.exe"
"C:\windows\system32\wuauclt.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17 264528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"LiveUpdate"=AsusSender.exe C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe auto []
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 192520]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 321872]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-11-01 165912]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-11-01 385560]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-11-01 364056]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-08-24 11447912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"=C:\windows\AsScrPro.exe [2011-04-29 3058304]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"CapsHook"=AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe [2011-01-07 414384]
"OOBESetup"=C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe [2011-01-04 345088]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-29 2018032]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-04-29 4408368]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2011-04-25 305088]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-10-24 261120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-11 20:21:19 ----D---- C:\_OTM
2013-07-10 22:56:56 ----A---- C:\AdwCleaner[S1].txt
2013-07-10 22:56:13 ----A---- C:\AdwCleaner[R4].txt
2013-07-10 21:59:41 ----A---- C:\AdwCleaner[R3].txt
2013-07-08 15:12:43 ----A---- C:\AdwCleaner[R2].txt
2013-07-08 12:42:14 ----A---- C:\AdwCleaner[R1].txt
2013-07-08 12:36:47 ----D---- C:\rsit
2013-07-05 11:18:39 ----D---- C:\Users\Zbynek\AppData\Roaming\XnView
2013-07-01 13:54:23 ----A---- C:\windows\wininit.ini
2013-07-01 13:27:06 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:59:59 ----D---- C:\Users\Zbynek\AppData\Roaming\LavasoftStatistics
2013-07-01 12:56:44 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-07-01 12:56:43 ----A---- C:\windows\system32\sbbd.exe
2013-07-01 12:56:39 ----D---- C:\Users\Zbynek\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 12:46:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-01 12:46:36 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-01 11:03:57 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-01 10:52:00 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-07-01 10:51:59 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-07-01 00:02:03 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-07-01 00:02:03 ----A---- C:\windows\system32\elshyph.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\occache.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\url.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\wininet.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\urlmon.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-01 00:01:57 ----A---- C:\windows\system32\msrating.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\msls31.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\iertutil.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\url.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\jsproxy.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iesetup.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iernonce.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iedkcs32.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dat
2013-07-01 00:01:56 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-01 00:01:56 ----A---- C:\windows\system32\icardie.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtrans.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtmsft.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\wextract.exe
2013-07-01 00:01:55 ----A---- C:\windows\system32\webcheck.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\vbscript.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\mshtmled.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\msfeeds.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\licmgr10.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\inseng.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\iexpress.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\pngfilt.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\occache.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshtml.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshta.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\msfeedsbs.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\jscript.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\imgutil.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\ieUnatt.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\iepeers.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\mshtmler.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\msfeedssync.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\jscript9.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\ieui.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\iesysprep.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\IEAdvpack.dll
2013-07-01 00:01:52 ----A---- C:\windows\system32\ieframe.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-30 23:58:31 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbGD.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\aaclient.dll
2013-06-30 23:58:26 ----A---- C:\windows\SYSWOW64\mstsc.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\wksprt.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\TSWbPrxy.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpudd.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpendp_winip.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\mstsc.exe
2013-06-30 23:58:25 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-06-30 23:58:25 ----A---- C:\windows\system32\rdpcorets.dll
2013-06-30 23:58:24 ----A---- C:\windows\system32\mstscax.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-06-30 23:55:25 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-06-30 23:55:25 ----A---- C:\windows\system32\WMPhoto.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10_1.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10_1core.dll
2013-06-30 23:55:14 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\d3d10.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\FntCache.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\DWrite.dll
2013-06-30 23:55:12 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-06-30 23:55:12 ----A---- C:\windows\system32\d2d1.dll
2013-06-30 23:54:16 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-06-30 23:54:16 ----A---- C:\windows\system32\qdvd.dll
2013-06-30 23:54:13 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-06-30 23:54:13 ----A---- C:\windows\system32\schannel.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\lsasrv.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\cng.sys
2013-06-30 23:39:49 ----D---- C:\ProgramData\ASUS WebStorage
2013-06-30 18:12:58 ----A---- C:\windows\system32\MRT.exe
2013-06-30 18:08:52 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-06-30 18:08:49 ----A---- C:\windows\system32\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\system32\drivers\bthport.sys
2013-06-30 18:08:47 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\certutil.exe
2013-06-30 18:08:39 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-06-30 18:08:39 ----A---- C:\windows\system32\certenc.dll
2013-06-30 18:08:25 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-06-30 18:08:24 ----A---- C:\windows\system32\cdosys.dll
2013-06-30 18:08:15 ----A---- C:\windows\system32\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\SYSWOW64\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\system32\fsutil.exe
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\storport.sys
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-06-30 18:08:13 ----A---- C:\windows\SYSWOW64\fsutil.exe
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-06-30 18:08:12 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-06-30 18:08:01 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbport.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbd.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-06-30 18:06:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-06-30 18:06:49 ----A---- C:\windows\system32\win32k.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\cdd.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmfd.dll
2013-06-28 20:57:14 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-06-28 20:57:13 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-06-28 20:57:13 ----A---- C:\windows\system32\wmi.dll
2013-06-28 20:55:18 ----A---- C:\windows\system32\winsrv.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-06-28 20:55:14 ----A---- C:\windows\SYSWOW64\user.exe
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml6.dll
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml3.dll
2013-06-28 20:55:08 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-06-28 20:55:07 ----A---- C:\windows\system32\msxml3r.dll
2013-06-28 20:55:06 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-06-28 20:55:06 ----A---- C:\windows\system32\msvcrt.dll
2013-06-28 20:55:05 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-06-28 20:55:04 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-06-28 20:55:03 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-06-28 20:55:03 ----A---- C:\windows\system32\ncrypt.dll
2013-06-28 20:55:01 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browser.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browcli.dll
2013-06-28 20:54:55 ----A---- C:\windows\system32\localspl.dll
2013-06-28 20:54:53 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-06-28 20:54:53 ----A---- C:\windows\system32\synceng.dll
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\rdpwsx.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\dpnet.dll
2013-06-28 20:54:46 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-06-28 20:54:45 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-06-28 20:54:45 ----A---- C:\windows\system32\kerberos.dll
2013-06-28 20:48:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-06-28 20:48:09 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-06-28 20:48:08 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\smss.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\csrsrv.dll
2013-06-28 20:48:07 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-06-27 23:48:18 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2013-06-27 23:48:18 ----A---- C:\windows\system32\CPFilters.dll
2013-06-27 23:48:17 ----A---- C:\windows\SYSWOW64\sbe.dll
2013-06-27 23:48:17 ----A---- C:\windows\system32\sbe.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccu32.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbccp32.dll
2013-06-27 23:48:10 ----A---- C:\windows\SYSWOW64\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\lsass.exe
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspisrv.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspicli.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\secur32.dll
2013-06-27 23:48:08 ----A---- C:\windows\system32\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnsrslvr.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnscacheugc.exe
2013-06-27 23:48:05 ----A---- C:\windows\system32\psisdecd.dll
2013-06-27 23:48:04 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2013-06-27 23:48:02 ----A---- C:\windows\system32\mfc42u.dll
2013-06-27 23:48:01 ----A---- C:\windows\SYSWOW64\mfc42.dll
2013-06-27 23:48:01 ----A---- C:\windows\system32\mfc42.dll
2013-06-27 23:48:00 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2013-06-27 23:47:59 ----A---- C:\windows\system32\FXSCOVER.exe
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv2.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv.sys
2013-06-27 23:47:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-06-27 23:47:55 ----A---- C:\windows\system32\ntdll.dll
2013-06-27 23:47:53 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-06-27 23:47:53 ----A---- C:\windows\system32\quartz.dll
2013-06-27 23:47:50 ----A---- C:\windows\system32\drivers\bowser.sys
2013-06-27 23:47:48 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleacc.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleacc.dll
2013-06-27 23:47:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-06-27 23:47:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2013-06-27 23:47:43 ----A---- C:\windows\system32\inetcomm.dll
2013-06-27 23:47:42 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-06-27 23:47:42 ----A---- C:\windows\system32\EncDec.dll
2013-06-27 23:47:40 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-06-27 23:47:40 ----A---- C:\windows\system32\rdpcore.dll
2013-06-27 23:47:39 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-06-27 23:46:39 ----A---- C:\windows\SYSWOW64\packager.dll
2013-06-27 23:46:39 ----A---- C:\windows\system32\packager.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwansvc.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwanprotdim.dll
2013-06-27 23:13:41 ----A---- C:\windows\system32\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-06-27 23:13:40 ----A---- C:\windows\system32\gameux.dll
2013-06-27 23:13:08 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-06-27 23:13:08 ----A---- C:\windows\system32\usp10.dll
2013-06-27 23:12:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-06-27 23:12:31 ----A---- C:\windows\system32\tzres.dll
2013-06-27 23:11:46 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-06-27 23:11:46 ----A---- C:\windows\system32\cryptdlg.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcore6.dll
2013-06-27 23:11:22 ----A---- C:\windows\system32\taskhost.exe
2013-06-27 22:58:16 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-06-27 22:58:16 ----A---- C:\windows\system32\d3d11.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\nlasvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\iphlpsvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\drivers\netio.sys
2013-06-27 22:20:18 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\nlaapi.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\ndis.sys
2013-06-27 22:20:12 ----A---- C:\windows\system32\profsvc.dll
2013-06-27 22:20:11 ----A---- C:\windows\system32\OxpsConverter.exe
2013-06-27 22:20:08 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-06-27 22:20:08 ----A---- C:\windows\system32\wintrust.dll
2013-06-27 22:19:38 ----A---- C:\windows\system32\msi.dll
2013-06-27 22:19:37 ----A---- C:\windows\SYSWOW64\msi.dll
2013-06-27 22:17:52 ----A---- C:\windows\system32\KernelBase.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\wow64win.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\kernel32.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\conhost.exe
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----A---- C:\windows\system32\ntvdm64.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----A---- C:\windows\system32\wow64.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----A---- C:\windows\system32\wow64cpu.dll
2013-06-27 22:17:17 ----A---- C:\windows\system32\shell32.dll
2013-06-27 22:17:15 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\consent.exe
2013-06-27 22:17:14 ----A---- C:\windows\system32\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\appinfo.dll
2013-06-27 22:16:58 ----A---- C:\windows\SYSWOW64\xmllite.dll
2013-06-27 22:16:58 ----A---- C:\windows\system32\xmllite.dll
2013-06-27 22:16:54 ----A---- C:\windows\SYSWOW64\explorer.exe
2013-06-27 22:16:54 ----A---- C:\windows\explorer.exe
2013-06-27 22:16:51 ----A---- C:\windows\system32\tquery.dll
2013-06-27 22:16:51 ----A---- C:\windows\system32\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\tquery.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\mssph.dll
2013-06-27 22:16:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\system32\mssph.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\msscntrs.dll
2013-06-27 22:16:47 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2013-06-27 22:16:38 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-06-27 22:16:38 ----A---- C:\windows\system32\ntshrui.dll
2013-06-27 22:16:35 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-06-27 22:16:35 ----A---- C:\windows\system32\poqexec.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\drvinst.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devrtl.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devobj.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2013-06-27 22:16:07 ----A---- C:\windows\system32\umpnpmgr.dll
2013-06-27 22:16:05 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-06-27 22:16:05 ----A---- C:\windows\system32\srcore.dll
2013-06-27 08:00:30 ----SHD---- C:\Boot
2013-06-27 07:04:22 ----D---- C:\windows\SoftwareDistribution
2013-06-27 07:01:21 ----ASH---- C:\pagefile.sys
2013-06-27 07:01:21 ----ASH---- C:\hiberfil.sys
2013-06-27 07:01:20 ----SHD---- C:\System Volume Information
2013-06-26 23:38:56 ----D---- C:\windows\SYSWOW64\Wat
2013-06-26 23:38:56 ----D---- C:\windows\system32\Wat
2013-06-26 23:15:50 ----A---- C:\windows\system32\Wdfres.dll
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-06-26 23:15:24 ----A---- C:\windows\system32\browserchoice.exe
2013-06-26 23:14:40 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-06-26 23:14:34 ----D---- C:\windows\system32\Macromed
2013-06-26 23:14:05 ----A---- C:\windows\system32\WUDFSvc.dll
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-06-26 23:14:04 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFHost.exe
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-06-26 23:14:02 ----A---- C:\windows\system32\WUDFx.dll
2013-06-26 23:12:27 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-06-26 23:12:26 ----A---- C:\windows\SYSWOW64\prevhost.exe
2013-06-26 23:12:26 ----A---- C:\windows\system32\prevhost.exe
2013-06-26 23:11:25 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-06-26 23:11:23 ----A---- C:\windows\system32\spoolsv.exe
2013-06-26 23:11:23 ----A---- C:\windows\splwow64.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winresume.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winload.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdusb.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdcom.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kd1394.dll
2013-06-26 22:53:07 ----D---- C:\ProgramData\Citrix
2013-06-26 22:52:51 ----D---- C:\Users\Zbynek\AppData\Roaming\ICAClient
2013-06-26 22:52:44 ----D---- C:\Program Files (x86)\Citrix
2013-06-26 22:50:13 ----D---- C:\Users\Zbynek\AppData\Roaming\Juniper Networks
2013-06-26 22:46:01 ----A---- C:\windows\system32\wups2.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wucltux.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuaueng.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuauclt.exe
2013-06-26 22:45:48 ----A---- C:\windows\system32\wups.dll
2013-06-26 22:45:48 ----A---- C:\windows\system32\wudriver.dll
2013-06-26 22:45:47 ----A---- C:\windows\system32\wuapi.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuwebv.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuapp.exe
2013-06-26 22:41:42 ----D---- C:\Users\Zbynek\AppData\Roaming\AVG2013
2013-06-26 22:40:58 ----D---- C:\Users\Zbynek\AppData\Roaming\TuneUp Software
2013-06-26 22:40:45 ----HD---- C:\$AVG
2013-06-26 22:40:45 ----D---- C:\ProgramData\AVG2013
2013-06-26 22:35:08 ----HD---- C:\ProgramData\Common Files
2013-06-26 22:35:08 ----D---- C:\ProgramData\MFAData
2013-06-26 22:30:51 ----D---- C:\Users\Zbynek\AppData\Roaming\Opera
2013-06-26 22:24:11 ----SHD---- C:\$RECYCLE.BIN
2013-06-26 22:21:07 ----A---- C:\windows\Language.ini
2013-06-26 22:20:45 ----D---- C:\windows\ConfigSetRoot
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTKHDRC.dat
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-06-26 22:20:34 ----A---- C:\windows\system32\AsusScr_1215N_ENG.scr
2013-06-26 22:20:12 ----D---- C:\Program Files (x86)\ASM104xUSB3
2013-06-26 22:19:49 ----D---- C:\windows\system32\SRSLabs
2013-06-26 22:19:48 ----D---- C:\Program Files\Realtek
2013-06-26 22:19:47 ----D---- C:\windows\SYSWOW64\RTCOM
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\SamSfPa.dat
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\rtkhdaud.dat
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtPgEx64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtlCPAPI64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkCfg64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkAPO64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkApi64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEP64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEL64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEG64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEED64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTCOM64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DHT64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DAA64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RCoInst64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\drivers\RTKVHD64.sys
2013-06-26 22:19:20 ----A---- C:\windows\system32\FMAPO64.dll
2013-06-26 22:19:19 ----D---- C:\Program Files (x86)\Realtek
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAR64.dll
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAC64.dll
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\Temp
2013-06-26 22:19:17 ----A---- C:\windows\RtlExUpd.dll
2013-06-26 22:17:41 ----SD---- C:\Users\Zbynek\AppData\Roaming\Microsoft
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Macromedia
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\InstallShield
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Identities
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\ASUS WebStorage
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Adobe
2013-06-26 22:14:47 ----SHD---- C:\Recovery
======List of files/folders modified in the last 1 month======
2013-07-11 20:30:36 ----D---- C:\Program Files\Trend Micro
2013-07-11 20:28:44 ----D---- C:\windows\Temp
2013-07-11 20:27:18 ----D---- C:\ProgramData\NVIDIA
2013-07-11 20:25:49 ----D---- C:\windows\system32\config
2013-07-11 20:23:34 ----D---- C:\Program Files (x86)\Microsoft
2013-07-11 17:26:00 ----D---- C:\windows\system32\catroot2
2013-07-11 17:26:00 ----D---- C:\windows\system32\catroot
2013-07-11 17:25:27 ----D---- C:\windows\winsxs
2013-07-11 17:21:13 ----SHD---- C:\windows\Installer
2013-07-07 22:39:29 ----D---- C:\windows\Microsoft.NET
2013-07-07 22:32:32 ----RSD---- C:\windows\assembly
2013-07-05 11:06:48 ----D---- C:\windows\System32
2013-07-05 11:06:48 ----D---- C:\windows\inf
2013-07-05 11:06:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-01 13:54:29 ----SD---- C:\ProgramData\Microsoft
2013-07-01 13:54:23 ----D---- C:\Windows
2013-07-01 13:27:12 ----D---- C:\windows\system32\Tasks
2013-07-01 13:27:06 ----HD---- C:\ProgramData
2013-07-01 13:21:59 ----AD---- C:\windows\system32\drivers
2013-07-01 12:50:35 ----D---- C:\windows\SysWOW64
2013-07-01 12:46:36 ----RD---- C:\Program Files (x86)
2013-07-01 12:46:36 ----RD---- C:\Program Files
2013-07-01 11:11:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-01 11:11:46 ----D---- C:\windows\system32\cs-CZ
2013-07-01 11:03:58 ----D---- C:\windows\SYSWOW64\en-US
2013-07-01 11:03:58 ----D---- C:\windows\system32\en-US
2013-07-01 10:07:06 ----D---- C:\windows\SYSWOW64\sk-SK
2013-07-01 10:07:06 ----D---- C:\windows\system32\sk-SK
2013-07-01 10:07:06 ----D---- C:\Program Files\Internet Explorer
2013-07-01 10:07:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-01 10:07:05 ----D---- C:\windows\SYSWOW64\pl-PL
2013-07-01 10:07:04 ----D---- C:\windows\SYSWOW64\hu-HU
2013-07-01 10:07:04 ----D---- C:\windows\system32\pl-PL
2013-07-01 10:07:03 ----D---- C:\windows\system32\hu-HU
2013-07-01 10:06:57 ----D---- C:\windows\SYSWOW64\migration
2013-07-01 10:06:53 ----D---- C:\windows\PolicyDefinitions
2013-07-01 10:06:52 ----D---- C:\windows\system32\migration
2013-07-01 10:06:46 ----D---- C:\windows\SYSWOW64\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\drivers\en-US
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-PT
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-BR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\ko-KR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\it-IT
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-TW
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-HK
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-CN
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\tr-TR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\sv-SE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ru-RU
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nl-NL
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nb-NO
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ja-JP
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fr-FR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fi-FI
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\es-ES
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\el-GR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\de-DE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\da-DK
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-PT
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-BR
2013-07-01 10:06:39 ----D---- C:\windows\system32\it-IT
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-TW
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-HK
2013-07-01 10:06:38 ----D---- C:\windows\system32\tr-TR
2013-07-01 10:06:38 ----D---- C:\windows\system32\sv-SE
2013-07-01 10:06:38 ----D---- C:\windows\system32\nl-NL
2013-07-01 10:06:38 ----D---- C:\windows\system32\ko-KR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fr-FR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fi-FI
2013-07-01 10:06:38 ----D---- C:\windows\system32\es-ES
2013-07-01 10:06:38 ----D---- C:\windows\system32\el-GR
2013-07-01 10:06:38 ----D---- C:\windows\system32\de-DE
2013-07-01 10:06:37 ----D---- C:\windows\system32\zh-CN
2013-07-01 10:06:37 ----D---- C:\windows\system32\ru-RU
2013-07-01 10:06:37 ----D---- C:\windows\system32\nb-NO
2013-07-01 10:06:37 ----D---- C:\windows\system32\ja-JP
2013-07-01 10:06:37 ----D---- C:\windows\system32\da-DK
2013-07-01 10:06:32 ----D---- C:\windows\system32\DriverStore
2013-07-01 10:06:31 ----D---- C:\windows\SYSWOW64\drivers
2013-07-01 10:04:34 ----D---- C:\windows\Logs
2013-06-30 23:47:00 ----D---- C:\windows\system32\wdi
2013-06-30 23:42:14 ----D---- C:\AsusVibeData
2013-06-30 23:42:06 ----D---- C:\Program Files (x86)\Asus
2013-06-30 18:13:00 ----D---- C:\windows\debug
2013-06-30 15:31:00 ----D---- C:\windows\AppPatch
2013-06-30 15:30:56 ----D---- C:\Program Files\Windows Journal
2013-06-27 23:52:56 ----D---- C:\windows\ehome
2013-06-27 23:52:56 ----D---- C:\Program Files\Common Files\System
2013-06-27 23:28:42 ----RSD---- C:\windows\Fonts
2013-06-27 22:57:12 ----D---- C:\windows\Prefetch
2013-06-27 22:18:49 ----D---- C:\windows\system32\LogFiles
2013-06-27 07:13:45 ----D---- C:\windows\rescache
2013-06-27 07:13:21 ----D---- C:\windows\SYSWOW64\NV
2013-06-27 07:13:21 ----D---- C:\windows\system32\NV
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\pl-PL
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\hu-HU
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\cs-CZ
2013-06-26 23:38:53 ----D---- C:\windows\system32\Boot
2013-06-26 22:50:19 ----D---- C:\windows\Downloaded Program Files
2013-06-26 22:38:27 ----D---- C:\windows\system32\restore
2013-06-26 22:32:50 ----D---- C:\windows\system32\CodeIntegrity
2013-06-26 22:21:11 ----D---- C:\ProgramData\Trend Micro
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-26 22:17:40 ----RD---- C:\Users
2013-06-26 22:14:49 ----D---- C:\windows\panther
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-07-01 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-06 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\windows\SysWow64\drivers\AsIO.sys [2010-06-28 13440]
R1 AsUpIO;AsUpIO; C:\windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952]
R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2011-04-25 87600]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 90704]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 144464]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 105552]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-05-21 341032]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-05-21 102440]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-05-21 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-05-21 21544]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-10-24 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-08-24 2472680]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-07-29 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 DETECT PS2: ;DETECT PS2: ; \??\C:\Program Files (x86)\ASUS\LiveUpdate\DetectSys.sys [2010-05-27 6144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AsusService;Asus Launcher Service; C:\windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-05-14 4937264]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-06 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 267480]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-06-26 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Zbynek at 2013-07-11 20:30:32
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 65 GB (64%) free of 102 GB
Total RAM: 4086 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:30:38, on 11.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files\trend micro\Zbynek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\windows\AsScrPro.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini"
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\RunOnce: [Reboot] AsusSender.exe C:\Windows\Reboot.exe 60 (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://my.ppg.com/dana-cached/sc/Junip ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\SysWOW64\AsusService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13145 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=374bff03-4c66-480b-9772-173852dc5f45 /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\f284c943-dfbc-475b-864e-906c2965f96f-1ec-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 26442752
\??\C:\windows\system32\conhost.exe "55864282-309184925138017818021459519111848659220-4491168321850420368-538422026
C:\windows\System32\spoolsv.exe
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\AsusService.exe
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Trend Micro\Titanium\TiMiniService.exe"
"taskhost.exe"
"C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe"
\??\C:\windows\system32\conhost.exe "-1696255314-374994676-725468916-12287684411691532548-100403724213223215931469317638
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
WLIDSvcM.exe 2576
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\AsScrPro.exe"
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe" auto
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe" autorun
"C:\windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
"C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\wbem\wmiprvse.exe
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\windows\system32\sppsvc.exe
C:\windows\system32\wbem\wmiprvse.exe
"D:\Install\RSITx64.exe"
"C:\windows\system32\wuauclt.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17 264528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"LiveUpdate"=AsusSender.exe C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe auto []
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 192520]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 321872]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-11-01 165912]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-11-01 385560]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-11-01 364056]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-08-24 11447912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"=C:\windows\AsScrPro.exe [2011-04-29 3058304]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"CapsHook"=AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe [2011-01-07 414384]
"OOBESetup"=C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe [2011-01-04 345088]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-29 2018032]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-04-29 4408368]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2011-04-25 305088]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-10-24 261120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-11 20:21:19 ----D---- C:\_OTM
2013-07-10 22:56:56 ----A---- C:\AdwCleaner[S1].txt
2013-07-10 22:56:13 ----A---- C:\AdwCleaner[R4].txt
2013-07-10 21:59:41 ----A---- C:\AdwCleaner[R3].txt
2013-07-08 15:12:43 ----A---- C:\AdwCleaner[R2].txt
2013-07-08 12:42:14 ----A---- C:\AdwCleaner[R1].txt
2013-07-08 12:36:47 ----D---- C:\rsit
2013-07-05 11:18:39 ----D---- C:\Users\Zbynek\AppData\Roaming\XnView
2013-07-01 13:54:23 ----A---- C:\windows\wininit.ini
2013-07-01 13:27:06 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:59:59 ----D---- C:\Users\Zbynek\AppData\Roaming\LavasoftStatistics
2013-07-01 12:56:44 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-07-01 12:56:43 ----A---- C:\windows\system32\sbbd.exe
2013-07-01 12:56:39 ----D---- C:\Users\Zbynek\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 12:46:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-01 12:46:36 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-01 11:03:57 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-01 10:52:00 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-07-01 10:51:59 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-07-01 00:02:03 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-07-01 00:02:03 ----A---- C:\windows\system32\elshyph.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\occache.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\url.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\wininet.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\urlmon.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-01 00:01:57 ----A---- C:\windows\system32\msrating.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\msls31.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\iertutil.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\url.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\jsproxy.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iesetup.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iernonce.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iedkcs32.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dat
2013-07-01 00:01:56 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-01 00:01:56 ----A---- C:\windows\system32\icardie.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtrans.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtmsft.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\wextract.exe
2013-07-01 00:01:55 ----A---- C:\windows\system32\webcheck.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\vbscript.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\mshtmled.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\msfeeds.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\licmgr10.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\inseng.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\iexpress.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\pngfilt.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\occache.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshtml.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshta.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\msfeedsbs.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\jscript.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\imgutil.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\ieUnatt.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\iepeers.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\mshtmler.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\msfeedssync.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\jscript9.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\ieui.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\iesysprep.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\IEAdvpack.dll
2013-07-01 00:01:52 ----A---- C:\windows\system32\ieframe.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-30 23:58:31 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbGD.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\aaclient.dll
2013-06-30 23:58:26 ----A---- C:\windows\SYSWOW64\mstsc.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\wksprt.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\TSWbPrxy.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpudd.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpendp_winip.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\mstsc.exe
2013-06-30 23:58:25 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-06-30 23:58:25 ----A---- C:\windows\system32\rdpcorets.dll
2013-06-30 23:58:24 ----A---- C:\windows\system32\mstscax.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-06-30 23:55:25 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-06-30 23:55:25 ----A---- C:\windows\system32\WMPhoto.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10_1.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10_1core.dll
2013-06-30 23:55:14 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\d3d10.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\FntCache.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\DWrite.dll
2013-06-30 23:55:12 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-06-30 23:55:12 ----A---- C:\windows\system32\d2d1.dll
2013-06-30 23:54:16 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-06-30 23:54:16 ----A---- C:\windows\system32\qdvd.dll
2013-06-30 23:54:13 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-06-30 23:54:13 ----A---- C:\windows\system32\schannel.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\lsasrv.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\cng.sys
2013-06-30 23:39:49 ----D---- C:\ProgramData\ASUS WebStorage
2013-06-30 18:12:58 ----A---- C:\windows\system32\MRT.exe
2013-06-30 18:08:52 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-06-30 18:08:49 ----A---- C:\windows\system32\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\system32\drivers\bthport.sys
2013-06-30 18:08:47 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\certutil.exe
2013-06-30 18:08:39 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-06-30 18:08:39 ----A---- C:\windows\system32\certenc.dll
2013-06-30 18:08:25 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-06-30 18:08:24 ----A---- C:\windows\system32\cdosys.dll
2013-06-30 18:08:15 ----A---- C:\windows\system32\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\SYSWOW64\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\system32\fsutil.exe
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\storport.sys
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-06-30 18:08:13 ----A---- C:\windows\SYSWOW64\fsutil.exe
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-06-30 18:08:12 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-06-30 18:08:01 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbport.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbd.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-06-30 18:06:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-06-30 18:06:49 ----A---- C:\windows\system32\win32k.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\cdd.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmfd.dll
2013-06-28 20:57:14 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-06-28 20:57:13 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-06-28 20:57:13 ----A---- C:\windows\system32\wmi.dll
2013-06-28 20:55:18 ----A---- C:\windows\system32\winsrv.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-06-28 20:55:14 ----A---- C:\windows\SYSWOW64\user.exe
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml6.dll
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml3.dll
2013-06-28 20:55:08 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-06-28 20:55:07 ----A---- C:\windows\system32\msxml3r.dll
2013-06-28 20:55:06 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-06-28 20:55:06 ----A---- C:\windows\system32\msvcrt.dll
2013-06-28 20:55:05 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-06-28 20:55:04 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-06-28 20:55:03 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-06-28 20:55:03 ----A---- C:\windows\system32\ncrypt.dll
2013-06-28 20:55:01 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browser.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browcli.dll
2013-06-28 20:54:55 ----A---- C:\windows\system32\localspl.dll
2013-06-28 20:54:53 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-06-28 20:54:53 ----A---- C:\windows\system32\synceng.dll
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\rdpwsx.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\dpnet.dll
2013-06-28 20:54:46 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-06-28 20:54:45 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-06-28 20:54:45 ----A---- C:\windows\system32\kerberos.dll
2013-06-28 20:48:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-06-28 20:48:09 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-06-28 20:48:08 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\smss.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\csrsrv.dll
2013-06-28 20:48:07 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-06-27 23:48:18 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2013-06-27 23:48:18 ----A---- C:\windows\system32\CPFilters.dll
2013-06-27 23:48:17 ----A---- C:\windows\SYSWOW64\sbe.dll
2013-06-27 23:48:17 ----A---- C:\windows\system32\sbe.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccu32.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbccp32.dll
2013-06-27 23:48:10 ----A---- C:\windows\SYSWOW64\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\lsass.exe
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspisrv.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspicli.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\secur32.dll
2013-06-27 23:48:08 ----A---- C:\windows\system32\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnsrslvr.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnscacheugc.exe
2013-06-27 23:48:05 ----A---- C:\windows\system32\psisdecd.dll
2013-06-27 23:48:04 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2013-06-27 23:48:02 ----A---- C:\windows\system32\mfc42u.dll
2013-06-27 23:48:01 ----A---- C:\windows\SYSWOW64\mfc42.dll
2013-06-27 23:48:01 ----A---- C:\windows\system32\mfc42.dll
2013-06-27 23:48:00 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2013-06-27 23:47:59 ----A---- C:\windows\system32\FXSCOVER.exe
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv2.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv.sys
2013-06-27 23:47:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-06-27 23:47:55 ----A---- C:\windows\system32\ntdll.dll
2013-06-27 23:47:53 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-06-27 23:47:53 ----A---- C:\windows\system32\quartz.dll
2013-06-27 23:47:50 ----A---- C:\windows\system32\drivers\bowser.sys
2013-06-27 23:47:48 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleacc.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleacc.dll
2013-06-27 23:47:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-06-27 23:47:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2013-06-27 23:47:43 ----A---- C:\windows\system32\inetcomm.dll
2013-06-27 23:47:42 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-06-27 23:47:42 ----A---- C:\windows\system32\EncDec.dll
2013-06-27 23:47:40 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-06-27 23:47:40 ----A---- C:\windows\system32\rdpcore.dll
2013-06-27 23:47:39 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-06-27 23:46:39 ----A---- C:\windows\SYSWOW64\packager.dll
2013-06-27 23:46:39 ----A---- C:\windows\system32\packager.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwansvc.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwanprotdim.dll
2013-06-27 23:13:41 ----A---- C:\windows\system32\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-06-27 23:13:40 ----A---- C:\windows\system32\gameux.dll
2013-06-27 23:13:08 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-06-27 23:13:08 ----A---- C:\windows\system32\usp10.dll
2013-06-27 23:12:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-06-27 23:12:31 ----A---- C:\windows\system32\tzres.dll
2013-06-27 23:11:46 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-06-27 23:11:46 ----A---- C:\windows\system32\cryptdlg.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcore6.dll
2013-06-27 23:11:22 ----A---- C:\windows\system32\taskhost.exe
2013-06-27 22:58:16 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-06-27 22:58:16 ----A---- C:\windows\system32\d3d11.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\nlasvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\iphlpsvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\drivers\netio.sys
2013-06-27 22:20:18 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\nlaapi.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\ndis.sys
2013-06-27 22:20:12 ----A---- C:\windows\system32\profsvc.dll
2013-06-27 22:20:11 ----A---- C:\windows\system32\OxpsConverter.exe
2013-06-27 22:20:08 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-06-27 22:20:08 ----A---- C:\windows\system32\wintrust.dll
2013-06-27 22:19:38 ----A---- C:\windows\system32\msi.dll
2013-06-27 22:19:37 ----A---- C:\windows\SYSWOW64\msi.dll
2013-06-27 22:17:52 ----A---- C:\windows\system32\KernelBase.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\wow64win.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\kernel32.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\conhost.exe
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----A---- C:\windows\system32\ntvdm64.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----A---- C:\windows\system32\wow64.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----A---- C:\windows\system32\wow64cpu.dll
2013-06-27 22:17:17 ----A---- C:\windows\system32\shell32.dll
2013-06-27 22:17:15 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\consent.exe
2013-06-27 22:17:14 ----A---- C:\windows\system32\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\appinfo.dll
2013-06-27 22:16:58 ----A---- C:\windows\SYSWOW64\xmllite.dll
2013-06-27 22:16:58 ----A---- C:\windows\system32\xmllite.dll
2013-06-27 22:16:54 ----A---- C:\windows\SYSWOW64\explorer.exe
2013-06-27 22:16:54 ----A---- C:\windows\explorer.exe
2013-06-27 22:16:51 ----A---- C:\windows\system32\tquery.dll
2013-06-27 22:16:51 ----A---- C:\windows\system32\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\tquery.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\mssph.dll
2013-06-27 22:16:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\system32\mssph.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\msscntrs.dll
2013-06-27 22:16:47 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2013-06-27 22:16:38 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-06-27 22:16:38 ----A---- C:\windows\system32\ntshrui.dll
2013-06-27 22:16:35 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-06-27 22:16:35 ----A---- C:\windows\system32\poqexec.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\drvinst.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devrtl.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devobj.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2013-06-27 22:16:07 ----A---- C:\windows\system32\umpnpmgr.dll
2013-06-27 22:16:05 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-06-27 22:16:05 ----A---- C:\windows\system32\srcore.dll
2013-06-27 08:00:30 ----SHD---- C:\Boot
2013-06-27 07:04:22 ----D---- C:\windows\SoftwareDistribution
2013-06-27 07:01:21 ----ASH---- C:\pagefile.sys
2013-06-27 07:01:21 ----ASH---- C:\hiberfil.sys
2013-06-27 07:01:20 ----SHD---- C:\System Volume Information
2013-06-26 23:38:56 ----D---- C:\windows\SYSWOW64\Wat
2013-06-26 23:38:56 ----D---- C:\windows\system32\Wat
2013-06-26 23:15:50 ----A---- C:\windows\system32\Wdfres.dll
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-06-26 23:15:24 ----A---- C:\windows\system32\browserchoice.exe
2013-06-26 23:14:40 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-06-26 23:14:34 ----D---- C:\windows\system32\Macromed
2013-06-26 23:14:05 ----A---- C:\windows\system32\WUDFSvc.dll
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-06-26 23:14:04 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFHost.exe
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-06-26 23:14:02 ----A---- C:\windows\system32\WUDFx.dll
2013-06-26 23:12:27 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-06-26 23:12:26 ----A---- C:\windows\SYSWOW64\prevhost.exe
2013-06-26 23:12:26 ----A---- C:\windows\system32\prevhost.exe
2013-06-26 23:11:25 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-06-26 23:11:23 ----A---- C:\windows\system32\spoolsv.exe
2013-06-26 23:11:23 ----A---- C:\windows\splwow64.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winresume.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winload.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdusb.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdcom.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kd1394.dll
2013-06-26 22:53:07 ----D---- C:\ProgramData\Citrix
2013-06-26 22:52:51 ----D---- C:\Users\Zbynek\AppData\Roaming\ICAClient
2013-06-26 22:52:44 ----D---- C:\Program Files (x86)\Citrix
2013-06-26 22:50:13 ----D---- C:\Users\Zbynek\AppData\Roaming\Juniper Networks
2013-06-26 22:46:01 ----A---- C:\windows\system32\wups2.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wucltux.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuaueng.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuauclt.exe
2013-06-26 22:45:48 ----A---- C:\windows\system32\wups.dll
2013-06-26 22:45:48 ----A---- C:\windows\system32\wudriver.dll
2013-06-26 22:45:47 ----A---- C:\windows\system32\wuapi.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuwebv.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuapp.exe
2013-06-26 22:41:42 ----D---- C:\Users\Zbynek\AppData\Roaming\AVG2013
2013-06-26 22:40:58 ----D---- C:\Users\Zbynek\AppData\Roaming\TuneUp Software
2013-06-26 22:40:45 ----HD---- C:\$AVG
2013-06-26 22:40:45 ----D---- C:\ProgramData\AVG2013
2013-06-26 22:35:08 ----HD---- C:\ProgramData\Common Files
2013-06-26 22:35:08 ----D---- C:\ProgramData\MFAData
2013-06-26 22:30:51 ----D---- C:\Users\Zbynek\AppData\Roaming\Opera
2013-06-26 22:24:11 ----SHD---- C:\$RECYCLE.BIN
2013-06-26 22:21:07 ----A---- C:\windows\Language.ini
2013-06-26 22:20:45 ----D---- C:\windows\ConfigSetRoot
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTKHDRC.dat
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-06-26 22:20:34 ----A---- C:\windows\system32\AsusScr_1215N_ENG.scr
2013-06-26 22:20:12 ----D---- C:\Program Files (x86)\ASM104xUSB3
2013-06-26 22:19:49 ----D---- C:\windows\system32\SRSLabs
2013-06-26 22:19:48 ----D---- C:\Program Files\Realtek
2013-06-26 22:19:47 ----D---- C:\windows\SYSWOW64\RTCOM
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\SamSfPa.dat
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\rtkhdaud.dat
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtPgEx64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtlCPAPI64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkCfg64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkAPO64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkApi64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEP64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEL64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEG64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEED64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTCOM64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DHT64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DAA64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RCoInst64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\drivers\RTKVHD64.sys
2013-06-26 22:19:20 ----A---- C:\windows\system32\FMAPO64.dll
2013-06-26 22:19:19 ----D---- C:\Program Files (x86)\Realtek
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAR64.dll
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAC64.dll
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\Temp
2013-06-26 22:19:17 ----A---- C:\windows\RtlExUpd.dll
2013-06-26 22:17:41 ----SD---- C:\Users\Zbynek\AppData\Roaming\Microsoft
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Macromedia
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\InstallShield
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Identities
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\ASUS WebStorage
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Adobe
2013-06-26 22:14:47 ----SHD---- C:\Recovery
======List of files/folders modified in the last 1 month======
2013-07-11 20:30:36 ----D---- C:\Program Files\Trend Micro
2013-07-11 20:28:44 ----D---- C:\windows\Temp
2013-07-11 20:27:18 ----D---- C:\ProgramData\NVIDIA
2013-07-11 20:25:49 ----D---- C:\windows\system32\config
2013-07-11 20:23:34 ----D---- C:\Program Files (x86)\Microsoft
2013-07-11 17:26:00 ----D---- C:\windows\system32\catroot2
2013-07-11 17:26:00 ----D---- C:\windows\system32\catroot
2013-07-11 17:25:27 ----D---- C:\windows\winsxs
2013-07-11 17:21:13 ----SHD---- C:\windows\Installer
2013-07-07 22:39:29 ----D---- C:\windows\Microsoft.NET
2013-07-07 22:32:32 ----RSD---- C:\windows\assembly
2013-07-05 11:06:48 ----D---- C:\windows\System32
2013-07-05 11:06:48 ----D---- C:\windows\inf
2013-07-05 11:06:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-01 13:54:29 ----SD---- C:\ProgramData\Microsoft
2013-07-01 13:54:23 ----D---- C:\Windows
2013-07-01 13:27:12 ----D---- C:\windows\system32\Tasks
2013-07-01 13:27:06 ----HD---- C:\ProgramData
2013-07-01 13:21:59 ----AD---- C:\windows\system32\drivers
2013-07-01 12:50:35 ----D---- C:\windows\SysWOW64
2013-07-01 12:46:36 ----RD---- C:\Program Files (x86)
2013-07-01 12:46:36 ----RD---- C:\Program Files
2013-07-01 11:11:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-01 11:11:46 ----D---- C:\windows\system32\cs-CZ
2013-07-01 11:03:58 ----D---- C:\windows\SYSWOW64\en-US
2013-07-01 11:03:58 ----D---- C:\windows\system32\en-US
2013-07-01 10:07:06 ----D---- C:\windows\SYSWOW64\sk-SK
2013-07-01 10:07:06 ----D---- C:\windows\system32\sk-SK
2013-07-01 10:07:06 ----D---- C:\Program Files\Internet Explorer
2013-07-01 10:07:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-01 10:07:05 ----D---- C:\windows\SYSWOW64\pl-PL
2013-07-01 10:07:04 ----D---- C:\windows\SYSWOW64\hu-HU
2013-07-01 10:07:04 ----D---- C:\windows\system32\pl-PL
2013-07-01 10:07:03 ----D---- C:\windows\system32\hu-HU
2013-07-01 10:06:57 ----D---- C:\windows\SYSWOW64\migration
2013-07-01 10:06:53 ----D---- C:\windows\PolicyDefinitions
2013-07-01 10:06:52 ----D---- C:\windows\system32\migration
2013-07-01 10:06:46 ----D---- C:\windows\SYSWOW64\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\drivers\en-US
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-PT
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-BR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\ko-KR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\it-IT
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-TW
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-HK
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-CN
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\tr-TR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\sv-SE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ru-RU
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nl-NL
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nb-NO
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ja-JP
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fr-FR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fi-FI
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\es-ES
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\el-GR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\de-DE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\da-DK
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-PT
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-BR
2013-07-01 10:06:39 ----D---- C:\windows\system32\it-IT
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-TW
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-HK
2013-07-01 10:06:38 ----D---- C:\windows\system32\tr-TR
2013-07-01 10:06:38 ----D---- C:\windows\system32\sv-SE
2013-07-01 10:06:38 ----D---- C:\windows\system32\nl-NL
2013-07-01 10:06:38 ----D---- C:\windows\system32\ko-KR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fr-FR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fi-FI
2013-07-01 10:06:38 ----D---- C:\windows\system32\es-ES
2013-07-01 10:06:38 ----D---- C:\windows\system32\el-GR
2013-07-01 10:06:38 ----D---- C:\windows\system32\de-DE
2013-07-01 10:06:37 ----D---- C:\windows\system32\zh-CN
2013-07-01 10:06:37 ----D---- C:\windows\system32\ru-RU
2013-07-01 10:06:37 ----D---- C:\windows\system32\nb-NO
2013-07-01 10:06:37 ----D---- C:\windows\system32\ja-JP
2013-07-01 10:06:37 ----D---- C:\windows\system32\da-DK
2013-07-01 10:06:32 ----D---- C:\windows\system32\DriverStore
2013-07-01 10:06:31 ----D---- C:\windows\SYSWOW64\drivers
2013-07-01 10:04:34 ----D---- C:\windows\Logs
2013-06-30 23:47:00 ----D---- C:\windows\system32\wdi
2013-06-30 23:42:14 ----D---- C:\AsusVibeData
2013-06-30 23:42:06 ----D---- C:\Program Files (x86)\Asus
2013-06-30 18:13:00 ----D---- C:\windows\debug
2013-06-30 15:31:00 ----D---- C:\windows\AppPatch
2013-06-30 15:30:56 ----D---- C:\Program Files\Windows Journal
2013-06-27 23:52:56 ----D---- C:\windows\ehome
2013-06-27 23:52:56 ----D---- C:\Program Files\Common Files\System
2013-06-27 23:28:42 ----RSD---- C:\windows\Fonts
2013-06-27 22:57:12 ----D---- C:\windows\Prefetch
2013-06-27 22:18:49 ----D---- C:\windows\system32\LogFiles
2013-06-27 07:13:45 ----D---- C:\windows\rescache
2013-06-27 07:13:21 ----D---- C:\windows\SYSWOW64\NV
2013-06-27 07:13:21 ----D---- C:\windows\system32\NV
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\pl-PL
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\hu-HU
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\cs-CZ
2013-06-26 23:38:53 ----D---- C:\windows\system32\Boot
2013-06-26 22:50:19 ----D---- C:\windows\Downloaded Program Files
2013-06-26 22:38:27 ----D---- C:\windows\system32\restore
2013-06-26 22:32:50 ----D---- C:\windows\system32\CodeIntegrity
2013-06-26 22:21:11 ----D---- C:\ProgramData\Trend Micro
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-26 22:17:40 ----RD---- C:\Users
2013-06-26 22:14:49 ----D---- C:\windows\panther
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-07-01 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-06 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\windows\SysWow64\drivers\AsIO.sys [2010-06-28 13440]
R1 AsUpIO;AsUpIO; C:\windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952]
R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2011-04-25 87600]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 90704]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 144464]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 105552]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-05-21 341032]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-05-21 102440]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-05-21 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-05-21 21544]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-10-24 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-08-24 2472680]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-07-29 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 DETECT PS2: ;DETECT PS2: ; \??\C:\Program Files (x86)\ASUS\LiveUpdate\DetectSys.sys [2010-05-27 6144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AsusService;Asus Launcher Service; C:\windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-05-14 4937264]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-06 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 267480]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-06-26 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomaleny internet
Log je již OK. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomaleny internet
Pripada mi, ze internet je rychlejsi, takze to je dobre. Na druhou stranu problem s nedostupnosti stranek (viz muj prvni prispevek na zacatku tohoto vlakna), ktere jsou z jinych pocitacu pripojenych do me site dostupne, stale pretrvava. Nejaky navrh/napad, co by se s tim dalo delat?
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomaleny internet
Zkuste smazat cache prohlížeče.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomaleny internet
Dik, za feedback. Tyto zakladni veci jsem samozrejme delal uz driv, smazal jsem i cookies a tak, ale nic nepomohlo. Nejaky dalsi navrh? Nebo mam popripade otevrit jine vlakno v jine sekci tohoto fora?
-
Rudy
- Site Admin
- Příspěvky: 119529
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zpomaleny internet
Poprosím ještě o log ComboFix:
Je také možné, že jsou někde zablokovány. Co je to za weby?Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
pote spustte aplikaci pod uctem s administratorskym opravnenim
hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.
v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se
jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine
aplikace ani nic jineho
behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)
upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,
pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k
nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zpomaleny internet
Ahoj, nize je log z Combofix. Prvni web pouzivam pro prihlasovani na sportovni udalosti naseho tymu, druhy je informacni web o volejbalu. Ohledne blokovani, mel jsem vypnuty i firewall a antivirus (pokud to mohlo pomoci), ale stejne jsem se na tyto weby nedostal. Google je normalne najde, ale kliz kliknu na jejich odkaz, tak mi to pise, ze nemuze nalezt server.
ComboFix 13-07-11.03 - Zbynek 12.07.2013 13:51:27.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4086.2592 [GMT 2:00]
Spuštěný z: c:\users\Zbynek\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Trend Micro Titanium *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Trend Micro Titanium *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-12 do 2013-07-12 )))))))))))))))))))))))))))))))
.
.
2013-07-12 12:46 . 2013-07-12 12:46 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-07-12 12:46 . 2013-07-12 12:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-12 09:46 . 2013-06-07 03:22 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-07-12 09:46 . 2013-06-07 02:37 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-07-12 09:46 . 2013-06-11 23:25 526336 ----a-w- c:\windows\system32\ieui.dll
2013-07-12 09:46 . 2013-06-11 23:42 257536 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll
2013-07-12 09:46 . 2013-06-11 23:42 235520 ----a-w- c:\program files (x86)\Internet Explorer\IEShims.dll
2013-07-12 09:46 . 2013-06-11 23:25 701952 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2013-07-12 09:46 . 2013-06-11 23:25 356864 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2013-07-11 15:27 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-11 15:27 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-11 15:27 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-11 15:27 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
2013-07-11 15:27 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
2013-07-11 15:27 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
2013-07-11 15:27 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
2013-07-11 15:27 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
2013-07-11 15:27 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-11 15:27 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-11 15:27 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-11 15:26 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-07-11 15:26 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-11 15:26 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-11 15:26 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-11 15:26 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-11 15:26 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-11 15:26 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-07-11 15:26 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-07-09 17:47 . 2013-07-09 17:47 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software
2013-07-01 11:27 . 2013-07-01 11:27 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-07-01 10:56 . 2013-07-01 11:21 14456 ----a-w- c:\windows\system32\drivers\gfibto.sys
2013-07-01 10:56 . 2013-07-01 11:21 47496 ----a-w- c:\windows\system32\sbbd.exe
2013-07-01 10:46 . 2013-07-11 18:17 -------- d-----w- c:\program files\Microsoft Silverlight
2013-07-01 10:46 . 2013-07-11 18:17 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-07-01 09:03 . 2013-07-01 09:03 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-07-01 08:52 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-07-01 08:51 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-30 22:01 . 2013-06-30 22:01 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-06-30 21:58 . 2012-08-23 15:09 3072 ----a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui
2013-06-30 21:55 . 2013-01-13 19:53 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-06-30 21:54 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2013-06-30 21:54 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2013-06-30 21:54 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll
2013-06-30 21:54 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-06-30 21:54 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-06-30 21:54 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys
2013-06-30 21:54 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll
2013-06-30 21:54 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2013-06-30 21:54 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2013-06-30 21:39 . 2013-06-30 21:39 -------- d-----w- c:\programdata\ASUS WebStorage
2013-06-30 16:12 . 2013-07-11 15:25 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-06-30 16:06 . 2012-06-02 05:48 95600 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-06-30 16:06 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-06-30 16:06 . 2013-04-10 06:01 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 16:06 . 2011-02-03 11:25 144384 ----a-w- c:\windows\system32\cdd.dll
2013-06-28 18:58 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-06-28 18:58 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-06-28 18:58 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-06-28 18:58 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-06-28 18:58 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-06-28 18:58 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-06-28 18:57 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-06-28 18:57 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-06-28 18:57 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-06-28 18:57 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-06-28 18:57 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-06-28 18:54 . 2012-07-04 22:16 73216 ----a-w- c:\windows\system32\netapi32.dll
2013-06-28 18:48 . 2013-03-19 06:04 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-06-28 18:48 . 2013-03-19 05:04 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-06-28 18:48 . 2013-03-19 05:46 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-06-28 18:48 . 2013-03-19 05:04 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-06-28 18:48 . 2013-03-19 03:06 112640 ----a-w- c:\windows\system32\smss.exe
2013-06-28 18:48 . 2013-03-19 04:47 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-06-27 21:47 . 2011-02-12 11:34 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2013-06-27 21:46 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2013-06-27 21:46 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-06-27 21:15 . 2013-03-19 05:53 48640 ----a-w- c:\windows\system32\wwanprotdim.dll
2013-06-27 21:15 . 2013-03-19 05:53 230400 ----a-w- c:\windows\system32\wwansvc.dll
2013-06-27 21:12 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2013-06-27 21:12 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-06-27 21:11 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-27 21:11 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-27 21:11 . 2012-10-09 18:17 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2013-06-27 21:11 . 2012-10-09 18:17 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2013-06-27 21:11 . 2012-10-09 17:40 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2013-06-27 21:11 . 2012-10-09 17:40 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
2013-06-27 21:11 . 2012-11-23 03:13 68608 ----a-w- c:\windows\system32\taskhost.exe
2013-06-27 20:58 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-27 20:58 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-27 20:19 . 2012-04-07 12:31 3216384 ----a-w- c:\windows\system32\msi.dll
2013-06-27 20:19 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\SysWow64\msi.dll
2013-06-27 20:16 . 2011-06-16 05:49 199680 ----a-w- c:\windows\system32\xmllite.dll
2013-06-27 06:00 . 2013-06-27 06:00 -------- d-----w- C:\Boot
2013-06-27 05:09 . 2011-04-29 14:44 -------- d-----w- c:\users\Default\AppData\Local\Windows Live
2013-06-27 05:09 . 2011-04-29 14:43 -------- d-----w- c:\users\Default\AppData\Local\Adobe
2013-06-27 05:09 . 2011-04-29 14:35 -------- d-----w- c:\users\Default\AppData\Local\Broadcom
2013-06-27 05:09 . 2011-04-29 15:10 -------- d-----w- c:\users\Default\AppData\Roaming\ASUS WebStorage
2013-06-27 05:09 . 2011-04-29 14:23 -------- d-----w- c:\users\Default\AppData\Roaming\InstallShield
2013-06-26 21:38 . 2013-06-26 21:38 -------- d-----w- c:\windows\SysWow64\Wat
2013-06-26 21:38 . 2013-06-26 21:38 -------- d-----w- c:\windows\system32\Wat
2013-06-26 21:15 . 2012-07-26 07:48 2560 ----a-w- c:\windows\system32\drivers\hu-HU\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 05:05 2560 ----a-w- c:\windows\system32\drivers\pl-PL\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 04:47 2560 ----a-w- c:\windows\system32\drivers\en-US\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-06-26 21:15 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-06-26 21:15 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-06-26 21:15 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-06-26 21:14 . 2013-06-28 20:56 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-26 21:14 . 2013-06-28 20:56 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-26 21:14 . 2013-06-26 21:14 -------- d-----w- c:\windows\system32\Macromed
2013-06-26 21:14 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-06-26 21:14 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-06-26 21:14 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-06-26 21:14 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-06-26 21:14 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-06-26 21:14 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-06-26 21:14 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-06-26 21:12 . 2011-04-22 22:15 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2013-06-26 21:12 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2013-06-26 21:12 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2013-06-26 21:11 . 2013-01-24 06:01 223752 ----a-w- c:\windows\system32\drivers\fvevol.sys
2013-06-26 21:11 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2013-06-26 21:11 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2013-06-26 21:08 . 2011-02-05 17:06 566208 ----a-w- c:\windows\system32\winresume.efi
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-26 20:18 . 2010-06-24 18:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2011-04-29 3058304]
"UCam_Menu"="c:\program files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"HotkeyMon"="AsusSender.exe" [2011-03-11 34728]
"HotkeyService"="AsusSender.exe" [2011-03-11 34728]
"SuperHybridEngine"="AsusSender.exe" [2011-03-11 34728]
"CapsHook"="AsusSender.exe" [2011-03-11 34728]
"Eee Docking"="c:\program files (x86)\ASUS\Eee Docking\Eee Docking.exe" [2011-01-06 414384]
"OOBESetup"="c:\program files (x86)\asus\OOBERegBackup\OOBERegBackup.exe" [2011-01-04 345088]
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2011-04-29 2018032]
"AVG_UI"="d:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-04-28 4408368]
"ConnectionCenter"="c:\program files (x86)\Citrix\ICA Client\concentr.exe" [2011-04-25 305088]
"ASUSWebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe /start [2013-6-30 549040]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 1127712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
R2 AVGIDSAgent;AVGIDSAgent;d:\program files (x86)\AVG\AVG2013\avgidsagent.exe;d:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x]
R3 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 DETECT PS2: ;DETECT PS2: ;c:\program files (x86)\ASUS\LiveUpdate\DetectSys.sys;c:\program files (x86)\ASUS\LiveUpdate\DetectSys.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys;c:\windows\SYSNATIVE\DRIVERS\ctxusbm.sys [x]
S1 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys;c:\windows\SYSNATIVE\DRIVERS\tmevtmgr.sys [x]
S2 AsusService;Asus Launcher Service;c:\windows\SysWOW64\AsusService.exe;c:\windows\SysWOW64\AsusService.exe [x]
S2 avgwd;AVG WatchDog;d:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;d:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TiMiniService;TiMiniService;c:\program files\Trend Micro\Titanium\TiMiniService.exe;c:\program files\Trend Micro\Titanium\TiMiniService.exe [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2011-05-25 07:09 227840 ----a-w- c:\program files (x86)\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2011-05-25 07:09 227840 ----a-w- c:\program files (x86)\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LiveUpdate"="AsusSender.exe" [2010-12-07 34728]
"VizorHtmlDialog.exe"="c:\program files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" [2010-10-08 1123664]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2010-10-12 192520]
"Trend Micro Titanium"="c:\program files\Trend Micro\Titanium\VizorShortCut.exe" [2010-10-20 321872]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-11-01 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-11-01 385560]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-11-01 364056]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-08-24 11447912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
TCP: Interfaces\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynAsusAcpi - c:\program files (x86)\Synaptics\SynTP\SynAsusAcpi.exe
.
.
"ServiceDll"="%Systemroot%\System32\defragsvc.dll"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DETECT PS2: ]
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-07-12 14:53:48
ComboFix-quarantined-files.txt 2013-07-12 12:53
.
Před spuštěním: Volných bajtů: 68 421 935 104
Po spuštění: Volných bajtů: 68 300 111 872
.
- - End Of File - - E46D61C7029C069930DF4842EEB2774A
D41D8CD98F00B204E9800998ECF8427E
ComboFix 13-07-11.03 - Zbynek 12.07.2013 13:51:27.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4086.2592 [GMT 2:00]
Spuštěný z: c:\users\Zbynek\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Trend Micro Titanium *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Trend Micro Titanium *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-12 do 2013-07-12 )))))))))))))))))))))))))))))))
.
.
2013-07-12 12:46 . 2013-07-12 12:46 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-07-12 12:46 . 2013-07-12 12:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-12 09:46 . 2013-06-07 03:22 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-07-12 09:46 . 2013-06-07 02:37 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-07-12 09:46 . 2013-06-11 23:25 526336 ----a-w- c:\windows\system32\ieui.dll
2013-07-12 09:46 . 2013-06-11 23:42 257536 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll
2013-07-12 09:46 . 2013-06-11 23:42 235520 ----a-w- c:\program files (x86)\Internet Explorer\IEShims.dll
2013-07-12 09:46 . 2013-06-11 23:25 701952 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2013-07-12 09:46 . 2013-06-11 23:25 356864 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2013-07-11 15:27 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-11 15:27 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-11 15:27 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-11 15:27 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
2013-07-11 15:27 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
2013-07-11 15:27 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
2013-07-11 15:27 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
2013-07-11 15:27 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
2013-07-11 15:27 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-11 15:27 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-11 15:27 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-11 15:26 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-07-11 15:26 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-11 15:26 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-11 15:26 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-11 15:26 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-11 15:26 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-11 15:26 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-07-11 15:26 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-07-09 17:47 . 2013-07-09 17:47 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software
2013-07-01 11:27 . 2013-07-01 11:27 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-07-01 10:56 . 2013-07-01 11:21 14456 ----a-w- c:\windows\system32\drivers\gfibto.sys
2013-07-01 10:56 . 2013-07-01 11:21 47496 ----a-w- c:\windows\system32\sbbd.exe
2013-07-01 10:46 . 2013-07-11 18:17 -------- d-----w- c:\program files\Microsoft Silverlight
2013-07-01 10:46 . 2013-07-11 18:17 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-07-01 09:03 . 2013-07-01 09:03 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-07-01 08:52 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-07-01 08:51 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-06-30 22:01 . 2013-06-30 22:01 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-06-30 21:58 . 2012-08-23 15:09 3072 ----a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui
2013-06-30 21:55 . 2013-01-13 19:53 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-06-30 21:54 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2013-06-30 21:54 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2013-06-30 21:54 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll
2013-06-30 21:54 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-06-30 21:54 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-06-30 21:54 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys
2013-06-30 21:54 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll
2013-06-30 21:54 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2013-06-30 21:54 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2013-06-30 21:39 . 2013-06-30 21:39 -------- d-----w- c:\programdata\ASUS WebStorage
2013-06-30 16:12 . 2013-07-11 15:25 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-06-30 16:06 . 2012-06-02 05:48 95600 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-06-30 16:06 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-06-30 16:06 . 2013-04-10 06:01 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 16:06 . 2011-02-03 11:25 144384 ----a-w- c:\windows\system32\cdd.dll
2013-06-28 18:58 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2013-06-28 18:58 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2013-06-28 18:58 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2013-06-28 18:58 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2013-06-28 18:58 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll
2013-06-28 18:58 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2013-06-28 18:57 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-06-28 18:57 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-06-28 18:57 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-06-28 18:57 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-06-28 18:57 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-06-28 18:54 . 2012-07-04 22:16 73216 ----a-w- c:\windows\system32\netapi32.dll
2013-06-28 18:48 . 2013-03-19 06:04 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-06-28 18:48 . 2013-03-19 05:04 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-06-28 18:48 . 2013-03-19 05:46 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-06-28 18:48 . 2013-03-19 05:04 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-06-28 18:48 . 2013-03-19 03:06 112640 ----a-w- c:\windows\system32\smss.exe
2013-06-28 18:48 . 2013-03-19 04:47 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-06-27 21:47 . 2011-02-12 11:34 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2013-06-27 21:46 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2013-06-27 21:46 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2013-06-27 21:15 . 2013-03-19 05:53 48640 ----a-w- c:\windows\system32\wwanprotdim.dll
2013-06-27 21:15 . 2013-03-19 05:53 230400 ----a-w- c:\windows\system32\wwansvc.dll
2013-06-27 21:12 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2013-06-27 21:12 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2013-06-27 21:11 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-27 21:11 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-06-27 21:11 . 2012-10-09 18:17 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2013-06-27 21:11 . 2012-10-09 18:17 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2013-06-27 21:11 . 2012-10-09 17:40 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2013-06-27 21:11 . 2012-10-09 17:40 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
2013-06-27 21:11 . 2012-11-23 03:13 68608 ----a-w- c:\windows\system32\taskhost.exe
2013-06-27 20:58 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2013-06-27 20:58 . 2013-03-31 22:52 1887232 ----a-w- c:\windows\system32\d3d11.dll
2013-06-27 20:19 . 2012-04-07 12:31 3216384 ----a-w- c:\windows\system32\msi.dll
2013-06-27 20:19 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\SysWow64\msi.dll
2013-06-27 20:16 . 2011-06-16 05:49 199680 ----a-w- c:\windows\system32\xmllite.dll
2013-06-27 06:00 . 2013-06-27 06:00 -------- d-----w- C:\Boot
2013-06-27 05:09 . 2011-04-29 14:44 -------- d-----w- c:\users\Default\AppData\Local\Windows Live
2013-06-27 05:09 . 2011-04-29 14:43 -------- d-----w- c:\users\Default\AppData\Local\Adobe
2013-06-27 05:09 . 2011-04-29 14:35 -------- d-----w- c:\users\Default\AppData\Local\Broadcom
2013-06-27 05:09 . 2011-04-29 15:10 -------- d-----w- c:\users\Default\AppData\Roaming\ASUS WebStorage
2013-06-27 05:09 . 2011-04-29 14:23 -------- d-----w- c:\users\Default\AppData\Roaming\InstallShield
2013-06-26 21:38 . 2013-06-26 21:38 -------- d-----w- c:\windows\SysWow64\Wat
2013-06-26 21:38 . 2013-06-26 21:38 -------- d-----w- c:\windows\system32\Wat
2013-06-26 21:15 . 2012-07-26 07:48 2560 ----a-w- c:\windows\system32\drivers\hu-HU\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 05:05 2560 ----a-w- c:\windows\system32\drivers\pl-PL\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 04:47 2560 ----a-w- c:\windows\system32\drivers\en-US\wdf01000.sys.mui
2013-06-26 21:15 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-06-26 21:15 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-06-26 21:15 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-06-26 21:15 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-06-26 21:14 . 2013-06-28 20:56 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-26 21:14 . 2013-06-28 20:56 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-26 21:14 . 2013-06-26 21:14 -------- d-----w- c:\windows\system32\Macromed
2013-06-26 21:14 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-06-26 21:14 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-06-26 21:14 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-06-26 21:14 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-06-26 21:14 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-06-26 21:14 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-06-26 21:14 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-06-26 21:12 . 2011-04-22 22:15 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2013-06-26 21:12 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2013-06-26 21:12 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2013-06-26 21:11 . 2013-01-24 06:01 223752 ----a-w- c:\windows\system32\drivers\fvevol.sys
2013-06-26 21:11 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2013-06-26 21:11 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2013-06-26 21:08 . 2011-02-05 17:06 566208 ----a-w- c:\windows\system32\winresume.efi
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-26 20:18 . 2010-06-24 18:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2011-04-29 3058304]
"UCam_Menu"="c:\program files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"HotkeyMon"="AsusSender.exe" [2011-03-11 34728]
"HotkeyService"="AsusSender.exe" [2011-03-11 34728]
"SuperHybridEngine"="AsusSender.exe" [2011-03-11 34728]
"CapsHook"="AsusSender.exe" [2011-03-11 34728]
"Eee Docking"="c:\program files (x86)\ASUS\Eee Docking\Eee Docking.exe" [2011-01-06 414384]
"OOBESetup"="c:\program files (x86)\asus\OOBERegBackup\OOBERegBackup.exe" [2011-01-04 345088]
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2011-04-29 2018032]
"AVG_UI"="d:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-04-28 4408368]
"ConnectionCenter"="c:\program files (x86)\Citrix\ICA Client\concentr.exe" [2011-04-25 305088]
"ASUSWebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe /start [2013-6-30 549040]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-5-21 1127712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
R2 AVGIDSAgent;AVGIDSAgent;d:\program files (x86)\AVG\AVG2013\avgidsagent.exe;d:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x]
R3 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 DETECT PS2: ;DETECT PS2: ;c:\program files (x86)\ASUS\LiveUpdate\DetectSys.sys;c:\program files (x86)\ASUS\LiveUpdate\DetectSys.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys;c:\windows\SYSNATIVE\DRIVERS\ctxusbm.sys [x]
S1 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys;c:\windows\SYSNATIVE\DRIVERS\tmevtmgr.sys [x]
S2 AsusService;Asus Launcher Service;c:\windows\SysWOW64\AsusService.exe;c:\windows\SysWOW64\AsusService.exe [x]
S2 avgwd;AVG WatchDog;d:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;d:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TiMiniService;TiMiniService;c:\program files\Trend Micro\Titanium\TiMiniService.exe;c:\program files\Trend Micro\Titanium\TiMiniService.exe [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2011-05-25 07:09 227840 ----a-w- c:\program files (x86)\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2011-05-25 07:09 227840 ----a-w- c:\program files (x86)\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LiveUpdate"="AsusSender.exe" [2010-12-07 34728]
"VizorHtmlDialog.exe"="c:\program files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe" [2010-10-08 1123664]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2010-10-12 192520]
"Trend Micro Titanium"="c:\program files\Trend Micro\Titanium\VizorShortCut.exe" [2010-10-20 321872]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-11-01 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-11-01 385560]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-11-01 364056]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-08-24 11447912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
TCP: Interfaces\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynAsusAcpi - c:\program files (x86)\Synaptics\SynTP\SynAsusAcpi.exe
.
.
"ServiceDll"="%Systemroot%\System32\defragsvc.dll"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DETECT PS2: ]
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-07-12 14:53:48
ComboFix-quarantined-files.txt 2013-07-12 12:53
.
Před spuštěním: Volných bajtů: 68 421 935 104
Po spuštění: Volných bajtů: 68 300 111 872
.
- - End Of File - - E46D61C7029C069930DF4842EEB2774A
D41D8CD98F00B204E9800998ECF8427E
Přispějete na provoz fóra?