Zpomaleny internet
Napsal: 09 črc 2013 22:03
Ahoj, jiz nejakou dobu mam zpomaleny internet a nepomohl ani reimage systemoveho disku tohoto meho soukromeho notebooku. Obcas, kdyz zacnu pouzivat internet, tak se stane, ze se pretizi router a prestane komunikovat s providerem a musim ho vypojit ze zasuvky a znovu nechat zinicializovat. Jina zarizeni pripojena do teze site (sluzebni notebook) tyto problemy nevykazuji. Nize prikladam vypis z logu od RSIT.
P. S. Jeste chci dodat, ze antivirak AVG 2013 ani Spybot2.1 ani Norman Malware Cleaner nic nenasel. Jeste se mi stava, ze nejake stranky mam blokovane napr. www.teamcowboy.com nebo www.volleywood.net - respektive browser hlasi "stranka se neda zobrazit" (hlaska v IE). Na firemnim notebooku to vse jede, jak ma (pretizeni ani blokovani stranek neexistuje).
Logfile of random's system information tool 1.09 (written by random/random)
Run by Zbynek at 2013-07-09 22:58:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 63 GB (62%) free of 102 GB
Total RAM: 4086 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:58:05, on 9.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
D:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
D:\Program Files (x86)\FreeCommander\FreeCommander.exe
C:\Program Files\trend micro\Zbynek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\windows\AsScrPro.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini"
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\RunOnce: [Reboot] AsusSender.exe C:\Windows\Reboot.exe 60 (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://my.ppg.com/dana-cached/sc/Junip ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\SysWOW64\AsusService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13513 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=65b13346-80cd-4054-9d1e-37089096075f /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\ef66366a-96ec-4f71-abf9-195f0560880c-1ec-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\WLANExt.exe 36369424
\??\C:\windows\system32\conhost.exe "1453013012-104234647714118416041390524143-8636712502025140877-1519739594-981075553
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\AsusService.exe
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Trend Micro\Titanium\TiMiniService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe"
\??\C:\windows\system32\conhost.exe "1291836822-1666835141-1112409334-12922935871649614087-12495062885949090781550574269
WLIDSvcM.exe 2220
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe" auto
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe" autorun
"C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"D:\Program Files (x86)\Opera\opera.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:267521 /prefetch:2
C:\windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe -Embedding
"C:\windows\System32\MsSpellCheckingFacility.exe" -Embedding
"D:\Program Files (x86)\FreeCommander\FreeCommander.exe"
"D:\Install\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17 264528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"LiveUpdate"=AsusSender.exe C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe auto []
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 192520]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 321872]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-11-01 165912]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-11-01 385560]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-11-01 364056]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-08-24 11447912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"=C:\windows\AsScrPro.exe [2011-04-29 3058304]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"CapsHook"=AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe [2011-01-07 414384]
"OOBESetup"=C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe [2011-01-04 345088]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-29 2018032]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-04-29 4408368]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2011-04-25 305088]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-10-24 261120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-08 15:12:43 ----A---- C:\AdwCleaner[R2].txt
2013-07-08 12:42:14 ----A---- C:\AdwCleaner[R1].txt
2013-07-08 12:36:47 ----D---- C:\rsit
2013-07-05 11:18:39 ----D---- C:\Users\Zbynek\AppData\Roaming\XnView
2013-07-01 13:54:23 ----A---- C:\windows\wininit.ini
2013-07-01 13:27:06 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:59:59 ----D---- C:\Users\Zbynek\AppData\Roaming\LavasoftStatistics
2013-07-01 12:56:44 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-07-01 12:56:43 ----A---- C:\windows\system32\sbbd.exe
2013-07-01 12:56:39 ----D---- C:\Users\Zbynek\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 12:46:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-01 12:46:36 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-01 11:03:57 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-01 10:52:00 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-07-01 10:51:59 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-07-01 00:02:03 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-07-01 00:02:03 ----A---- C:\windows\system32\elshyph.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\occache.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\url.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\wininet.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\urlmon.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-01 00:01:57 ----A---- C:\windows\system32\msrating.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\msls31.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\iertutil.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\url.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\jsproxy.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iesetup.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iernonce.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iedkcs32.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dat
2013-07-01 00:01:56 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-01 00:01:56 ----A---- C:\windows\system32\icardie.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtrans.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtmsft.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\wextract.exe
2013-07-01 00:01:55 ----A---- C:\windows\system32\webcheck.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\vbscript.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\mshtmled.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\msfeeds.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\licmgr10.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\inseng.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\iexpress.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\pngfilt.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\occache.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshtml.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshta.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\msfeedsbs.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\jscript.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\imgutil.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\ieUnatt.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\iepeers.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\mshtmler.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\msfeedssync.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\jscript9.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\ieui.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\iesysprep.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\IEAdvpack.dll
2013-07-01 00:01:52 ----A---- C:\windows\system32\ieframe.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-30 23:58:31 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbGD.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\aaclient.dll
2013-06-30 23:58:26 ----A---- C:\windows\SYSWOW64\mstsc.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\wksprt.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\TSWbPrxy.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpudd.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpendp_winip.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\mstsc.exe
2013-06-30 23:58:25 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-06-30 23:58:25 ----A---- C:\windows\system32\rdpcorets.dll
2013-06-30 23:58:24 ----A---- C:\windows\system32\mstscax.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-06-30 23:55:25 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-06-30 23:55:25 ----A---- C:\windows\system32\WMPhoto.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10_1.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10_1core.dll
2013-06-30 23:55:14 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\d3d10.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\FntCache.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\DWrite.dll
2013-06-30 23:55:12 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-06-30 23:55:12 ----A---- C:\windows\system32\d2d1.dll
2013-06-30 23:54:16 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-06-30 23:54:16 ----A---- C:\windows\system32\qdvd.dll
2013-06-30 23:54:13 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-06-30 23:54:13 ----A---- C:\windows\system32\schannel.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\lsasrv.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\cng.sys
2013-06-30 23:39:49 ----D---- C:\ProgramData\ASUS WebStorage
2013-06-30 18:12:58 ----A---- C:\windows\system32\MRT.exe
2013-06-30 18:08:52 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-06-30 18:08:49 ----A---- C:\windows\system32\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\system32\drivers\bthport.sys
2013-06-30 18:08:47 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\certutil.exe
2013-06-30 18:08:39 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-06-30 18:08:39 ----A---- C:\windows\system32\certenc.dll
2013-06-30 18:08:25 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-06-30 18:08:24 ----A---- C:\windows\system32\cdosys.dll
2013-06-30 18:08:15 ----A---- C:\windows\system32\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\SYSWOW64\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\system32\fsutil.exe
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\storport.sys
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-06-30 18:08:13 ----A---- C:\windows\SYSWOW64\fsutil.exe
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-06-30 18:08:12 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-06-30 18:08:01 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbport.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbd.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-06-30 18:06:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-06-30 18:06:49 ----A---- C:\windows\system32\win32k.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\cdd.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmfd.dll
2013-06-28 20:57:14 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-06-28 20:57:13 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-06-28 20:57:13 ----A---- C:\windows\system32\wmi.dll
2013-06-28 20:55:18 ----A---- C:\windows\system32\winsrv.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-06-28 20:55:14 ----A---- C:\windows\SYSWOW64\user.exe
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml6.dll
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml3.dll
2013-06-28 20:55:08 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-06-28 20:55:07 ----A---- C:\windows\system32\msxml3r.dll
2013-06-28 20:55:06 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-06-28 20:55:06 ----A---- C:\windows\system32\msvcrt.dll
2013-06-28 20:55:05 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-06-28 20:55:04 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-06-28 20:55:03 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-06-28 20:55:03 ----A---- C:\windows\system32\ncrypt.dll
2013-06-28 20:55:01 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browser.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browcli.dll
2013-06-28 20:54:55 ----A---- C:\windows\system32\localspl.dll
2013-06-28 20:54:53 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-06-28 20:54:53 ----A---- C:\windows\system32\synceng.dll
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\rdpwsx.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\dpnet.dll
2013-06-28 20:54:46 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-06-28 20:54:45 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-06-28 20:54:45 ----A---- C:\windows\system32\kerberos.dll
2013-06-28 20:48:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-06-28 20:48:09 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-06-28 20:48:08 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\smss.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\csrsrv.dll
2013-06-28 20:48:07 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-06-27 23:48:18 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2013-06-27 23:48:18 ----A---- C:\windows\system32\CPFilters.dll
2013-06-27 23:48:17 ----A---- C:\windows\SYSWOW64\sbe.dll
2013-06-27 23:48:17 ----A---- C:\windows\system32\sbe.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccu32.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbccp32.dll
2013-06-27 23:48:10 ----A---- C:\windows\SYSWOW64\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\lsass.exe
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspisrv.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspicli.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\secur32.dll
2013-06-27 23:48:08 ----A---- C:\windows\system32\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnsrslvr.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnscacheugc.exe
2013-06-27 23:48:05 ----A---- C:\windows\system32\psisdecd.dll
2013-06-27 23:48:04 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2013-06-27 23:48:02 ----A---- C:\windows\system32\mfc42u.dll
2013-06-27 23:48:01 ----A---- C:\windows\SYSWOW64\mfc42.dll
2013-06-27 23:48:01 ----A---- C:\windows\system32\mfc42.dll
2013-06-27 23:48:00 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2013-06-27 23:47:59 ----A---- C:\windows\system32\FXSCOVER.exe
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv2.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv.sys
2013-06-27 23:47:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-06-27 23:47:55 ----A---- C:\windows\system32\ntdll.dll
2013-06-27 23:47:53 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-06-27 23:47:53 ----A---- C:\windows\system32\quartz.dll
2013-06-27 23:47:50 ----A---- C:\windows\system32\drivers\bowser.sys
2013-06-27 23:47:48 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleacc.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleacc.dll
2013-06-27 23:47:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-06-27 23:47:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2013-06-27 23:47:43 ----A---- C:\windows\system32\inetcomm.dll
2013-06-27 23:47:42 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-06-27 23:47:42 ----A---- C:\windows\system32\EncDec.dll
2013-06-27 23:47:40 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-06-27 23:47:40 ----A---- C:\windows\system32\rdpcore.dll
2013-06-27 23:47:39 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-06-27 23:46:39 ----A---- C:\windows\SYSWOW64\packager.dll
2013-06-27 23:46:39 ----A---- C:\windows\system32\packager.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwansvc.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwanprotdim.dll
2013-06-27 23:13:41 ----A---- C:\windows\system32\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-06-27 23:13:40 ----A---- C:\windows\system32\gameux.dll
2013-06-27 23:13:08 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-06-27 23:13:08 ----A---- C:\windows\system32\usp10.dll
2013-06-27 23:12:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-06-27 23:12:31 ----A---- C:\windows\system32\tzres.dll
2013-06-27 23:11:46 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-06-27 23:11:46 ----A---- C:\windows\system32\cryptdlg.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcore6.dll
2013-06-27 23:11:22 ----A---- C:\windows\system32\taskhost.exe
2013-06-27 22:58:16 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-06-27 22:58:16 ----A---- C:\windows\system32\d3d11.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\nlasvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\iphlpsvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\drivers\netio.sys
2013-06-27 22:20:18 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\nlaapi.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\ndis.sys
2013-06-27 22:20:12 ----A---- C:\windows\system32\profsvc.dll
2013-06-27 22:20:11 ----A---- C:\windows\system32\OxpsConverter.exe
2013-06-27 22:20:08 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-06-27 22:20:08 ----A---- C:\windows\system32\wintrust.dll
2013-06-27 22:19:38 ----A---- C:\windows\system32\msi.dll
2013-06-27 22:19:37 ----A---- C:\windows\SYSWOW64\msi.dll
2013-06-27 22:17:52 ----A---- C:\windows\system32\KernelBase.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\wow64win.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\kernel32.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\conhost.exe
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----A---- C:\windows\system32\ntvdm64.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----A---- C:\windows\system32\wow64.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----A---- C:\windows\system32\wow64cpu.dll
2013-06-27 22:17:17 ----A---- C:\windows\system32\shell32.dll
2013-06-27 22:17:15 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\consent.exe
2013-06-27 22:17:14 ----A---- C:\windows\system32\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\appinfo.dll
2013-06-27 22:16:58 ----A---- C:\windows\SYSWOW64\xmllite.dll
2013-06-27 22:16:58 ----A---- C:\windows\system32\xmllite.dll
2013-06-27 22:16:54 ----A---- C:\windows\SYSWOW64\explorer.exe
2013-06-27 22:16:54 ----A---- C:\windows\explorer.exe
2013-06-27 22:16:51 ----A---- C:\windows\system32\tquery.dll
2013-06-27 22:16:51 ----A---- C:\windows\system32\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\tquery.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\mssph.dll
2013-06-27 22:16:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\system32\mssph.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\msscntrs.dll
2013-06-27 22:16:47 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2013-06-27 22:16:38 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-06-27 22:16:38 ----A---- C:\windows\system32\ntshrui.dll
2013-06-27 22:16:35 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-06-27 22:16:35 ----A---- C:\windows\system32\poqexec.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\drvinst.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devrtl.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devobj.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2013-06-27 22:16:07 ----A---- C:\windows\system32\umpnpmgr.dll
2013-06-27 22:16:05 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-06-27 22:16:05 ----A---- C:\windows\system32\srcore.dll
2013-06-27 08:00:30 ----SHD---- C:\Boot
2013-06-27 07:04:22 ----D---- C:\windows\SoftwareDistribution
2013-06-27 07:01:21 ----ASH---- C:\pagefile.sys
2013-06-27 07:01:21 ----ASH---- C:\hiberfil.sys
2013-06-27 07:01:20 ----SHD---- C:\System Volume Information
2013-06-26 23:38:56 ----D---- C:\windows\SYSWOW64\Wat
2013-06-26 23:38:56 ----D---- C:\windows\system32\Wat
2013-06-26 23:15:50 ----A---- C:\windows\system32\Wdfres.dll
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-06-26 23:15:24 ----A---- C:\windows\system32\browserchoice.exe
2013-06-26 23:14:40 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-06-26 23:14:34 ----D---- C:\windows\system32\Macromed
2013-06-26 23:14:05 ----A---- C:\windows\system32\WUDFSvc.dll
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-06-26 23:14:04 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFHost.exe
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-06-26 23:14:02 ----A---- C:\windows\system32\WUDFx.dll
2013-06-26 23:12:27 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-06-26 23:12:26 ----A---- C:\windows\SYSWOW64\prevhost.exe
2013-06-26 23:12:26 ----A---- C:\windows\system32\prevhost.exe
2013-06-26 23:11:25 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-06-26 23:11:23 ----A---- C:\windows\system32\spoolsv.exe
2013-06-26 23:11:23 ----A---- C:\windows\splwow64.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winresume.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winload.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdusb.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdcom.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kd1394.dll
2013-06-26 22:53:07 ----D---- C:\ProgramData\Citrix
2013-06-26 22:52:51 ----D---- C:\Users\Zbynek\AppData\Roaming\ICAClient
2013-06-26 22:52:44 ----D---- C:\Program Files (x86)\Citrix
2013-06-26 22:50:13 ----D---- C:\Users\Zbynek\AppData\Roaming\Juniper Networks
2013-06-26 22:46:01 ----A---- C:\windows\system32\wups2.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wucltux.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuaueng.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuauclt.exe
2013-06-26 22:45:48 ----A---- C:\windows\system32\wups.dll
2013-06-26 22:45:48 ----A---- C:\windows\system32\wudriver.dll
2013-06-26 22:45:47 ----A---- C:\windows\system32\wuapi.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuwebv.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuapp.exe
2013-06-26 22:41:42 ----D---- C:\Users\Zbynek\AppData\Roaming\AVG2013
2013-06-26 22:40:58 ----D---- C:\Users\Zbynek\AppData\Roaming\TuneUp Software
2013-06-26 22:40:45 ----HD---- C:\$AVG
2013-06-26 22:40:45 ----D---- C:\ProgramData\AVG2013
2013-06-26 22:35:08 ----HD---- C:\ProgramData\Common Files
2013-06-26 22:35:08 ----D---- C:\ProgramData\MFAData
2013-06-26 22:30:51 ----D---- C:\Users\Zbynek\AppData\Roaming\Opera
2013-06-26 22:24:11 ----SHD---- C:\$RECYCLE.BIN
2013-06-26 22:21:07 ----A---- C:\windows\Language.ini
2013-06-26 22:20:45 ----D---- C:\windows\ConfigSetRoot
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTKHDRC.dat
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-06-26 22:20:34 ----A---- C:\windows\system32\AsusScr_1215N_ENG.scr
2013-06-26 22:20:12 ----D---- C:\Program Files (x86)\ASM104xUSB3
2013-06-26 22:19:49 ----D---- C:\windows\system32\SRSLabs
2013-06-26 22:19:48 ----D---- C:\Program Files\Realtek
2013-06-26 22:19:47 ----D---- C:\windows\SYSWOW64\RTCOM
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\SamSfPa.dat
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\rtkhdaud.dat
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtPgEx64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtlCPAPI64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkCfg64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkAPO64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkApi64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEP64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEL64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEG64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEED64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTCOM64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DHT64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DAA64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RCoInst64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\drivers\RTKVHD64.sys
2013-06-26 22:19:20 ----A---- C:\windows\system32\FMAPO64.dll
2013-06-26 22:19:19 ----D---- C:\Program Files (x86)\Realtek
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAR64.dll
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAC64.dll
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\Temp
2013-06-26 22:19:17 ----A---- C:\windows\RtlExUpd.dll
2013-06-26 22:17:41 ----SD---- C:\Users\Zbynek\AppData\Roaming\Microsoft
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Macromedia
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\InstallShield
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Identities
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\ASUS WebStorage
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Adobe
2013-06-26 22:14:47 ----SHD---- C:\Recovery
======List of files/folders modified in the last 1 month======
2013-07-09 22:58:03 ----D---- C:\Program Files\Trend Micro
2013-07-09 22:53:34 ----D---- C:\windows\Temp
2013-07-09 21:53:15 ----D---- C:\ProgramData\NVIDIA
2013-07-09 20:00:25 ----D---- C:\windows\system32\config
2013-07-09 19:49:19 ----SHD---- C:\windows\Installer
2013-07-07 22:39:29 ----D---- C:\windows\Microsoft.NET
2013-07-07 22:32:32 ----RSD---- C:\windows\assembly
2013-07-05 11:06:48 ----D---- C:\windows\System32
2013-07-05 11:06:48 ----D---- C:\windows\inf
2013-07-05 11:06:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-01 13:54:29 ----SD---- C:\ProgramData\Microsoft
2013-07-01 13:54:23 ----D---- C:\Windows
2013-07-01 13:27:12 ----D---- C:\windows\system32\Tasks
2013-07-01 13:27:06 ----HD---- C:\ProgramData
2013-07-01 13:21:59 ----AD---- C:\windows\system32\drivers
2013-07-01 13:21:44 ----D---- C:\windows\winsxs
2013-07-01 12:50:35 ----D---- C:\windows\SysWOW64
2013-07-01 12:46:36 ----RD---- C:\Program Files (x86)
2013-07-01 12:46:36 ----RD---- C:\Program Files
2013-07-01 11:11:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-01 11:11:46 ----D---- C:\windows\system32\cs-CZ
2013-07-01 11:03:58 ----D---- C:\windows\SYSWOW64\en-US
2013-07-01 11:03:58 ----D---- C:\windows\system32\en-US
2013-07-01 10:50:57 ----D---- C:\windows\system32\catroot
2013-07-01 10:50:56 ----D---- C:\windows\system32\catroot2
2013-07-01 10:07:06 ----D---- C:\windows\SYSWOW64\sk-SK
2013-07-01 10:07:06 ----D---- C:\windows\system32\sk-SK
2013-07-01 10:07:06 ----D---- C:\Program Files\Internet Explorer
2013-07-01 10:07:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-01 10:07:05 ----D---- C:\windows\SYSWOW64\pl-PL
2013-07-01 10:07:04 ----D---- C:\windows\SYSWOW64\hu-HU
2013-07-01 10:07:04 ----D---- C:\windows\system32\pl-PL
2013-07-01 10:07:03 ----D---- C:\windows\system32\hu-HU
2013-07-01 10:06:57 ----D---- C:\windows\SYSWOW64\migration
2013-07-01 10:06:53 ----D---- C:\windows\PolicyDefinitions
2013-07-01 10:06:52 ----D---- C:\windows\system32\migration
2013-07-01 10:06:46 ----D---- C:\windows\SYSWOW64\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\drivers\en-US
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-PT
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-BR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\ko-KR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\it-IT
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-TW
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-HK
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-CN
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\tr-TR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\sv-SE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ru-RU
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nl-NL
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nb-NO
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ja-JP
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fr-FR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fi-FI
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\es-ES
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\el-GR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\de-DE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\da-DK
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-PT
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-BR
2013-07-01 10:06:39 ----D---- C:\windows\system32\it-IT
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-TW
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-HK
2013-07-01 10:06:38 ----D---- C:\windows\system32\tr-TR
2013-07-01 10:06:38 ----D---- C:\windows\system32\sv-SE
2013-07-01 10:06:38 ----D---- C:\windows\system32\nl-NL
2013-07-01 10:06:38 ----D---- C:\windows\system32\ko-KR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fr-FR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fi-FI
2013-07-01 10:06:38 ----D---- C:\windows\system32\es-ES
2013-07-01 10:06:38 ----D---- C:\windows\system32\el-GR
2013-07-01 10:06:38 ----D---- C:\windows\system32\de-DE
2013-07-01 10:06:37 ----D---- C:\windows\system32\zh-CN
2013-07-01 10:06:37 ----D---- C:\windows\system32\ru-RU
2013-07-01 10:06:37 ----D---- C:\windows\system32\nb-NO
2013-07-01 10:06:37 ----D---- C:\windows\system32\ja-JP
2013-07-01 10:06:37 ----D---- C:\windows\system32\da-DK
2013-07-01 10:06:32 ----D---- C:\windows\system32\DriverStore
2013-07-01 10:06:31 ----D---- C:\windows\SYSWOW64\drivers
2013-07-01 10:04:34 ----D---- C:\windows\Logs
2013-06-30 23:47:00 ----D---- C:\windows\system32\wdi
2013-06-30 23:42:14 ----D---- C:\AsusVibeData
2013-06-30 23:42:06 ----D---- C:\Program Files (x86)\Asus
2013-06-30 18:13:00 ----D---- C:\windows\debug
2013-06-30 15:31:00 ----D---- C:\windows\AppPatch
2013-06-30 15:30:56 ----D---- C:\Program Files\Windows Journal
2013-06-27 23:52:56 ----D---- C:\windows\ehome
2013-06-27 23:52:56 ----D---- C:\Program Files\Common Files\System
2013-06-27 23:28:42 ----RSD---- C:\windows\Fonts
2013-06-27 22:57:12 ----D---- C:\windows\Prefetch
2013-06-27 22:18:49 ----D---- C:\windows\system32\LogFiles
2013-06-27 07:13:45 ----D---- C:\windows\rescache
2013-06-27 07:13:21 ----D---- C:\windows\SYSWOW64\NV
2013-06-27 07:13:21 ----D---- C:\windows\system32\NV
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\pl-PL
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\hu-HU
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\cs-CZ
2013-06-26 23:38:53 ----D---- C:\windows\system32\Boot
2013-06-26 22:50:19 ----D---- C:\windows\Downloaded Program Files
2013-06-26 22:38:27 ----D---- C:\windows\system32\restore
2013-06-26 22:32:50 ----D---- C:\windows\system32\CodeIntegrity
2013-06-26 22:21:11 ----D---- C:\ProgramData\Trend Micro
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-26 22:17:40 ----RD---- C:\Users
2013-06-26 22:14:49 ----D---- C:\windows\panther
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-07-01 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-06 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\windows\SysWow64\drivers\AsIO.sys [2010-06-28 13440]
R1 AsUpIO;AsUpIO; C:\windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952]
R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2011-04-25 87600]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 90704]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 144464]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 105552]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-05-21 341032]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-05-21 102440]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-05-21 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-05-21 21544]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-10-24 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-08-24 2472680]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-07-29 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 DETECT PS2: ;DETECT PS2: ; \??\C:\Program Files (x86)\ASUS\LiveUpdate\DetectSys.sys [2010-05-27 6144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AsusService;Asus Launcher Service; C:\windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-05-14 4937264]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-06 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 267480]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-06-26 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
P. S. Jeste chci dodat, ze antivirak AVG 2013 ani Spybot2.1 ani Norman Malware Cleaner nic nenasel. Jeste se mi stava, ze nejake stranky mam blokovane napr. www.teamcowboy.com nebo www.volleywood.net - respektive browser hlasi "stranka se neda zobrazit" (hlaska v IE). Na firemnim notebooku to vse jede, jak ma (pretizeni ani blokovani stranek neexistuje).
Logfile of random's system information tool 1.09 (written by random/random)
Run by Zbynek at 2013-07-09 22:58:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 63 GB (62%) free of 102 GB
Total RAM: 4086 MB (52% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:58:05, on 9.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal
Running processes:
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe
D:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
D:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
D:\Program Files (x86)\FreeCommander\FreeCommander.exe
C:\Program Files\trend micro\Zbynek.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\windows\AsScrPro.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [OOBESetup] C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe /restore -"C:\Program Files (x86)\asus\OOBERegBackup\OOBEReg.ini"
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [AVG_UI] "D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-173431817-1910860556-1384141477-1000\..\RunOnce: [Reboot] AsusSender.exe C:\Windows\Reboot.exe 60 (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://my.ppg.com/dana-cached/sc/Junip ... Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B9958CE-25D2-47C7-A081-606B85DCF192}: NameServer = 147.32.192.250,194.149.105.18
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A717FFA-BF47-4E78-91C3-D89596774B32}: NameServer = 147.32.192.250,194.149.105.18
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\SysWOW64\AsusService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TiMiniService - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\TiMiniService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13513 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
D:\PROGRA~1\AVG\AVG2013\avgrsa.exe /boot
D:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=65b13346-80cd-4054-9d1e-37089096075f /coreSdkOptions=4382 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\ef66366a-96ec-4f71-abf9-195f0560880c-1ec-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="D:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\system32\WLANExt.exe 36369424
\??\C:\windows\system32\conhost.exe "1453013012-104234647714118416041390524143-8636712502025140877-1519739594-981075553
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\AsusService.exe
"D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Trend Micro\Titanium\TiMiniService.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Trend Micro\Titanium\TiResumeSrv.exe"
\??\C:\windows\system32\conhost.exe "1291836822-1666835141-1112409334-12922935871649614087-12495062885949090781550574269
WLIDSvcM.exe 2220
"D:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"
"D:\Program Files (x86)\AVG\AVG2013\avgemca.exe"
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe" auto
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe"
"C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe"
"C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Asus\Eee Docking\Eee Docking.exe" autorun
"C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
"D:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"D:\Program Files (x86)\Opera\opera.exe"
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe"
"C:\Program Files\Internet Explorer\IEXPLORE.EXE"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:267521 /prefetch:2
C:\windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe -Embedding
"C:\windows\System32\MsSpellCheckingFacility.exe" -Embedding
"D:\Program Files (x86)\FreeCommander\FreeCommander.exe"
"D:\Install\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17 264528]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17 234832]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-19 1886504]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-11-19 92456]
"LiveUpdate"=AsusSender.exe C:\Program Files (x86)\Asus\LiveUpdate\LiveUpdate.exe auto []
"VizorHtmlDialog.exe"=C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [2010-10-08 1123664]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2010-10-12 192520]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [2010-10-20 321872]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-11-01 165912]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-11-01 385560]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-11-01 364056]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-08-24 11447912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ASUS Screen Saver Protector"=C:\windows\AsScrPro.exe [2011-04-29 3058304]
"UCam_Menu"=C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]
"HotkeyMon"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotKeyMon.exe []
"HotkeyService"=AsusSender.exe C:\Program Files (x86)\ASUS\HotkeyService\HotkeyService.exe []
"SuperHybridEngine"=AsusSender.exe C:\Program Files (x86)\ASUS\SHE\SuperHybridEngine.exe []
"CapsHook"=AsusSender.exe C:\Program Files (x86)\ASUS\CapsHook\CapsHook.exe []
"Eee Docking"=C:\Program Files (x86)\ASUS\Eee Docking\Eee Docking.exe [2011-01-07 414384]
"OOBESetup"=C:\Program Files (x86)\asus\OOBERegBackup\OOBERegBackup.exe [2011-01-04 345088]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-29 2018032]
"AVG_UI"=D:\Program Files (x86)\AVG\AVG2013\avgui.exe [2013-04-29 4408368]
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2011-04-25 305088]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [2011-07-29 737104]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-10-24 261120]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-08 15:12:43 ----A---- C:\AdwCleaner[R2].txt
2013-07-08 12:42:14 ----A---- C:\AdwCleaner[R1].txt
2013-07-08 12:36:47 ----D---- C:\rsit
2013-07-05 11:18:39 ----D---- C:\Users\Zbynek\AppData\Roaming\XnView
2013-07-01 13:54:23 ----A---- C:\windows\wininit.ini
2013-07-01 13:27:06 ----D---- C:\ProgramData\Spybot - Search & Destroy
2013-07-01 12:59:59 ----D---- C:\Users\Zbynek\AppData\Roaming\LavasoftStatistics
2013-07-01 12:56:44 ----A---- C:\windows\system32\drivers\gfibto.sys
2013-07-01 12:56:43 ----A---- C:\windows\system32\sbbd.exe
2013-07-01 12:56:39 ----D---- C:\Users\Zbynek\AppData\Roaming\Ad-Aware Antivirus
2013-07-01 12:46:36 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-01 12:46:36 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-07-01 11:03:57 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-07-01 10:52:00 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-07-01 10:51:59 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-07-01 00:02:03 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-07-01 00:02:03 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-07-01 00:02:03 ----A---- C:\windows\system32\elshyph.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-07-01 00:02:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\occache.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-01 00:02:01 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-07-01 00:02:00 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-01 00:01:59 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\url.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-07-01 00:01:58 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\wininet.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\urlmon.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-01 00:01:57 ----A---- C:\windows\system32\msrating.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\msls31.dll
2013-07-01 00:01:57 ----A---- C:\windows\system32\iertutil.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\url.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\jsproxy.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iesetup.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iernonce.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\iedkcs32.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\ieapfltr.dat
2013-07-01 00:01:56 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-01 00:01:56 ----A---- C:\windows\system32\icardie.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtrans.dll
2013-07-01 00:01:56 ----A---- C:\windows\system32\dxtmsft.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\wextract.exe
2013-07-01 00:01:55 ----A---- C:\windows\system32\webcheck.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\vbscript.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\mshtmled.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\msfeeds.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\licmgr10.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\inseng.dll
2013-07-01 00:01:55 ----A---- C:\windows\system32\iexpress.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\pngfilt.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\occache.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshtml.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\mshta.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\msfeedsbs.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\jscript.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\imgutil.dll
2013-07-01 00:01:54 ----A---- C:\windows\system32\ieUnatt.exe
2013-07-01 00:01:54 ----A---- C:\windows\system32\iepeers.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\mshtmler.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\msfeedssync.exe
2013-07-01 00:01:53 ----A---- C:\windows\system32\jscript9.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\ieui.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\iesysprep.dll
2013-07-01 00:01:53 ----A---- C:\windows\system32\IEAdvpack.dll
2013-07-01 00:01:52 ----A---- C:\windows\system32\ieframe.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-06-30 23:58:31 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-06-30 23:58:31 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbGD.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2013-06-30 23:58:29 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\wksprtPS.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\tsgqec.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\MsRdpWebAccess.dll
2013-06-30 23:58:27 ----A---- C:\windows\system32\aaclient.dll
2013-06-30 23:58:26 ----A---- C:\windows\SYSWOW64\mstsc.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\wksprt.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\TSWbPrxy.exe
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpudd.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\rdpendp_winip.dll
2013-06-30 23:58:26 ----A---- C:\windows\system32\mstsc.exe
2013-06-30 23:58:25 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-06-30 23:58:25 ----A---- C:\windows\system32\rdpcorets.dll
2013-06-30 23:58:24 ----A---- C:\windows\system32\mstscax.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\UIAnimation.dll
2013-06-30 23:55:31 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-06-30 23:55:25 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-06-30 23:55:25 ----A---- C:\windows\system32\WMPhoto.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-06-30 23:55:18 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10warp.dll
2013-06-30 23:55:17 ----A---- C:\windows\system32\d3d10_1.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-06-30 23:55:16 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-06-30 23:55:16 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-06-30 23:55:15 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\dxgi.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10level9.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10core.dll
2013-06-30 23:55:15 ----A---- C:\windows\system32\d3d10_1core.dll
2013-06-30 23:55:14 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\XpsPrint.dll
2013-06-30 23:55:14 ----A---- C:\windows\system32\d3d10.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\FntCache.dll
2013-06-30 23:55:13 ----A---- C:\windows\system32\DWrite.dll
2013-06-30 23:55:12 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-06-30 23:55:12 ----A---- C:\windows\system32\d2d1.dll
2013-06-30 23:54:16 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-06-30 23:54:16 ----A---- C:\windows\system32\qdvd.dll
2013-06-30 23:54:13 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-06-30 23:54:13 ----A---- C:\windows\system32\schannel.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-06-30 23:54:12 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\lsasrv.dll
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-06-30 23:54:12 ----A---- C:\windows\system32\drivers\cng.sys
2013-06-30 23:39:49 ----D---- C:\ProgramData\ASUS WebStorage
2013-06-30 18:12:58 ----A---- C:\windows\system32\MRT.exe
2013-06-30 18:08:52 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-06-30 18:08:50 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-06-30 18:08:49 ----A---- C:\windows\system32\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-06-30 18:08:48 ----A---- C:\windows\system32\drivers\bthport.sys
2013-06-30 18:08:47 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptsvc.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\cryptnet.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\crypt32.dll
2013-06-30 18:08:40 ----A---- C:\windows\system32\certutil.exe
2013-06-30 18:08:39 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-06-30 18:08:39 ----A---- C:\windows\system32\certenc.dll
2013-06-30 18:08:25 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-06-30 18:08:24 ----A---- C:\windows\system32\cdosys.dll
2013-06-30 18:08:15 ----A---- C:\windows\system32\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\SYSWOW64\esent.dll
2013-06-30 18:08:14 ----A---- C:\windows\system32\fsutil.exe
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\storport.sys
2013-06-30 18:08:14 ----A---- C:\windows\system32\drivers\iaStorV.sys
2013-06-30 18:08:13 ----A---- C:\windows\SYSWOW64\fsutil.exe
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvstor.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\nvraid.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdxata.sys
2013-06-30 18:08:13 ----A---- C:\windows\system32\drivers\amdsata.sys
2013-06-30 18:08:12 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2013-06-30 18:08:01 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbport.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbd.sys
2013-06-30 18:08:00 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-06-30 18:06:50 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-06-30 18:06:49 ----A---- C:\windows\system32\win32k.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-06-30 18:06:47 ----A---- C:\windows\system32\cdd.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\fontsub.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmlib.dll
2013-06-28 20:58:09 ----A---- C:\windows\system32\atmfd.dll
2013-06-28 20:57:14 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\imagehlp.dll
2013-06-28 20:57:14 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-06-28 20:57:13 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-06-28 20:57:13 ----A---- C:\windows\system32\wmi.dll
2013-06-28 20:55:18 ----A---- C:\windows\system32\winsrv.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-06-28 20:55:17 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-06-28 20:55:14 ----A---- C:\windows\SYSWOW64\user.exe
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml6.dll
2013-06-28 20:55:09 ----A---- C:\windows\system32\msxml3.dll
2013-06-28 20:55:08 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-06-28 20:55:07 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-06-28 20:55:07 ----A---- C:\windows\system32\msxml3r.dll
2013-06-28 20:55:06 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-06-28 20:55:06 ----A---- C:\windows\system32\msvcrt.dll
2013-06-28 20:55:05 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-06-28 20:55:04 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-06-28 20:55:03 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-06-28 20:55:03 ----A---- C:\windows\system32\ncrypt.dll
2013-06-28 20:55:01 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\netapi32.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browser.dll
2013-06-28 20:54:56 ----A---- C:\windows\system32\browcli.dll
2013-06-28 20:54:55 ----A---- C:\windows\system32\localspl.dll
2013-06-28 20:54:53 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-06-28 20:54:53 ----A---- C:\windows\system32\synceng.dll
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-06-28 20:54:48 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\rdpwsx.dll
2013-06-28 20:54:47 ----A---- C:\windows\system32\dpnet.dll
2013-06-28 20:54:46 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-06-28 20:54:45 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-06-28 20:54:45 ----A---- C:\windows\system32\kerberos.dll
2013-06-28 20:48:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-06-28 20:48:09 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-06-28 20:48:08 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\smss.exe
2013-06-28 20:48:08 ----A---- C:\windows\system32\csrsrv.dll
2013-06-28 20:48:07 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-06-27 23:48:18 ----A---- C:\windows\SYSWOW64\CPFilters.dll
2013-06-27 23:48:18 ----A---- C:\windows\system32\CPFilters.dll
2013-06-27 23:48:17 ----A---- C:\windows\SYSWOW64\sbe.dll
2013-06-27 23:48:17 ----A---- C:\windows\system32\sbe.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccu32.dll
2013-06-27 23:48:15 ----A---- C:\windows\system32\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbcjt32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccu32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccr32.dll
2013-06-27 23:48:14 ----A---- C:\windows\SYSWOW64\odbccp32.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbctrac.dll
2013-06-27 23:48:14 ----A---- C:\windows\system32\odbccp32.dll
2013-06-27 23:48:10 ----A---- C:\windows\SYSWOW64\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\webio.dll
2013-06-27 23:48:10 ----A---- C:\windows\system32\lsass.exe
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspisrv.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\sspicli.dll
2013-06-27 23:48:09 ----A---- C:\windows\system32\secur32.dll
2013-06-27 23:48:08 ----A---- C:\windows\system32\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnscacheugc.exe
2013-06-27 23:48:07 ----A---- C:\windows\SYSWOW64\dnsapi.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnsrslvr.dll
2013-06-27 23:48:07 ----A---- C:\windows\system32\dnscacheugc.exe
2013-06-27 23:48:05 ----A---- C:\windows\system32\psisdecd.dll
2013-06-27 23:48:04 ----A---- C:\windows\SYSWOW64\psisdecd.dll
2013-06-27 23:48:02 ----A---- C:\windows\system32\mfc42u.dll
2013-06-27 23:48:01 ----A---- C:\windows\SYSWOW64\mfc42.dll
2013-06-27 23:48:01 ----A---- C:\windows\system32\mfc42.dll
2013-06-27 23:48:00 ----A---- C:\windows\SYSWOW64\mfc42u.dll
2013-06-27 23:47:59 ----A---- C:\windows\system32\FXSCOVER.exe
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srvnet.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv2.sys
2013-06-27 23:47:57 ----A---- C:\windows\system32\drivers\srv.sys
2013-06-27 23:47:55 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-06-27 23:47:55 ----A---- C:\windows\system32\ntdll.dll
2013-06-27 23:47:53 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-06-27 23:47:53 ----A---- C:\windows\system32\quartz.dll
2013-06-27 23:47:50 ----A---- C:\windows\system32\drivers\bowser.sys
2013-06-27 23:47:48 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2013-06-27 23:47:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\SYSWOW64\oleacc.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleaut32.dll
2013-06-27 23:47:46 ----A---- C:\windows\system32\oleacc.dll
2013-06-27 23:47:44 ----A---- C:\windows\system32\drivers\afd.sys
2013-06-27 23:47:43 ----A---- C:\windows\SYSWOW64\inetcomm.dll
2013-06-27 23:47:43 ----A---- C:\windows\system32\inetcomm.dll
2013-06-27 23:47:42 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-06-27 23:47:42 ----A---- C:\windows\system32\EncDec.dll
2013-06-27 23:47:40 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-06-27 23:47:40 ----A---- C:\windows\system32\rdpcore.dll
2013-06-27 23:47:39 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-06-27 23:46:39 ----A---- C:\windows\SYSWOW64\packager.dll
2013-06-27 23:46:39 ----A---- C:\windows\system32\packager.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwansvc.dll
2013-06-27 23:15:27 ----A---- C:\windows\system32\wwanprotdim.dll
2013-06-27 23:13:41 ----A---- C:\windows\system32\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-06-27 23:13:40 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-06-27 23:13:40 ----A---- C:\windows\system32\gameux.dll
2013-06-27 23:13:08 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-06-27 23:13:08 ----A---- C:\windows\system32\usp10.dll
2013-06-27 23:12:31 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-06-27 23:12:31 ----A---- C:\windows\system32\tzres.dll
2013-06-27 23:11:46 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-06-27 23:11:46 ----A---- C:\windows\system32\cryptdlg.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-06-27 23:11:33 ----A---- C:\windows\system32\dhcpcore6.dll
2013-06-27 23:11:22 ----A---- C:\windows\system32\taskhost.exe
2013-06-27 22:58:16 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-06-27 22:58:16 ----A---- C:\windows\system32\d3d11.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\nlasvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\netcorehc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\ncsi.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\iphlpsvc.dll
2013-06-27 22:20:19 ----A---- C:\windows\system32\drivers\netio.sys
2013-06-27 22:20:18 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\nlaapi.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\netevent.dll
2013-06-27 22:20:18 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-06-27 22:20:13 ----A---- C:\windows\system32\drivers\ndis.sys
2013-06-27 22:20:12 ----A---- C:\windows\system32\profsvc.dll
2013-06-27 22:20:11 ----A---- C:\windows\system32\OxpsConverter.exe
2013-06-27 22:20:08 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-06-27 22:20:08 ----A---- C:\windows\system32\wintrust.dll
2013-06-27 22:19:38 ----A---- C:\windows\system32\msi.dll
2013-06-27 22:19:37 ----A---- C:\windows\SYSWOW64\msi.dll
2013-06-27 22:17:52 ----A---- C:\windows\system32\KernelBase.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\wow64win.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\kernel32.dll
2013-06-27 22:17:51 ----A---- C:\windows\system32\conhost.exe
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-06-27 22:17:50 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-06-27 22:17:46 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-27 22:17:46 ----A---- C:\windows\system32\ntvdm64.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-27 22:17:45 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-06-27 22:17:45 ----A---- C:\windows\system32\wow64.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-27 22:17:44 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-06-27 22:17:44 ----A---- C:\windows\system32\wow64cpu.dll
2013-06-27 22:17:17 ----A---- C:\windows\system32\shell32.dll
2013-06-27 22:17:15 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\SYSWOW64\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\shdocvw.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\consent.exe
2013-06-27 22:17:14 ----A---- C:\windows\system32\authui.dll
2013-06-27 22:17:14 ----A---- C:\windows\system32\appinfo.dll
2013-06-27 22:16:58 ----A---- C:\windows\SYSWOW64\xmllite.dll
2013-06-27 22:16:58 ----A---- C:\windows\system32\xmllite.dll
2013-06-27 22:16:54 ----A---- C:\windows\SYSWOW64\explorer.exe
2013-06-27 22:16:54 ----A---- C:\windows\explorer.exe
2013-06-27 22:16:51 ----A---- C:\windows\system32\tquery.dll
2013-06-27 22:16:51 ----A---- C:\windows\system32\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\tquery.dll
2013-06-27 22:16:50 ----A---- C:\windows\SYSWOW64\mssrch.dll
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchProtocolHost.exe
2013-06-27 22:16:50 ----A---- C:\windows\system32\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2013-06-27 22:16:49 ----A---- C:\windows\SYSWOW64\mssph.dll
2013-06-27 22:16:49 ----A---- C:\windows\system32\SearchFilterHost.exe
2013-06-27 22:16:49 ----A---- C:\windows\system32\mssph.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssvp.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\mssphtb.dll
2013-06-27 22:16:48 ----A---- C:\windows\system32\msscntrs.dll
2013-06-27 22:16:47 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2013-06-27 22:16:38 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-06-27 22:16:38 ----A---- C:\windows\system32\ntshrui.dll
2013-06-27 22:16:35 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-06-27 22:16:35 ----A---- C:\windows\system32\poqexec.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\drvinst.exe
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devrtl.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\devobj.dll
2013-06-27 22:16:07 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2013-06-27 22:16:07 ----A---- C:\windows\system32\umpnpmgr.dll
2013-06-27 22:16:05 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-06-27 22:16:05 ----A---- C:\windows\system32\srcore.dll
2013-06-27 08:00:30 ----SHD---- C:\Boot
2013-06-27 07:04:22 ----D---- C:\windows\SoftwareDistribution
2013-06-27 07:01:21 ----ASH---- C:\pagefile.sys
2013-06-27 07:01:21 ----ASH---- C:\hiberfil.sys
2013-06-27 07:01:20 ----SHD---- C:\System Volume Information
2013-06-26 23:38:56 ----D---- C:\windows\SYSWOW64\Wat
2013-06-26 23:38:56 ----D---- C:\windows\system32\Wat
2013-06-26 23:15:50 ----A---- C:\windows\system32\Wdfres.dll
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-06-26 23:15:50 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-06-26 23:15:24 ----A---- C:\windows\system32\browserchoice.exe
2013-06-26 23:14:40 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-06-26 23:14:34 ----D---- C:\windows\system32\Macromed
2013-06-26 23:14:05 ----A---- C:\windows\system32\WUDFSvc.dll
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-06-26 23:14:05 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-06-26 23:14:04 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFHost.exe
2013-06-26 23:14:03 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-06-26 23:14:02 ----A---- C:\windows\system32\WUDFx.dll
2013-06-26 23:12:27 ----A---- C:\windows\system32\drivers\Diskdump.sys
2013-06-26 23:12:26 ----A---- C:\windows\SYSWOW64\prevhost.exe
2013-06-26 23:12:26 ----A---- C:\windows\system32\prevhost.exe
2013-06-26 23:11:25 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-06-26 23:11:23 ----A---- C:\windows\system32\spoolsv.exe
2013-06-26 23:11:23 ----A---- C:\windows\splwow64.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winresume.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\winload.exe
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdusb.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kdcom.dll
2013-06-26 23:08:14 ----A---- C:\windows\system32\kd1394.dll
2013-06-26 22:53:07 ----D---- C:\ProgramData\Citrix
2013-06-26 22:52:51 ----D---- C:\Users\Zbynek\AppData\Roaming\ICAClient
2013-06-26 22:52:44 ----D---- C:\Program Files (x86)\Citrix
2013-06-26 22:50:13 ----D---- C:\Users\Zbynek\AppData\Roaming\Juniper Networks
2013-06-26 22:46:01 ----A---- C:\windows\system32\wups2.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wucltux.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuaueng.dll
2013-06-26 22:46:01 ----A---- C:\windows\system32\wuauclt.exe
2013-06-26 22:45:48 ----A---- C:\windows\system32\wups.dll
2013-06-26 22:45:48 ----A---- C:\windows\system32\wudriver.dll
2013-06-26 22:45:47 ----A---- C:\windows\system32\wuapi.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuwebv.dll
2013-06-26 22:45:39 ----A---- C:\windows\system32\wuapp.exe
2013-06-26 22:41:42 ----D---- C:\Users\Zbynek\AppData\Roaming\AVG2013
2013-06-26 22:40:58 ----D---- C:\Users\Zbynek\AppData\Roaming\TuneUp Software
2013-06-26 22:40:45 ----HD---- C:\$AVG
2013-06-26 22:40:45 ----D---- C:\ProgramData\AVG2013
2013-06-26 22:35:08 ----HD---- C:\ProgramData\Common Files
2013-06-26 22:35:08 ----D---- C:\ProgramData\MFAData
2013-06-26 22:30:51 ----D---- C:\Users\Zbynek\AppData\Roaming\Opera
2013-06-26 22:24:11 ----SHD---- C:\$RECYCLE.BIN
2013-06-26 22:21:07 ----A---- C:\windows\Language.ini
2013-06-26 22:20:45 ----D---- C:\windows\ConfigSetRoot
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTKHDRC.dat
2013-06-26 22:20:35 ----A---- C:\windows\system32\drivers\RTEQEX0.dat
2013-06-26 22:20:34 ----A---- C:\windows\system32\AsusScr_1215N_ENG.scr
2013-06-26 22:20:12 ----D---- C:\Program Files (x86)\ASM104xUSB3
2013-06-26 22:19:49 ----D---- C:\windows\system32\SRSLabs
2013-06-26 22:19:48 ----D---- C:\Program Files\Realtek
2013-06-26 22:19:47 ----D---- C:\windows\SYSWOW64\RTCOM
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\SamSfPa.dat
2013-06-26 22:19:26 ----A---- C:\windows\system32\drivers\rtkhdaud.dat
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtPgEx64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtlCPAPI64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkCfg64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkAPO64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RtkApi64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEP64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEL64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEEG64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTEED64A.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RTCOM64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DHT64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RP3DAA64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\RCoInst64.dll
2013-06-26 22:19:23 ----A---- C:\windows\system32\drivers\RTKVHD64.sys
2013-06-26 22:19:20 ----A---- C:\windows\system32\FMAPO64.dll
2013-06-26 22:19:19 ----D---- C:\Program Files (x86)\Realtek
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAR64.dll
2013-06-26 22:19:19 ----A---- C:\windows\system32\AERTAC64.dll
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\Temp
2013-06-26 22:19:17 ----A---- C:\windows\RtlExUpd.dll
2013-06-26 22:17:41 ----SD---- C:\Users\Zbynek\AppData\Roaming\Microsoft
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Macromedia
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\InstallShield
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Identities
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\ASUS WebStorage
2013-06-26 22:17:41 ----D---- C:\Users\Zbynek\AppData\Roaming\Adobe
2013-06-26 22:14:47 ----SHD---- C:\Recovery
======List of files/folders modified in the last 1 month======
2013-07-09 22:58:03 ----D---- C:\Program Files\Trend Micro
2013-07-09 22:53:34 ----D---- C:\windows\Temp
2013-07-09 21:53:15 ----D---- C:\ProgramData\NVIDIA
2013-07-09 20:00:25 ----D---- C:\windows\system32\config
2013-07-09 19:49:19 ----SHD---- C:\windows\Installer
2013-07-07 22:39:29 ----D---- C:\windows\Microsoft.NET
2013-07-07 22:32:32 ----RSD---- C:\windows\assembly
2013-07-05 11:06:48 ----D---- C:\windows\System32
2013-07-05 11:06:48 ----D---- C:\windows\inf
2013-07-05 11:06:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-01 13:54:29 ----SD---- C:\ProgramData\Microsoft
2013-07-01 13:54:23 ----D---- C:\Windows
2013-07-01 13:27:12 ----D---- C:\windows\system32\Tasks
2013-07-01 13:27:06 ----HD---- C:\ProgramData
2013-07-01 13:21:59 ----AD---- C:\windows\system32\drivers
2013-07-01 13:21:44 ----D---- C:\windows\winsxs
2013-07-01 12:50:35 ----D---- C:\windows\SysWOW64
2013-07-01 12:46:36 ----RD---- C:\Program Files (x86)
2013-07-01 12:46:36 ----RD---- C:\Program Files
2013-07-01 11:11:46 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-01 11:11:46 ----D---- C:\windows\system32\cs-CZ
2013-07-01 11:03:58 ----D---- C:\windows\SYSWOW64\en-US
2013-07-01 11:03:58 ----D---- C:\windows\system32\en-US
2013-07-01 10:50:57 ----D---- C:\windows\system32\catroot
2013-07-01 10:50:56 ----D---- C:\windows\system32\catroot2
2013-07-01 10:07:06 ----D---- C:\windows\SYSWOW64\sk-SK
2013-07-01 10:07:06 ----D---- C:\windows\system32\sk-SK
2013-07-01 10:07:06 ----D---- C:\Program Files\Internet Explorer
2013-07-01 10:07:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-01 10:07:05 ----D---- C:\windows\SYSWOW64\pl-PL
2013-07-01 10:07:04 ----D---- C:\windows\SYSWOW64\hu-HU
2013-07-01 10:07:04 ----D---- C:\windows\system32\pl-PL
2013-07-01 10:07:03 ----D---- C:\windows\system32\hu-HU
2013-07-01 10:06:57 ----D---- C:\windows\SYSWOW64\migration
2013-07-01 10:06:53 ----D---- C:\windows\PolicyDefinitions
2013-07-01 10:06:52 ----D---- C:\windows\system32\migration
2013-07-01 10:06:46 ----D---- C:\windows\SYSWOW64\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\wbem
2013-07-01 10:06:45 ----D---- C:\windows\system32\drivers\en-US
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-PT
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\pt-BR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\ko-KR
2013-07-01 10:06:41 ----D---- C:\windows\SYSWOW64\it-IT
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-TW
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-HK
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\zh-CN
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\tr-TR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\sv-SE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ru-RU
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nl-NL
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\nb-NO
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\ja-JP
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fr-FR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\fi-FI
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\es-ES
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\el-GR
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\de-DE
2013-07-01 10:06:40 ----D---- C:\windows\SYSWOW64\da-DK
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-PT
2013-07-01 10:06:39 ----D---- C:\windows\system32\pt-BR
2013-07-01 10:06:39 ----D---- C:\windows\system32\it-IT
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-TW
2013-07-01 10:06:38 ----D---- C:\windows\system32\zh-HK
2013-07-01 10:06:38 ----D---- C:\windows\system32\tr-TR
2013-07-01 10:06:38 ----D---- C:\windows\system32\sv-SE
2013-07-01 10:06:38 ----D---- C:\windows\system32\nl-NL
2013-07-01 10:06:38 ----D---- C:\windows\system32\ko-KR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fr-FR
2013-07-01 10:06:38 ----D---- C:\windows\system32\fi-FI
2013-07-01 10:06:38 ----D---- C:\windows\system32\es-ES
2013-07-01 10:06:38 ----D---- C:\windows\system32\el-GR
2013-07-01 10:06:38 ----D---- C:\windows\system32\de-DE
2013-07-01 10:06:37 ----D---- C:\windows\system32\zh-CN
2013-07-01 10:06:37 ----D---- C:\windows\system32\ru-RU
2013-07-01 10:06:37 ----D---- C:\windows\system32\nb-NO
2013-07-01 10:06:37 ----D---- C:\windows\system32\ja-JP
2013-07-01 10:06:37 ----D---- C:\windows\system32\da-DK
2013-07-01 10:06:32 ----D---- C:\windows\system32\DriverStore
2013-07-01 10:06:31 ----D---- C:\windows\SYSWOW64\drivers
2013-07-01 10:04:34 ----D---- C:\windows\Logs
2013-06-30 23:47:00 ----D---- C:\windows\system32\wdi
2013-06-30 23:42:14 ----D---- C:\AsusVibeData
2013-06-30 23:42:06 ----D---- C:\Program Files (x86)\Asus
2013-06-30 18:13:00 ----D---- C:\windows\debug
2013-06-30 15:31:00 ----D---- C:\windows\AppPatch
2013-06-30 15:30:56 ----D---- C:\Program Files\Windows Journal
2013-06-27 23:52:56 ----D---- C:\windows\ehome
2013-06-27 23:52:56 ----D---- C:\Program Files\Common Files\System
2013-06-27 23:28:42 ----RSD---- C:\windows\Fonts
2013-06-27 22:57:12 ----D---- C:\windows\Prefetch
2013-06-27 22:18:49 ----D---- C:\windows\system32\LogFiles
2013-06-27 07:13:45 ----D---- C:\windows\rescache
2013-06-27 07:13:21 ----D---- C:\windows\SYSWOW64\NV
2013-06-27 07:13:21 ----D---- C:\windows\system32\NV
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\pl-PL
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\hu-HU
2013-06-26 23:38:57 ----D---- C:\windows\system32\drivers\cs-CZ
2013-06-26 23:38:53 ----D---- C:\windows\system32\Boot
2013-06-26 22:50:19 ----D---- C:\windows\Downloaded Program Files
2013-06-26 22:38:27 ----D---- C:\windows\system32\restore
2013-06-26 22:32:50 ----D---- C:\windows\system32\CodeIntegrity
2013-06-26 22:21:11 ----D---- C:\ProgramData\Trend Micro
2013-06-26 22:19:18 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-06-26 22:17:40 ----RD---- C:\Users
2013-06-26 22:14:49 ----D---- C:\windows\panther
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-02-08 71480]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-02-08 311096]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-02-08 116536]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-02-08 45880]
R0 gfibto;gfibto; C:\windows\system32\drivers\gfibto.sys [2013-07-01 14456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2010-06-08 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-06 25960]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\windows\SysWow64\drivers\AsIO.sys [2010-06-28 13440]
R1 AsUpIO;AsUpIO; C:\windows\SysWow64\drivers\AsUpIO.sys [2010-08-03 14464]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-03-29 246072]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-02-08 206136]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-03-21 240952]
R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2011-04-25 87600]
R1 tmactmon;tmactmon; C:\windows\system32\DRIVERS\tmactmon.sys [2010-09-17 90704]
R1 tmcomm;tmcomm; C:\windows\system32\DRIVERS\tmcomm.sys [2010-09-17 144464]
R1 tmevtmgr;tmevtmgr; C:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 tmtdi;Trend Micro TDI Driver; C:\windows\system32\DRIVERS\tmtdi.sys [2010-09-17 105552]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\windows\system32\drivers\btwampfl.sys [2010-05-21 341032]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-05-21 102440]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2010-05-21 135720]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-05-21 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-05-21 21544]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-10-24 6180480]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-08-24 2472680]
R3 kbfiltr;Keyboard Filter; C:\windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-07-29 76912]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-19 299568]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista; C:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S4 DETECT PS2: ;DETECT PS2: ; \??\C:\Program Files (x86)\ASUS\LiveUpdate\DetectSys.sys [2010-05-27 6144]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AsusService;Asus Launcher Service; C:\windows\SysWOW64\AsusService.exe [2010-12-07 224680]
R2 AVGIDSAgent;AVGIDSAgent; D:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-05-14 4937264]
R2 avgwd;AVG WatchDog; D:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-04-18 283136]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-05-21 947488]
R2 NVSvc;NVIDIA Driver Helper Service; C:\windows\system32\nvvsvc.exe [2011-03-06 993896]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-03-06 2009704]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-06 378472]
R2 TiMiniService;TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208]
S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-09-17 267480]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-06-26 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------