VIRY.CZ

Dobrý den, chtěla bych vás poprosit o pomoc. Můj PC neustále zobrazuje reklamy (pod nimi je napsáno 'Ads not by this site') a nebo se snaží otevírat různé stránky, které ale naštěstí vždy zablokuje ESET.

Při kontrolách ESET nic nenajde.
Předem se chci omluvit, že jsem už použila ComboFix, protože na vaši stránku jsem narazila až poté, co jsem ho použila.
Děkuji moc za jakoukoliv pomoc.

Chtěla jsem sem vložit log z RSIT, ale hodilo mi to chybu, protože jsem přesáhla maximální počet znaků.
Tak jsem ho chtěla přiložit jako soubor, nicméně, to mi také nešlo.

Poradíte mi prosím?

Zdravim a pekne rano preji

Ono i licencni podminky upozornuji, ze se CF nema pouzivat "Nikdy by nemel byt pouzit v prostredi bez dozoru zkusene osoby"


Nebezpeci CFka

• Je urcen primarne pro radce - jeho svevolnym pouzitim ztracite narok na podporu
• Maze stopy po haveti, takze v logu z RSIT neni nic videt
• Jeho log je treba dolustit, jelikoz neumi smazat vse - to ovsem tezko zvladnete pokud k tomu nejste vyskolen
• CF muze mit bug = sunda Vam system, pokud nevite kam co uklada, jak co obnovit, mate system v kytkam a ceka Vas reinstal
• CF taky bohuzel prozatim nekontroluje nektere dulezite knihovny (napr. hal.dll) - ty treba mazou nektere typy haveti (napr. angela) - smaze Vam po restartu hal.dll = nenajede Vam system a jste o radek vyse = reinstal

Dejte sem log z RSIT (rozdelte do vice prispevku) a log c:\combofix.txt

Dobré ráno, ještě jednou se moc omlouvám, nevěděla jsem, že je to tak nebezpečné.

log z RSIT (1/2)

Logfile of random's system information tool 1.09 (written by random/random)
Run by Monika at 2013-07-30 09:13:59
Microsoft Windows 8
System drive C: has 866 GB (93%) free of 935 GB
Total RAM: 7389 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:14:04, on 30. 7. 2013
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Monika.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CrossriderApp0035382 - {11111111-1111-1111-1111-110311531182} - C:\Program Files (x86)\hosts\hosts-bho.dll (file missing)
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
O4 - HKLM\..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Monika\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Monika\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem14.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9140 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
"dwm.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
atieclxx
C:\Windows\system32\Hpservice.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 718716834192
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
taskhostex.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k apphost
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
"C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" -byrunkey
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskhost.exe
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Start\HPQuickstart.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6548.0.26170911\1693795524" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,20 --reduce-gpu-sandbox --disable-image-transport-surface --gpu-vendor-id=0x1002 --gpu-device-id=0x990d --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=12.101.1.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.1.1776508315\1436883759" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --extension-process --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.2.490047951\72224758" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.3.2031785428\2009043781" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.4.2116310506\753549742" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.5.830620735\692114082" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.6.1672879754\124028416" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.7.331770138\227715688" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.8.1468567008\1137340375" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.9.525387431\1269741049" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="6548.10.1196448874\1129845658" --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/AutocompleteDynamicTrial_2/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyGroup9 channel:stable mods:100/InstantExtended/Padding2 channel:stable/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_19/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="6548.16.668220932\1025828901" /prefetch:673131151
"C:\Users\Monika\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531182}]
hosts - C:\Program Files (x86)\hosts\hosts-bho.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09 351136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-03-08 7156296]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-02-06 3015920]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-03-21 6330568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"cz.seznam.software.autoupdate"=C:\Users\Monika\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Monika\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-02-26 642656]
"AccelerometerSysTrayApplet"=C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [2013-03-01 77088]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2012-07-13 93296]
"HPMessageService"=C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [2013-02-25 1045304]
"HP CoolSense"=C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2012-11-05 1343904]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-05-31 152392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"ConsentPromptBehaviorUser"=3
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

log z RSIT (2/3)

======List of files/folders created in the last 1 month======

2013-07-30 08:55:31 ----D---- C:\rsit
2013-07-30 08:55:31 ----D---- C:\Program Files\trend micro
2013-07-30 08:50:33 ----SHD---- C:\$RECYCLE.BIN
2013-07-30 08:49:23 ----D---- C:\Windows\system32\MRT
2013-07-30 08:45:02 ----D---- C:\Windows\temp
2013-07-30 08:44:59 ----A---- C:\ComboFix.txt
2013-07-30 08:32:35 ----A---- C:\Windows\zip.exe
2013-07-30 08:32:35 ----A---- C:\Windows\SWXCACLS.exe
2013-07-30 08:32:35 ----A---- C:\Windows\SWSC.exe
2013-07-30 08:32:35 ----A---- C:\Windows\SWREG.exe
2013-07-30 08:32:35 ----A---- C:\Windows\sed.exe
2013-07-30 08:32:35 ----A---- C:\Windows\PEV.exe
2013-07-30 08:32:35 ----A---- C:\Windows\NIRCMD.exe
2013-07-30 08:32:35 ----A---- C:\Windows\MBR.exe
2013-07-30 08:32:35 ----A---- C:\Windows\grep.exe
2013-07-30 08:16:00 ----D---- C:\Qoobox
2013-07-30 08:15:19 ----D---- C:\Windows\erdnt
2013-07-22 23:31:33 ----D---- C:\Program Files (x86)\The KMPlayer
2013-07-22 23:07:09 ----D---- C:\Users\Monika\AppData\Roaming\BSplayer Pro
2013-07-22 23:07:09 ----D---- C:\Users\Monika\AppData\Roaming\BSplayer
2013-07-22 22:59:19 ----A---- C:\Windows\system32\FNTCACHE.DAT
2013-07-20 00:13:52 ----D---- C:\Users\Monika\AppData\Roaming\Apple Computer
2013-07-20 00:13:24 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2013-07-20 00:12:47 ----D---- C:\Program Files\iPod
2013-07-20 00:12:45 ----D---- C:\ProgramData\Apple Computer
2013-07-20 00:12:45 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-20 00:12:45 ----D---- C:\Program Files\iTunes
2013-07-20 00:12:45 ----D---- C:\Program Files (x86)\iTunes
2013-07-20 00:12:08 ----D---- C:\Program Files (x86)\Apple Software Update
2013-07-20 00:11:26 ----D---- C:\Program Files\Common Files\Apple
2013-07-17 23:26:18 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-07-17 23:26:13 ----A---- C:\Windows\system32\dwmcore.dll
2013-07-17 23:26:12 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-07-17 23:26:11 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-07-17 23:26:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-07-17 23:26:11 ----A---- C:\Windows\explorer.exe
2013-07-17 23:26:10 ----A---- C:\Windows\system32\samsrv.dll
2013-07-17 23:26:10 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-07-17 23:26:09 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2013-07-17 23:26:09 ----A---- C:\Windows\system32\mfcore.dll
2013-07-17 23:26:09 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-07-17 23:26:08 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-07-17 23:26:08 ----A---- C:\Windows\system32\winresume.exe
2013-07-17 23:26:08 ----A---- C:\Windows\system32\winload.exe
2013-07-17 23:26:08 ----A---- C:\Windows\system32\vds.exe
2013-07-17 23:26:08 ----A---- C:\Windows\system32\mscms.dll
2013-07-17 23:26:08 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2013-07-17 23:26:08 ----A---- C:\Windows\system32\audiosrv.dll
2013-07-17 23:26:07 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-07-17 23:26:07 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-07-17 23:26:07 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2013-07-17 23:26:07 ----A---- C:\Windows\system32\wwansvc.dll
2013-07-17 23:26:07 ----A---- C:\Windows\system32\samlib.dll
2013-07-17 23:26:07 ----A---- C:\Windows\system32\MbaeParserTask.exe
2013-07-17 23:26:07 ----A---- C:\Windows\system32\drivers\USBXHCI.SYS
2013-07-17 23:26:07 ----A---- C:\Windows\system32\drivers\UCX01000.SYS
2013-07-17 23:26:07 ----A---- C:\Windows\system32\drivers\sdbus.sys
2013-07-17 23:26:07 ----A---- C:\Windows\system32\DeviceSetupManager.dll
2013-07-17 23:26:06 ----A---- C:\Windows\SYSWOW64\samlib.dll
2013-07-17 23:26:06 ----A---- C:\Windows\system32\vdsutil.dll
2013-07-17 23:26:06 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2013-07-17 23:26:06 ----A---- C:\Windows\system32\drivers\BthAvrcpTg.sys
2013-07-17 23:23:35 ----A---- C:\Windows\system32\tssdisai.dll
2013-07-17 23:20:44 ----A---- C:\Windows\SYSWOW64\KBDKURD.DLL
2013-07-17 23:20:44 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-07-17 23:20:44 ----A---- C:\Windows\system32\KBDKURD.DLL
2013-07-17 23:20:44 ----A---- C:\Windows\system32\Display.dll
2013-07-17 23:20:41 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2013-07-17 23:20:41 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 23:20:41 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2013-07-17 23:20:41 ----A---- C:\Windows\system32\WSShared.dll
2013-07-17 23:20:41 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 23:20:41 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-07-17 23:07:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-07-17 23:01:34 ----RD---- C:\Windows\BrowserChoice
2013-07-17 19:51:27 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-07-17 19:45:10 ----A---- C:\Windows\system32\MRT.exe
2013-07-17 19:27:58 ----D---- C:\ProgramData\Age of Empires 3
2013-07-17 19:17:44 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-07-17 19:17:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-07-17 19:17:44 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-07-17 19:17:44 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-07-17 19:17:43 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-07-17 19:17:43 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-07-17 19:17:43 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-07-17 19:17:43 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-07-17 19:17:43 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-07-17 19:17:43 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-07-17 19:17:43 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-07-17 19:17:43 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-07-17 19:17:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-07-17 19:17:42 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-07-17 19:17:41 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-07-17 19:17:41 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-07-17 19:17:41 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-07-17 19:17:41 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-07-17 19:17:40 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-07-17 19:17:40 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-07-17 19:17:39 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-07-17 19:17:39 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-07-17 19:17:38 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-07-17 19:17:38 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-07-17 19:17:38 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-07-17 19:17:38 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-07-17 19:17:38 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-07-17 19:17:38 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-07-17 19:17:37 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-07-17 19:17:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-07-17 19:17:37 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-07-17 19:17:37 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-07-17 19:17:36 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-07-17 19:17:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-07-17 19:17:36 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-07-17 19:17:36 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-07-17 19:17:35 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-07-17 19:17:35 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-07-17 19:17:35 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-07-17 19:17:35 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-07-17 19:17:35 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-07-17 19:17:35 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-07-17 19:17:35 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-07-17 19:17:35 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-07-17 19:17:34 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-07-17 19:17:34 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-07-17 19:17:34 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-07-17 19:17:34 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-07-17 19:17:34 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-07-17 19:17:34 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-07-17 19:17:34 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-07-17 19:17:34 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-07-17 19:17:33 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-07-17 19:17:33 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-07-17 19:17:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-07-17 19:17:33 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-07-17 19:17:33 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-07-17 19:17:33 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-07-17 19:17:32 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-07-17 19:17:32 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-07-17 19:17:32 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-07-17 19:17:32 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-07-17 19:17:32 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-07-17 19:17:32 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-07-17 19:17:32 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-07-17 19:17:32 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-07-17 19:17:31 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-07-17 19:17:31 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-07-17 19:17:31 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-07-17 19:17:31 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-07-17 19:17:29 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-07-17 19:17:29 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-07-17 19:17:29 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-07-17 19:17:29 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-07-17 19:17:27 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-07-17 19:17:27 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-07-17 19:17:26 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-07-17 19:17:26 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-07-17 19:17:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-07-17 19:17:26 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-07-17 19:17:26 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-07-17 19:17:26 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-07-17 19:17:25 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-07-17 19:17:25 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-07-17 19:17:24 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-07-17 19:17:24 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-07-17 19:17:23 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-07-17 19:17:23 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-07-17 19:17:23 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-07-17 19:17:23 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-07-17 19:17:21 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-07-17 19:17:21 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-07-17 19:17:20 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-07-17 19:17:20 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-07-17 19:17:20 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-07-17 19:17:20 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-07-17 19:17:20 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-07-17 19:17:20 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-07-17 19:17:19 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-07-17 19:17:19 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-07-17 19:17:18 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-07-17 19:17:18 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-07-17 19:17:18 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-07-17 19:17:18 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-07-17 19:17:17 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-07-17 19:17:17 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-07-17 19:17:17 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-07-17 19:17:17 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-07-17 19:17:17 ----A---- C:\Windows\system32\xinput1_3.dll
2013-07-17 19:17:17 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-07-17 19:17:17 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-07-17 19:17:17 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-07-17 19:17:16 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-07-17 19:17:16 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-07-17 19:17:16 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-07-17 19:17:16 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-07-17 19:17:16 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-07-17 19:17:16 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-07-17 19:17:15 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-07-17 19:17:15 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-07-17 19:17:12 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-07-17 19:17:12 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-07-17 19:17:12 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-07-17 19:17:12 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-07-17 19:17:12 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-07-17 19:17:12 ----A---- C:\Windows\system32\d3dx10.dll
2013-07-17 19:17:10 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-07-17 19:17:10 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-07-17 19:17:10 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-07-17 19:17:10 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-07-17 19:17:10 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-07-17 19:17:10 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-07-17 19:17:10 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-07-17 19:17:10 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-07-17 19:17:09 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-07-17 19:17:09 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-07-17 19:17:09 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-07-17 19:17:09 ----A---- C:\Windows\system32\xinput1_2.dll
2013-07-17 19:17:09 ----A---- C:\Windows\system32\xinput1_1.dll
2013-07-17 19:17:09 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-07-17 19:17:08 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-07-17 19:17:08 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-07-17 19:17:04 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-07-17 19:17:04 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-07-17 19:17:01 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-07-17 19:17:01 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-07-17 19:17:01 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-07-17 19:17:01 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-07-17 19:17:01 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-07-17 19:17:01 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-07-17 19:17:00 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-07-17 19:17:00 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-07-17 19:17:00 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-07-17 19:17:00 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-07-17 19:16:56 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-07-17 19:16:56 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-07-17 18:52:18 ----D---- C:\Users\Monika\AppData\Roaming\CyberLink
2013-07-17 17:44:46 ----A---- C:\Windows\system32\sppobjs.dll
2013-07-17 17:44:43 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-07-17 17:44:42 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-07-17 17:44:39 ----A---- C:\Windows\system32\mstscax.dll
2013-07-17 17:44:37 ----A---- C:\Windows\system32\wmpmde.dll
2013-07-17 17:44:37 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-07-17 17:44:36 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-07-17 17:44:36 ----A---- C:\Windows\system32\winmde.dll
2013-07-17 17:44:35 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-07-17 17:44:35 ----A---- C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2013-07-17 17:44:35 ----A---- C:\Windows\system32\Windows.Globalization.dll
2013-07-17 17:44:35 ----A---- C:\Windows\system32\TimeBrokerServer.dll
2013-07-17 17:44:35 ----A---- C:\Windows\system32\SystemEventsBrokerServer.dll
2013-07-17 17:44:34 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-07-17 17:44:34 ----A---- C:\Windows\system32\drivers\storport.sys
2013-07-17 17:44:33 ----A---- C:\Windows\SYSWOW64\winmde.dll
2013-07-17 17:44:33 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2013-07-17 17:44:33 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2013-07-17 17:44:33 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-07-17 17:44:33 ----A---- C:\Windows\system32\usbmon.dll
2013-07-17 17:44:33 ----A---- C:\Windows\system32\SettingSync.dll
2013-07-17 17:44:33 ----A---- C:\Windows\system32\netcfgx.dll
2013-07-17 17:44:33 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-07-17 17:44:32 ----A---- C:\Windows\SYSWOW64\SettingSync.dll
2013-07-17 17:44:32 ----A---- C:\Windows\system32\drvstore.dll
2013-07-17 17:44:32 ----A---- C:\Windows\system32\discan.dll
2013-07-17 17:44:31 ----A---- C:\Windows\system32\NdisImPlatform.dll
2013-07-17 17:44:31 ----A---- C:\Windows\system32\drivers\tpm.sys
2013-07-17 17:44:31 ----A---- C:\Windows\system32\drivers\storahci.sys
2013-07-17 17:44:31 ----A---- C:\Windows\system32\DevDispItemProvider.dll
2013-07-17 17:44:30 ----A---- C:\Windows\SYSWOW64\SettingSyncInfo.dll
2013-07-17 17:44:30 ----A---- C:\Windows\SYSWOW64\DevDispItemProvider.dll
2013-07-17 17:44:30 ----A---- C:\Windows\system32\WSDPrintProxy.DLL
2013-07-17 17:44:30 ----A---- C:\Windows\system32\SettingSyncInfo.dll
2013-07-17 17:44:29 ----A---- C:\Windows\system32\drivers\mouhid.sys
2013-07-17 17:44:29 ----A---- C:\Windows\system32\drivers\monitor.sys
2013-07-17 17:43:30 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-07-17 17:41:26 ----A---- C:\Windows\system32\VmHostAI.dll
2013-07-17 17:41:26 ----A---- C:\Windows\system32\RDWebAI.dll
2013-07-17 17:41:26 ----A---- C:\Windows\system32\appserverai.dll
2013-07-17 17:41:25 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-07-17 17:41:25 ----A---- C:\Windows\system32\poqexec.exe
2013-07-17 17:35:01 ----A---- C:\Windows\system32\win32k.sys
2013-07-17 17:28:57 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-07-17 17:19:43 ----A---- C:\Windows\system32\crypt32.dll
2013-07-17 17:19:42 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-07-17 17:19:42 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-07-17 17:19:42 ----A---- C:\Windows\system32\certutil.exe
2013-07-17 17:19:41 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-07-17 17:19:41 ----A---- C:\Windows\system32\cryptsvc.dll
2013-07-17 17:19:41 ----A---- C:\Windows\system32\cryptnet.dll
2013-07-17 17:05:15 ----A---- C:\Windows\system32\qedit.dll
2013-07-17 17:05:14 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-07-17 17:05:14 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-07-17 17:05:14 ----A---- C:\Windows\system32\ReAgentc.exe
2013-07-17 17:02:38 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-07-17 17:02:38 ----A---- C:\Windows\system32\reseteng.dll
2013-07-17 17:02:38 ----A---- C:\Windows\system32\ReAgent.dll
2013-07-17 17:01:50 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-07-17 17:01:50 ----A---- C:\Windows\system32\DWrite.dll
2013-07-17 17:01:39 ----A---- C:\Windows\SYSWOW64\duser.dll
2013-07-17 17:01:39 ----A---- C:\Windows\system32\wlroamextension.dll
2013-07-17 17:01:39 ----A---- C:\Windows\system32\duser.dll
2013-07-17 17:01:39 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-07-17 17:01:38 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-07-17 17:01:38 ----A---- C:\Windows\system32\WWanAPI.dll
2013-07-17 17:01:38 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2013-07-17 17:01:38 ----A---- C:\Windows\system32\ncsi.dll
2013-07-17 17:01:38 ----A---- C:\Windows\system32\hotspotauth.dll
2013-07-17 17:01:38 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-07-17 17:01:38 ----A---- C:\Windows\system32\drivers\ks.sys
2013-07-17 17:01:37 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-07-17 17:01:37 ----A---- C:\Windows\SYSWOW64\WWanAPI.dll
2013-07-17 17:01:37 ----A---- C:\Windows\SYSWOW64\wlroamextension.dll
2013-07-17 17:01:37 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Connectivity.dll
2013-07-17 17:01:37 ----A---- C:\Windows\SYSWOW64\tasklist.exe
2013-07-17 17:01:37 ----A---- C:\Windows\SYSWOW64\taskkill.exe
2013-07-17 17:01:37 ----A---- C:\Windows\SYSWOW64\mbsmsapi.dll
2013-07-17 17:01:37 ----A---- C:\Windows\system32\wpd_ci.dll
2013-07-17 17:01:37 ----A---- C:\Windows\system32\wersvc.dll
2013-07-17 17:01:37 ----A---- C:\Windows\system32\tasklist.exe
2013-07-17 17:01:37 ----A---- C:\Windows\system32\taskkill.exe
2013-07-17 17:01:37 ----A---- C:\Windows\system32\mbsmsapi.dll
2013-07-17 17:01:37 ----A---- C:\Windows\system32\drivers\hidi2c.sys
2013-07-17 17:01:37 ----A---- C:\Windows\system32\drivers\crashdmp.sys
2013-07-17 17:01:36 ----A---- C:\Windows\SYSWOW64\nlmsprep.dll
2013-07-17 17:01:36 ----A---- C:\Windows\SYSWOW64\nlmproxy.dll
2013-07-17 17:01:36 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-07-17 17:01:36 ----A---- C:\Windows\system32\drivers\usbohci.sys
2013-07-17 17:01:34 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-07-17 17:01:34 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-07-17 17:01:25 ----A---- C:\Windows\system32\GdiPlus.dll
2013-07-17 17:01:24 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2013-07-17 17:00:37 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-07-17 16:53:18 ----A---- C:\Windows\system32\wuaueng.dll
2013-07-17 16:53:17 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2013-07-17 16:53:15 ----A---- C:\Windows\system32\twinui.dll
2013-07-17 16:53:13 ----A---- C:\Windows\SYSWOW64\twinui.dll
2013-07-17 16:53:12 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2013-07-17 16:53:09 ----A---- C:\Windows\system32\sysmain.dll
2013-07-17 16:53:09 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2013-07-17 16:53:08 ----A---- C:\Windows\system32\VSSVC.exe
2013-07-17 16:53:08 ----A---- C:\Windows\system32\ubpm.dll
2013-07-17 16:53:08 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-07-17 16:53:07 ----A---- C:\Windows\system32\BCP47Langs.dll
2013-07-17 16:53:06 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2013-07-17 16:53:06 ----A---- C:\Windows\SYSWOW64\BCP47Langs.dll
2013-07-17 16:53:06 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-07-17 16:53:06 ----A---- C:\Windows\system32\wuapi.dll
2013-07-17 16:53:06 ----A---- C:\Windows\system32\netprofmsvc.dll
2013-07-17 16:53:06 ----A---- C:\Windows\system32\authui.dll
2013-07-17 16:53:05 ----A---- C:\Windows\system32\stobject.dll
2013-07-17 16:53:05 ----A---- C:\Windows\system32\netprofm.dll
2013-07-17 16:53:05 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2013-07-17 16:53:04 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-07-17 16:53:04 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-07-17 16:53:04 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-07-17 16:53:04 ----A---- C:\Windows\system32\wups.dll
2013-07-17 16:53:04 ----A---- C:\Windows\system32\wucltux.dll
2013-07-17 16:53:04 ----A---- C:\Windows\system32\wuauclt.exe
2013-07-17 16:53:04 ----A---- C:\Windows\system32\taskhost.exe
2013-07-17 16:53:04 ----A---- C:\Windows\system32\psmsrv.dll
2013-07-17 16:53:04 ----A---- C:\Windows\system32\netplwiz.dll
2013-07-17 16:53:04 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2013-07-17 16:53:04 ----A---- C:\Windows\system32\Magnify.exe
2013-07-17 16:53:04 ----A---- C:\Windows\system32\drivers\spaceport.sys
2013-07-17 16:53:04 ----A---- C:\Windows\system32\DevicePairing.dll
2013-07-17 16:53:04 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2013-07-17 16:53:03 ----A---- C:\Windows\SYSWOW64\netprofm.dll
2013-07-17 16:53:03 ----A---- C:\Windows\SYSWOW64\Magnify.exe
2013-07-17 16:53:03 ----A---- C:\Windows\SYSWOW64\DevicePairing.dll
2013-07-17 16:53:03 ----A---- C:\Windows\SYSWOW64\biwinrt.dll
2013-07-17 16:53:03 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2013-07-17 16:53:03 ----A---- C:\Windows\system32\biwinrt.dll
2013-07-17 16:53:03 ----A---- C:\Windows\system32\AuthHost.exe
2013-07-17 16:53:02 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-07-17 16:53:02 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-07-17 16:53:02 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2013-07-17 16:53:02 ----A---- C:\Windows\system32\wuwebv.dll
2013-07-17 16:53:02 ----A---- C:\Windows\system32\wudriver.dll
2013-07-17 16:53:02 ----A---- C:\Windows\system32\taskhostex.exe
2013-07-17 16:53:02 ----A---- C:\Windows\system32\storewuauth.dll
2013-07-17 16:53:02 ----A---- C:\Windows\system32\bisrv.dll
2013-07-17 16:53:00 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-07-17 16:53:00 ----A---- C:\Windows\SYSWOW64\npmproxy.dll
2013-07-17 16:53:00 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-07-17 16:53:00 ----A---- C:\Windows\system32\wuapp.exe
2013-07-17 16:53:00 ----A---- C:\Windows\system32\muifontsetup.dll
2013-07-17 16:52:13 ----A---- C:\Windows\system32\mshtml.dll
2013-07-17 16:51:55 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-07-17 16:51:39 ----A---- C:\Windows\system32\ieframe.dll
2013-07-17 16:51:37 ----A---- C:\Windows\system32\jscript9.dll
2013-07-17 16:51:36 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-07-17 16:51:33 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-07-17 16:51:32 ----A---- C:\Windows\system32\iertutil.dll
2013-07-17 16:51:31 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-07-17 16:51:31 ----A---- C:\Windows\system32\wininet.dll
2013-07-17 16:51:29 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-07-17 16:51:29 ----A---- C:\Windows\system32\uxtheme.dll
2013-07-17 16:51:29 ----A---- C:\Windows\system32\urlmon.dll
2013-07-17 16:51:27 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-07-17 16:51:27 ----A---- C:\Windows\system32\jscript.dll
2013-07-17 16:51:26 ----A---- C:\Windows\SYSWOW64\uxtheme.dll
2013-07-17 16:51:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-07-17 16:51:26 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-07-17 16:51:26 ----A---- C:\Windows\system32\msfeeds.dll
2013-07-17 16:51:25 ----A---- C:\Windows\SYSWOW64\UXInit.dll
2013-07-17 16:51:25 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-07-17 16:51:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-07-17 16:51:25 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-07-17 16:51:25 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-07-17 16:51:25 ----A---- C:\Windows\system32\UXInit.dll
2013-07-17 16:51:25 ----A---- C:\Windows\system32\jsproxy.dll
2013-07-17 16:51:25 ----A---- C:\Windows\system32\iesysprep.dll
2013-07-17 16:51:25 ----A---- C:\Windows\system32\ie4uinit.exe
2013-07-17 16:51:11 ----A---- C:\Windows\system32\shell32.dll
2013-07-17 16:51:06 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-07-17 16:50:56 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-07-17 16:50:56 ----A---- C:\Windows\system32\shdocvw.dll
2013-07-17 16:50:56 ----A---- C:\Windows\system32\consent.exe
2013-07-17 16:50:56 ----A---- C:\Windows\system32\appinfo.dll
2013-07-17 16:50:20 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-07-17 16:50:19 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-07-17 16:50:16 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-07-17 16:50:16 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-07-17 16:50:16 ----A---- C:\Windows\system32\untfs.dll
2013-07-17 16:50:16 ----A---- C:\Windows\system32\autochk.exe
2013-07-17 16:50:15 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-07-17 16:50:15 ----A---- C:\Windows\system32\kernel32.dll
2013-07-17 16:47:46 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-07-17 16:47:46 ----A---- C:\Windows\system32\gdi32.dll
2013-07-17 16:47:28 ----A---- C:\Windows\system32\win32spl.dll
2013-07-17 16:37:57 ----A---- C:\Windows\system32\drivers\http.sys
2013-07-17 16:37:20 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-07-17 16:37:20 ----A---- C:\Windows\system32\esent.dll
2013-07-17 16:36:48 ----A---- C:\Windows\system32\wmp.dll
2013-07-17 16:36:48 ----A---- C:\Windows\system32\tquery.dll
2013-07-17 16:36:46 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-07-17 16:36:45 ----A---- C:\Windows\system32\mssrch.dll
2013-07-17 16:36:43 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-07-17 16:36:41 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-07-17 16:36:41 ----A---- C:\Windows\system32\ntdll.dll
2013-07-17 16:36:39 ----A---- C:\Windows\system32\MSAudDecMFT.dll
2013-07-17 16:36:38 ----A---- C:\Windows\SYSWOW64\MSAudDecMFT.dll
2013-07-17 16:36:38 ----A---- C:\Windows\system32\schedsvc.dll
2013-07-17 16:36:38 ----A---- C:\Windows\system32\kd_02_10ec.dll
2013-07-17 16:36:37 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-07-17 16:36:37 ----A---- C:\Windows\SYSWOW64\mssph.dll
2013-07-17 16:36:37 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-07-17 16:36:37 ----A---- C:\Windows\system32\schannel.dll
2013-07-17 16:36:37 ----A---- C:\Windows\system32\SearchIndexer.exe
2013-07-17 16:36:37 ----A---- C:\Windows\system32\rsaenh.dll
2013-07-17 16:36:37 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-07-17 16:36:37 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2013-07-17 16:36:36 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2013-07-17 16:36:36 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-07-17 16:36:36 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2013-07-17 16:36:36 ----A---- C:\Windows\system32\kerberos.dll
2013-07-17 16:36:36 ----A---- C:\Windows\system32\conhost.exe
2013-07-17 16:36:36 ----A---- C:\Windows\system32\AudioSes.dll
2013-07-17 16:36:36 ----A---- C:\Windows\system32\AudioEng.dll
2013-07-17 16:36:35 ----A---- C:\Windows\SYSWOW64\rsaenh.dll
2013-07-17 16:36:35 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-07-17 16:36:35 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-07-17 16:36:35 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2013-07-17 16:36:35 ----A---- C:\Windows\system32\Windows.Networking.dll
2013-07-17 16:36:35 ----A---- C:\Windows\system32\RecoveryDrive.exe
2013-07-17 16:36:35 ----A---- C:\Windows\system32\mssph.dll
2013-07-17 16:36:35 ----A---- C:\Windows\system32\dwmredir.dll
2013-07-17 16:36:35 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-07-17 16:36:35 ----A---- C:\Windows\system32\audiodg.exe
2013-07-17 16:36:34 ----A---- C:\Windows\system32\wpncore.dll
2013-07-17 16:36:33 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2013-07-17 16:36:33 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-07-17 16:36:33 ----A---- C:\Windows\system32\MFMediaEngine.dll
2013-07-17 16:36:31 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2013-07-17 16:36:31 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-07-17 16:36:31 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2013-07-17 16:36:31 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-07-17 16:36:31 ----A---- C:\Windows\system32\fhengine.dll
2013-07-17 16:36:31 ----A---- C:\Windows\system32\dmvdsitf.dll
2013-07-17 16:36:31 ----A---- C:\Windows\system32\ci.dll
2013-07-17 16:36:31 ----A---- C:\Windows\system32\actxprxy.dll
2013-07-17 16:36:30 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-07-17 16:36:30 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2013-07-17 16:36:30 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2013-07-17 16:36:30 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-07-17 16:36:30 ----A---- C:\Windows\system32\SearchFilterHost.exe
2013-07-17 16:36:30 ----A---- C:\Windows\system32\Robocopy.exe
2013-07-17 16:36:30 ----A---- C:\Windows\system32\kdvm.dll
2013-07-17 16:36:30 ----A---- C:\Windows\system32\iuilp.dll
2013-07-17 16:36:30 ----A---- C:\Windows\system32\drivers\pdc.sys
2013-07-17 16:36:30 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-07-17 16:36:30 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2013-07-17 16:36:29 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-07-17 16:36:29 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-07-17 16:36:29 ----A---- C:\Windows\SYSWOW64\dmvdsitf.dll
2013-07-17 16:36:29 ----A---- C:\Windows\system32\wscsvc.dll
2013-07-17 16:36:29 ----A---- C:\Windows\system32\mssvp.dll
2013-07-17 16:36:29 ----A---- C:\Windows\system32\kdnet.dll
2013-07-17 16:36:29 ----A---- C:\Windows\system32\GenuineCenter.dll
2013-07-17 16:36:29 ----A---- C:\Windows\system32\fmifs.dll
2013-07-17 16:36:29 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-07-17 16:36:29 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-07-17 16:36:29 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-07-17 16:36:29 ----A---- C:\Windows\system32\drivers\hidbth.sys
2013-07-17 16:36:28 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2013-07-17 16:36:28 ----A---- C:\Windows\SYSWOW64\msshooks.dll
2013-07-17 16:36:28 ----A---- C:\Windows\SYSWOW64\fmifs.dll
2013-07-17 16:36:28 ----A---- C:\Windows\system32\mssprxy.dll
2013-07-17 16:36:28 ----A---- C:\Windows\system32\msshooks.dll
2013-07-17 16:36:28 ----A---- C:\Windows\system32\msscntrs.dll
2013-07-17 16:35:19 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-07-17 16:35:19 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-07-17 16:35:16 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-07-17 16:35:16 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-07-17 16:34:49 ----A---- C:\Windows\system32\drivers\WdFilter.sys
2013-07-17 16:34:48 ----A---- C:\Windows\system32\drivers\WdBoot.sys
2013-07-17 16:34:19 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2013-07-17 16:34:19 ----A---- C:\Windows\system32\cryptdlg.dll
2013-07-17 16:15:15 ----D---- C:\Program Files (x86)\Microsoft Games
2013-07-17 16:02:18 ----D---- C:\Users\Monika\AppData\Roaming\ESET
2013-07-17 15:58:31 ----D---- C:\ProgramData\ESET
2013-07-17 15:58:31 ----D---- C:\Program Files\ESET
2013-07-17 15:31:21 ----D---- C:\Program Files\Phoenix
2013-07-17 15:13:20 ----D---- C:\Users\Monika\AppData\Roaming\WinRAR
2013-07-17 15:13:01 ----D---- C:\Program Files\WinRAR
2013-07-17 14:40:22 ----D---- C:\Program Files (x86)\hosts
2013-07-17 14:38:09 ----D---- C:\Users\Monika\AppData\Roaming\Search Protection
2013-07-17 14:37:09 ----D---- C:\Users\Monika\AppData\Roaming\uTorrent
2013-07-17 14:16:59 ----D---- C:\Users\Monika\AppData\Roaming\Babylon
2013-07-17 14:16:59 ----D---- C:\ProgramData\Babylon
2013-07-17 14:16:23 ----D---- C:\ProgramData\Tarma Installer
2013-07-17 14:16:12 ----D---- C:\Users\Monika\AppData\Roaming\Mozilla
2013-07-17 14:16:03 ----D---- C:\Program Files (x86)\FTDownloader.com
2013-07-17 14:03:33 ----D---- C:\Users\Monika\AppData\Roaming\IrfanView
2013-07-17 14:03:33 ----D---- C:\Program Files (x86)\IrfanView
2013-07-17 13:58:39 ----A---- C:\Users\Monika\AppData\Roaming\burnaware.ini
2013-07-17 13:57:22 ----D---- C:\Program Files (x86)\BurnAware Free
2013-07-17 13:45:52 ----D---- C:\Program Files (x86)\Seznam.cz
2013-07-17 13:45:05 ----D---- C:\Users\Monika\AppData\Roaming\Seznam.cz
2013-07-17 13:44:23 ----D---- C:\Users\Monika\AppData\Roaming\Macromedia
2013-07-17 13:43:40 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-07-17 13:43:37 ----D---- C:\Users\Monika\AppData\Roaming\DAEMON Tools Lite
2013-07-17 13:43:35 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-07-17 13:42:30 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-07-16 22:48:32 ----D---- C:\Users\Monika\AppData\Roaming\hpqlog
2013-07-16 17:48:21 ----D---- C:\Users\Monika\AppData\Roaming\Hewlett-Packard
2013-07-16 17:38:27 ----D---- C:\Program Files (x86)\Google
2013-07-16 17:29:22 ----D---- C:\Users\Monika\AppData\Roaming\ATI
2013-07-16 17:27:45 ----D---- C:\Users\Monika\AppData\Roaming\Adobe
2013-07-16 17:25:26 ----D---- C:\Users\Monika\AppData\Roaming\Synaptics
2013-07-16 17:24:10 ----HD---- C:\Program Files (x86)\Uninstall Information
2013-07-16 17:23:48 ----D---- C:\Windows\SoftwareDistribution
2013-07-16 17:23:40 ----SD---- C:\Users\Monika\AppData\Roaming\Microsoft
2013-07-16 15:05:14 ----SHD---- C:\ProgramData\Šablony
2013-07-16 15:05:14 ----SHD---- C:\ProgramData\Plocha
2013-07-16 15:05:14 ----SHD---- C:\ProgramData\Nabídka Start
2013-07-16 15:05:14 ----SHD---- C:\ProgramData\Dokumenty
2013-07-16 15:05:14 ----SHD---- C:\ProgramData\Data aplikací

======List of files/folders modified in the last 1 month======

2013-07-30 09:13:32 ----D---- C:\Windows\Prefetch
2013-07-30 09:13:22 ----RD---- C:\Program Files (x86)
2013-07-30 09:00:00 ----D---- C:\Windows\system32\sru
2013-07-30 08:55:31 ----RD---- C:\Program Files
2013-07-30 08:51:52 ----D---- C:\Windows\CbsTemp
2013-07-30 08:51:51 ----D---- C:\Windows\WinSxS
2013-07-30 08:51:51 ----D---- C:\Windows\Microsoft.NET
2013-07-30 08:49:31 ----D---- C:\Windows\system32\config
2013-07-30 08:49:23 ----RD---- C:\Windows\System32
2013-07-30 08:45:02 ----D---- C:\Windows
2013-07-30 08:41:54 ----A---- C:\Windows\system.ini
2013-07-30 08:41:48 ----D---- C:\Windows\system32\drivers\etc
2013-07-30 08:38:05 ----D---- C:\Windows\SYSWOW64\drivers
2013-07-30 08:38:05 ----D---- C:\Windows\SysWOW64
2013-07-30 08:38:05 ----D---- C:\Windows\apppatch
2013-07-30 08:38:03 ----D---- C:\Program Files (x86)\Common Files
2013-07-30 08:33:16 ----SHD---- C:\System Volume Information
2013-07-30 08:23:22 ----SD---- C:\ProgramData\Microsoft
2013-07-30 08:16:01 ----D---- C:\Windows\system32\Drivers
2013-07-29 21:51:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-07-29 21:51:43 ----D---- C:\Windows\Inf
2013-07-27 13:45:17 ----D---- C:\Windows\AUInstallAgent
2013-07-27 13:45:15 ----HD---- C:\Program Files\WindowsApps
2013-07-26 12:15:13 ----D---- C:\Windows\system32\Tasks
2013-07-25 23:28:16 ----SHD---- C:\Windows\Installer
2013-07-25 23:26:20 ----D---- C:\Program Files (x86)\CyberLink
2013-07-25 23:25:20 ----D---- C:\SWSetup
2013-07-25 22:41:01 ----D---- C:\Windows\Hewlett-Packard
2013-07-23 03:03:11 ----D---- C:\Windows\system32\catroot2
2013-07-23 01:32:53 ----D---- C:\Windows\rescache
2013-07-22 22:58:35 ----D---- C:\Windows\servicing
2013-07-22 22:53:44 ----D---- C:\Windows\system32\Boot
2013-07-22 22:53:33 ----D---- C:\Windows\system32\oobe
2013-07-22 22:53:28 ----D---- C:\Windows\system32\wbem
2013-07-22 22:53:22 ----RD---- C:\Windows\ToastData
2013-07-22 22:53:20 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-07-22 22:53:18 ----D---- C:\Windows\system32\cs-CZ
2013-07-22 22:53:07 ----D---- C:\Program Files\Windows Photo Viewer
2013-07-22 22:53:07 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-07-22 22:53:06 ----D---- C:\Windows\WinStore
2013-07-22 22:53:06 ----D---- C:\Windows\SYSWOW64\Dism
2013-07-22 22:53:02 ----D---- C:\Windows\system32\Dism
2013-07-22 22:52:54 ----RSD---- C:\Windows\Fonts
2013-07-22 22:52:12 ----D---- C:\Windows\system32\DriverStore
2013-07-20 00:13:24 ----DC---- C:\Windows\system32\DRVSTORE
2013-07-20 00:12:45 ----D---- C:\ProgramData
2013-07-20 00:11:35 ----D---- C:\ProgramData\Apple
2013-07-20 00:11:34 ----D---- C:\Windows\system32\catroot
2013-07-20 00:11:26 ----D---- C:\Program Files\Common Files
2013-07-19 03:10:59 ----D---- C:\Windows\Logs
2013-07-18 17:33:22 ----RSD---- C:\Windows\assembly
2013-07-17 23:10:46 ----D---- C:\ProgramData\PRICache
2013-07-17 23:04:48 ----D---- C:\ProgramData\Norton
2013-07-17 23:04:45 ----HD---- C:\Windows\ELAMBKUP
2013-07-17 23:02:09 ----D---- C:\Program Files\Common Files\microsoft shared
2013-07-17 23:02:06 ----D---- C:\Program Files\Windows Journal
2013-07-17 23:01:00 ----D---- C:\Windows\SYSWOW64\en-US
2013-07-17 23:00:58 ----D---- C:\Windows\system32\en-US
2013-07-17 23:00:00 ----D---- C:\Windows\SYSWOW64\wbem
2013-07-17 22:59:34 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-17 22:59:27 ----D---- C:\Program Files\Internet Explorer
2013-07-17 22:58:57 ----D---- C:\Program Files\Windows Defender
2013-07-17 22:58:53 ----D---- C:\Program Files (x86)\Windows Defender
2013-07-17 22:58:05 ----D---- C:\Program Files\Windows Media Player
2013-07-17 22:58:05 ----D---- C:\Program Files\Windows Mail
2013-07-17 22:58:02 ----D---- C:\Program Files\Common Files\System
2013-07-17 22:58:01 ----D---- C:\Program Files (x86)\Windows Mail
2013-07-17 22:58:00 ----D---- C:\Program Files (x86)\Windows Media Player
2013-07-17 22:57:52 ----D---- C:\Windows\SYSWOW64\winrm
2013-07-17 22:57:52 ----D---- C:\Windows\SYSWOW64\slmgr
2013-07-17 22:57:52 ----D---- C:\Windows\SYSWOW64\oobe
2013-07-17 22:57:52 ----D---- C:\Windows\SYSWOW64\migwiz
2013-07-17 22:57:52 ----D---- C:\Windows\SYSWOW64\en
2013-07-17 22:57:51 ----D---- C:\Windows\SYSWOW64\sk-SK
2013-07-17 22:57:41 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2013-07-17 22:57:38 ----D---- C:\Windows\SYSWOW64\WCN
2013-07-17 22:57:38 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2013-07-17 22:57:31 ----D---- C:\Windows\en-US
2013-07-17 22:57:28 ----RD---- C:\Windows\ImmersiveControlPanel
2013-07-17 22:57:28 ----D---- C:\Windows\PolicyDefinitions
2013-07-17 22:57:27 ----D---- C:\Windows\system32\winrm
2013-07-17 22:57:25 ----D---- C:\Windows\system32\Sysprep
2013-07-17 22:57:25 ----D---- C:\Windows\system32\slmgr
2013-07-17 22:57:25 ----D---- C:\Windows\system32\migwiz
2013-07-17 22:57:25 ----D---- C:\Windows\system32\en
2013-07-17 22:57:23 ----D---- C:\Windows\system32\sk-SK
2013-07-17 22:56:24 ----D---- C:\Windows\system32\drivers\en-US
2013-07-17 22:55:23 ----D---- C:\Windows\system32\WCN
2013-07-17 22:54:39 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2013-07-17 22:54:38 ----D---- C:\Windows\system32\SystemResetPlatform
2013-07-17 22:53:38 ----D---- C:\Windows\en-GB
2013-07-17 22:53:37 ----D---- C:\Windows\SYSWOW64\en-GB
2013-07-17 22:53:24 ----D---- C:\Windows\system32\en-GB
2013-07-17 18:41:46 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-07-17 14:34:06 ----D---- C:\Windows\Tasks
2013-07-17 03:04:24 ----D---- C:\Windows\system32\LogFiles
2013-07-16 20:32:48 ----D---- C:\Windows\system32\wdi
2013-07-16 18:18:59 ----D---- C:\Windows\system32\restore
2013-07-16 17:40:35 ----D---- C:\ProgramData\CyberLink
2013-07-16 17:27:43 ----RD---- C:\Program Files (x86)\Online Services
2013-07-16 17:27:18 ----D---- C:\SYSTEM.SAV
2013-07-16 17:23:40 ----RD---- C:\Users
2013-07-16 15:05:43 ----D---- C:\Windows\debug
2013-07-16 15:05:14 ----D---- C:\Program Files\Windows NT
2013-07-16 15:04:46 ----D---- C:\Windows\Panther

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\Windows\System32\drivers\ACPI.sys [2013-03-22 425192]
R0 acpiex;Microsoft ACPIEx Driver; C:\Windows\System32\Drivers\acpiex.sys [2012-07-26 77040]
R0 amd_sata;amd_sata; C:\Windows\System32\drivers\amd_sata.sys [2012-11-30 80552]
R0 amd_xata;amd_xata; C:\Windows\System32\drivers\amd_xata.sys [2012-11-30 26280]
R0 amdkmpfd;@oem2.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\Windows\System32\drivers\amdkmpfd.sys [2012-09-14 36520]
R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\Windows\System32\drivers\CLFS.sys [2012-07-26 361200]
R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys [2013-03-22 562392]
R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\Windows\System32\drivers\disk.sys [2012-07-26 102640]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-02-14 58416]
R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\System32\drivers\fileinfo.sys [2012-07-26 71920]
R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\Windows\system32\drivers\fltmgr.sys [2012-07-26 374512]
R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys [2013-03-22 465128]
R0 hpdskflt;@oem14.inf,%service_desc%;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2013-03-01 30520]
R0 KSecDD;KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [2013-03-22 100072]
R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [2013-03-22 172264]
R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\Windows\System32\drivers\mountmgr.sys [2012-07-26 93936]
R0 msisadrv;msisadrv; C:\Windows\System32\drivers\msisadrv.sys [2012-07-26 17136]
R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\Windows\System32\Drivers\mup.sys [2012-07-26 83696]
R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\Windows\system32\drivers\ndis.sys [2013-06-17 997632]
R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\Windows\System32\drivers\partmgr.sys [2013-03-22 91880]
R0 pci;@machine.inf,%pci_svcdesc%;Řadič sběrnice PCI; C:\Windows\System32\drivers\pci.sys [2012-07-26 234224]
R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys [2012-07-26 52464]
R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\Windows\system32\drivers\pdc.sys [2013-03-02 69864]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2012-07-26 217328]
R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\Windows\System32\drivers\spaceport.sys [2013-05-04 284416]
R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\Windows\System32\drivers\tcpip.sys [2013-06-01 2233600]
R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\Windows\System32\drivers\vdrvroot.sys [2012-07-26 36080]
R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\Windows\System32\drivers\volmgr.sys [2012-07-26 83184]
R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys [2012-07-26 378608]
R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\Windows\System32\drivers\volsnap.sys [2013-06-01 327936]
R0 Wd;@wd.inf,%WdServiceDisplayName%;Microsoft Watchdog Timer Driver; C:\Windows\System32\drivers\wd.sys [2012-07-26 23792]
R0 Wdf01000;@%SystemRoot%\system32\drivers\Wdf01000.sys,-1000; C:\Windows\system32\drivers\Wdf01000.sys [2013-03-22 785504]
R0 WFPLWFS;@%SystemRoot%\System32\drivers\wfplwfs.sys,-6000; C:\Windows\system32\DRIVERS\wfplwfs.sys [2012-07-26 96496]
R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\Windows\system32\drivers\afd.sys [2013-03-22 560640]
R1 BasicDisplay;BasicDisplay; C:\Windows\System32\drivers\BasicDisplay.sys [2012-07-26 48640]
R1 BasicRender;BasicRender; C:\Windows\System32\drivers\BasicRender.sys [2012-07-26 29696]
R1 Beep;Beep; C:\Windows\system32\drivers\Beep.sys [2012-07-26 7680]
R1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\Windows\System32\drivers\cdrom.sys [2012-07-26 174080]
R1 CLVirtualDrive;CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [2012-06-25 92536]
R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\Windows\System32\Drivers\dfsc.sys [2012-07-26 118784]
R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys [2012-07-26 50688]
R1 dtsoftbus01;@oem15.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2013-07-17 283064]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-02-14 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 EpfwLWF;@oem19.inf,%EpfwLWF_Desc%;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-01-10 59440]
R1 Msfs;Msfs; C:\Windows\system32\drivers\Msfs.sys [2012-07-26 26112]
R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\Windows\System32\drivers\mssmbios.sys [2012-07-26 37616]
R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\Windows\system32\DRIVERS\netbios.sys [2012-07-26 46080]
R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\Windows\System32\DRIVERS\netbt.sys [2012-07-26 331776]
R1 Npfs;Npfs; C:\Windows\system32\drivers\Npfs.sys [2012-07-26 49152]
R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\Windows\System32\drivers\npsvctrig.sys [2012-07-26 23552]
R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys [2012-07-26 34304]
R1 Null;Null; C:\Windows\system32\drivers\Null.sys [2012-07-26 5632]
R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\Windows\system32\DRIVERS\pacer.sys [2012-07-26 145408]
R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\Windows\system32\DRIVERS\rdbss.sys [2013-05-04 427520]
R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys [2012-07-26 117248]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2012-07-26 64000]
R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys [2013-04-09 83456]
R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-01-10 190232]
R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\Windows\system32\DRIVERS\lltdio.sys [2012-07-26 60416]
R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys [2012-07-26 134144]
R2 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\Windows\system32\DRIVERS\nwifi.sys [2012-07-26 427520]
R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\Windows\system32\drivers\Ndu.sys [2012-07-26 97792]
R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys [2013-04-09 805376]
R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\Windows\system32\DRIVERS\rspndr.sys [2012-07-26 78848]
R2 secdrv;Security Driver; C:\Windows\system32\drivers\secdrv.sys [2012-07-26 23040]
R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys [2012-07-26 45056]
R3 Accelerometer;@oem14.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2013-03-01 43320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-02-26 11635200]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-02-26 578560]
R3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\Windows\System32\drivers\amdppm.sys [2013-03-22 88064]
R3 AtiHDAudioService;@oem1.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW86.sys [2013-02-15 94208]
R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys [2012-07-26 101888]
R3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\Windows\System32\drivers\CmBatt.sys [2012-07-26 25600]
R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\Windows\System32\drivers\CompositeBus.sys [2012-07-26 36352]
R3 condrv;Console Driver; C:\Windows\System32\drivers\condrv.sys [2012-07-26 33792]
R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys [2013-04-16 1455368]
R3 fastfat;FAT12/16/32 File System Driver; C:\Windows\system32\drivers\fastfat.sys [2012-07-26 210672]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\Windows\System32\drivers\HDAudBus.sys [2013-03-22 71168]
R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\Windows\system32\drivers\HTTP.sys [2013-03-15 861184]
R3 i8042prt;@msmouse.inf,%i8042prt.SvcDesc%;PS/2 Keyboard and Mouse Port Driver; C:\Windows\System32\drivers\i8042prt.sys [2012-07-26 112640]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-03-08 3340616]
R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Keyboard Class Driver; C:\Windows\System32\drivers\kbdclass.sys [2012-07-26 48368]
R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Miniport ladění jádra společnosti Microsoft (NDIS 6.20); C:\Windows\system32\DRIVERS\kdnic.sys [2012-07-26 18432]
R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys [2012-07-26 21376]
R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Microsoft Monitor Class Function Driver Service; C:\Windows\System32\drivers\monitor.sys [2013-03-01 30720]
R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Mouse Class Driver; C:\Windows\System32\drivers\mouclass.sys [2012-07-26 45808]
R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys [2013-03-22 74752]
R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\Windows\system32\DRIVERS\mrxsmb.sys [2013-02-06 370688]
R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys [2012-07-26 279552]
R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys [2013-02-06 215552]
R3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\Windows\system32\DRIVERS\ndistapi.sys [2013-03-22 25088]
R3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\Windows\system32\DRIVERS\ndisuio.sys [2012-07-26 58880]
R3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
R3 NDProxy;NDIS Proxy; C:\Windows\system32\drivers\NDProxy.sys [2013-04-09 60416]
R3 Ntfs;Ntfs; C:\Windows\system32\drivers\Ntfs.sys [2013-02-02 1933544]
R3 PptpMiniport;@%systemroot%\system32\rascfg.dll,-32006; C:\Windows\system32\DRIVERS\raspptp.sys [2012-07-26 114176]
R3 RasAgileVpn;@netavpna.inf,%Svc-Mp-AgileVpn-DispName%;Připojení WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys [2012-07-26 68608]
R3 Rasl2tp;@%systemroot%\system32\rascfg.dll,-32005; C:\Windows\system32\DRIVERS\rasl2tp.sys [2012-07-26 124928]
R3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\Windows\system32\DRIVERS\raspppoe.sys [2012-07-26 81920]
R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys [2012-07-26 92672]
R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\Windows\System32\drivers\rdpbus.sys [2012-07-26 22528]
R3 RSP2STOR;@oem7.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2013-01-24 288328]
R3 RTL8168;@oem10.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2012-12-28 760032]
R3 RTWlanE;@oem11.inf,%RTWlanE.DeviceDesc.DispName%;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2013-02-23 1551432]
R3 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\Windows\System32\DRIVERS\srv.sys [2012-07-26 416768]
R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys [2013-04-09 623104]
R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [2013-04-09 247808]
R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\Windows\System32\drivers\swenum.sys [2012-07-26 13680]
R3 SynTP;@oem6.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-02-06 469232]
R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Microsoft Tunnel Miniport Adapter Driver; C:\Windows\system32\DRIVERS\tunnel.sys [2012-07-26 149504]
R3 UCX01000;USB Controller Extension; C:\Windows\System32\drivers\ucx01000.sys [2013-06-01 213248]
R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\Windows\System32\drivers\umbus.sys [2012-07-26 48128]
R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Obecný nadřazený ovladač Microsoft USB; C:\Windows\System32\drivers\usbccgp.sys [2012-07-26 120832]
R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\Windows\System32\drivers\usbehci.sys [2013-03-22 79080]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-08-28 58536]
R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Microsoft USB Standard Hub Driver; C:\Windows\System32\drivers\usbhub.sys [2013-02-02 496872]
R3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\Windows\System32\drivers\UsbHub3.sys [2013-05-04 446720]
R3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\Windows\System32\drivers\usbohci.sys [2012-11-20 27136]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-03-22 210304]
R3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\Windows\System32\drivers\USBXHCI.SYS [2013-06-01 337152]
R3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys [2012-07-26 24064]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2012-07-26 17920]
R3 WirelessButtonDriver;@oem13.inf,%ServiceDesc%;HP Wireless Button Driver Service; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [2012-08-31 20800]
R3 WmiAcpi;@wmiacpi.inf,%WMIMAP.SvcDesc%;Microsoft Windows Management Interface for ACPI; C:\Windows\System32\drivers\wmiacpi.sys [2012-07-26 17408]
R4 cdfs;CD/DVD File System Reader; C:\Windows\system32\DRIVERS\cdfs.sys [2012-07-26 108544]
S0 3ware;3ware; C:\Windows\System32\drivers\3ware.sys [2012-07-26 106736]
S0 adp94xx;adp94xx; C:\Windows\System32\drivers\adp94xx.sys [2012-07-26 492272]
S0 adpahci;adpahci; C:\Windows\System32\drivers\adpahci.sys [2012-07-26 340720]
S0 adpu320;adpu320; C:\Windows\System32\drivers\adpu320.sys [2012-07-26 184048]
S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\Windows\System32\drivers\agp440.sys [2012-07-26 63216]
S0 amdsata;amdsata; C:\Windows\System32\drivers\amdsata.sys [2012-07-26 76016]
S0 amdsbs;amdsbs; C:\Windows\System32\drivers\amdsbs.sys [2012-07-26 258288]
S0 amdxata;amdxata; C:\Windows\System32\drivers\amdxata.sys [2012-07-26 26352]
S0 arc;arc; C:\Windows\System32\drivers\arc.sys [2012-07-26 104688]
S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver; C:\Windows\System32\drivers\arcsas.sys [2012-07-26 108272]
S0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\Windows\System32\drivers\atapi.sys [2012-07-26 25840]
S0 b06bdrv;@netbvbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II VBD; C:\Windows\System32\drivers\bxvbda.sys [2013-03-22 533224]
S0 ebdrv;@netevbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\System32\drivers\evbda.sys [2013-03-22 3265256]
S0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\Windows\System32\drivers\EhStorClass.sys [2012-07-26 81136]
S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\Windows\System32\drivers\EhStorTcgDrv.sys [2012-07-26 113904]
S0 gagp30kx;@machine.inf,%gagp30kx_svcdesc%;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\Windows\System32\drivers\gagp30kx.sys [2012-07-26 66800]
S0 HpSAMD;HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [2012-07-26 64752]
S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys [2012-07-26 24816]
S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\Windows\System32\drivers\iaStorV.sys [2012-07-26 411888]
S0 iirsp;iirsp; C:\Windows\System32\drivers\iirsp.sys [2012-07-26 45296]
S0 intelide;intelide; C:\Windows\System32\drivers\intelide.sys [2012-07-26 18672]
S0 isapnp;isapnp; C:\Windows\System32\drivers\isapnp.sys [2012-07-26 22256]
S0 LSI_SAS;LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [2012-07-26 108784]
S0 LSI_SAS2;LSI_SAS2; C:\Windows\System32\drivers\lsi_sas2.sys [2012-07-26 92400]
S0 LSI_SCSI;LSI_SCSI; C:\Windows\System32\drivers\lsi_scsi.sys [2012-07-26 116976]
S0 LSI_SSS;LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [2012-07-26 81136]
S0 megasas;megasas; C:\Windows\System32\drivers\megasas.sys [2012-07-26 51952]
S0 MegaSR;MegaSR; C:\Windows\System32\drivers\MegaSR.sys [2012-07-26 353008]
S0 mvumis;mvumis; C:\Windows\System32\drivers\mvumis.sys [2012-07-26 64240]
S0 nfrd960;nfrd960; C:\Windows\System32\drivers\nfrd960.sys [2012-07-26 52464]
S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\Windows\System32\drivers\nv_agp.sys [2012-07-26 125168]
S0 nvraid;nvraid; C:\Windows\System32\drivers\nvraid.sys [2012-07-26 150256]
S0 nvstor;nvstor; C:\Windows\System32\drivers\nvstor.sys [2012-07-26 168176]
S0 pciide;pciide; C:\Windows\System32\drivers\pciide.sys [2012-07-26 14064]
S0 pcmcia;pcmcia; C:\Windows\System32\drivers\pcmcia.sys [2012-07-26 237808]
S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\Windows\System32\drivers\sbp2port.sys [2012-07-26 107760]
S0 SiSRaid2;SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [2012-07-26 44784]
S0 SiSRaid4;SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [2012-07-26 81648]
S0 stexstor;stexstor; C:\Windows\System32\drivers\stexstor.sys [2012-07-26 30960]
S0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver; C:\Windows\System32\drivers\storahci.sys [2013-03-02 77544]
S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys [2012-07-26 45160]
S0 storvsc;storvsc; C:\Windows\System32\drivers\storvsc.sys [2012-07-26 37992]
S0 uagp35;@machine.inf,%uagp35_svcdesc%;Filtr Microsoft AGPv3.5; C:\Windows\System32\drivers\uagp35.sys [2012-07-26 65776]
S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\Windows\System32\drivers\uliagpkx.sys [2012-07-26 66800]
S0 viaide;viaide; C:\Windows\System32\drivers\viaide.sys [2012-07-26 19184]
S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\System32\drivers\vmbus.sys [2012-07-26 137832]
S0 vsmraid;vsmraid; C:\Windows\System32\drivers\vsmraid.sys [2012-07-26 164080]
S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage Controller Windows Driver; C:\Windows\System32\drivers\vstxraid.sys [2012-07-26 322800]
S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\Windows\system32\drivers\dam.sys [2013-03-22 58088]
S3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\Windows\System32\drivers\1394ohci.sys [2012-07-26 226304]
S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\Windows\System32\drivers\acpipagr.sys [2012-07-26 10240]
S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\Windows\System32\drivers\acpipmi.sys [2012-07-26 12288]
S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\Windows\System32\drivers\acpitime.sys [2012-07-26 10752]
S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\Windows\System32\drivers\amdk8.sys [2013-03-22 90624]
S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys [2012-07-26 79360]
S3 AsyncMac;@%systemroot%\system32\rascfg.dll,-32000; C:\Windows\system32\DRIVERS\asyncmac.sys [2012-07-26 26624]
S3 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys [2013-06-01 37632]
S3 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys [2012-07-26 51200]
S3 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys [2013-03-22 29952]
S3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Bluetooth Serial Communications Driver; C:\Windows\System32\drivers\bthmodem.sys [2012-07-26 65536]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\Windows\System32\drivers\circlass.sys [2012-07-26 45056]
S3 dmvsc;dmvsc; C:\Windows\System32\drivers\dmvsc.sys [2012-07-26 33280]
S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Ovladače zvuku považované společností Microsoft za důvěryhodné; C:\Windows\system32\drivers\drmkaud.sys [2013-03-22 5632]
S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\Windows\System32\drivers\errdev.sys [2012-07-26 10240]
S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys [2012-07-26 194560]
S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\Windows\System32\drivers\fdc.sys [2012-07-26 30720]
S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys [2012-07-26 34816]
S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\Windows\System32\drivers\flpydisk.sys [2012-07-26 24576]
S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys [2012-07-26 57584]
S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\Windows\System32\drivers\fxppm.sys [2013-03-22 22528]
S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V – Čítač generací; C:\Windows\System32\drivers\vmgencounter.sys [2012-07-26 12288]
S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\Windows\System32\Drivers\msgpioclx.sys [2013-03-22 120040]
S3 HdAudAddService;@hdaudio.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2013-03-22 341504]
S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\Windows\System32\drivers\HidBatt.sys [2012-07-26 27136]
S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\Windows\System32\drivers\hidbth.sys [2013-04-09 95744]
S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\Windows\System32\drivers\hidi2c.sys [2012-11-20 39936]
S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\Windows\System32\drivers\hidir.sys [2012-07-26 46080]
S3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\Windows\System32\drivers\hidusb.sys [2013-04-09 27648]
S3 hyperkbd;hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys [2012-07-26 11776]
S3 HyperVideo;HyperVideo; C:\Windows\system32\DRIVERS\HyperVideo.sys [2012-07-26 24576]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-06-02 10627744]
S3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\Windows\System32\drivers\intelppm.sys [2013-03-22 89088]
S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\Windows\system32\DRIVERS\ipfltdrv.sys [2012-07-26 89088]
S3 IPMIDRV;IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys [2012-07-26 78336]
S3 IPNAT;IP Network Address Translator; C:\Windows\System32\drivers\ipnat.sys [2012-07-26 145920]
S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\Windows\system32\drivers\irenum.sys [2012-07-26 17920]
S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\Windows\System32\drivers\msiscsi.sys [2013-03-22 277736]
S3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\Windows\System32\drivers\kbdhid.sys [2012-07-26 29184]
S3 Modem;Modem; C:\Windows\system32\drivers\modem.sys [2012-07-26 40448]
S3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\Windows\System32\drivers\mouhid.sys [2013-03-02 26112]
S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\Windows\system32\drivers\mrxdav.sys [2012-07-26 141312]
S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2012-07-26 129536]
S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;GPIO Buttons Driver; C:\Windows\System32\drivers\msgpiowin32.sys [2013-03-22 28904]
S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys [2012-07-26 8704]
S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\Windows\System32\drivers\mshidumdf.sys [2012-07-26 10752]
S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2012-07-26 11008]
S3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\Windows\system32\DRIVERS\mslldp.sys [2012-07-26 68608]
S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2012-07-26 7168]
S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2012-07-26 6912]
S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys [2012-07-26 390896]
S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2012-07-26 8192]
S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\Windows\System32\drivers\MTConfig.sys [2012-07-26 14848]
S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\Windows\system32\DRIVERS\ndiscap.sys [2012-07-26 46592]
S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [2012-07-26 126464]
S3 NDISWANLEGACY;@%systemroot%\system32\rascfg.dll,-32014; C:\Windows\system32\DRIVERS\ndiswan.sys [2012-07-26 174080]
S3 Parport;@msports.inf,%Parport.SVCDESC%;Parallel port driver; C:\Windows\System32\drivers\parport.sys [2012-07-26 105984]
S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\Windows\System32\drivers\processr.sys [2013-03-22 87552]
S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys [2012-07-26 46592]
S3 RasAcd;Remote Access Auto Connection Driver; C:\Windows\System32\DRIVERS\rasacd.sys [2012-07-26 16384]
S3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\Windows\System32\drivers\rdpdr.sys [2012-07-26 179712]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-03-22 27880]
S3 RDPWD;RDP Winstation Driver; C:\Windows\system32\drivers\RDPWD.sys [2012-07-26 208384]
S3 RTSPER;Realtek PCIe CardReader Driver; C:\Windows\system32\DRIVERS\RtsPer.sys [2013-02-02 448072]
S3 s3cap;s3cap; C:\Windows\System32\drivers\vms3cap.sys [2012-07-26 7168]
S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys [2012-07-26 36864]
S3 sdbus;sdbus; C:\Windows\System32\drivers\sdbus.sys [2013-06-01 194816]
S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\Windows\System32\drivers\sdstor.sys [2013-03-22 56552]
S3 SerCx;Serial UART Support Library; C:\Windows\system32\drivers\SerCx.sys [2012-07-26 62976]
S3 Serenum;@msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver; C:\Windows\System32\drivers\serenum.sys [2012-07-26 23040]
S3 Serial;@msports.inf,%Serial.SVCDESC%;Serial port driver; C:\Windows\System32\drivers\serial.sys [2012-07-26 76800]
S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\Windows\System32\drivers\sermouse.sys [2012-07-26 27136]
S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\Windows\System32\drivers\sfloppy.sys [2012-07-26 16896]
S3 SmbDrv;SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [2013-02-06 28400]
S3 SmbDrvI;SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [2013-02-06 31984]
S3 SpbCx;Simple Peripheral Bus Support Library; C:\Windows\system32\drivers\SpbCx.sys [2012-07-26 59392]
S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys [2013-06-01 2233600]
S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\Windows\System32\drivers\terminpt.sys [2012-07-26 36592]
S3 TPM;@tpm.inf,%TPM%;TPM; C:\Windows\system32\drivers\tpm.sys [2013-03-02 148712]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-07-26 57344]
S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\Windows\System32\drivers\TsUsbGD.sys [2012-07-26 30208]
S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\Windows\System32\drivers\uaspstor.sys [2012-07-26 97008]
S3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Microsoft UMPass Driver; C:\Windows\System32\drivers\umpass.sys [2012-07-26 11776]
S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\Windows\System32\drivers\usbcir.sys [2012-07-26 99328]
S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\Windows\System32\drivers\usbprint.sys [2012-07-26 25600]
S3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;Ovladač velkokapacitního paměťového zařízení USB; C:\Windows\System32\drivers\USBSTOR.SYS [2012-07-26 119024]
S3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\System32\drivers\usbuhci.sys [2013-03-22 32256]
S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\Windows\system32\drivers\VerifierExt.sys [2012-07-26 106224]
S3 vhdmp;vhdmp; C:\Windows\System32\drivers\vhdmp.sys [2013-03-02 495336]
S3 VMBusHID;VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys [2012-07-26 22144]
S3 vpci;@wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus; C:\Windows\System32\drivers\vpci.sys [2012-07-26 67824]
S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\Windows\System32\drivers\wacompen.sys [2012-07-26 27008]
S3 Wanarp;@%systemroot%\system32\rascfg.dll,-32011; C:\Windows\system32\DRIVERS\wanarp.sys [2013-04-09 83456]
S3 WdBoot;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390; C:\Windows\system32\drivers\WdBoot.sys [2013-01-29 35232]
S3 WdFilter;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-330; C:\Windows\system32\drivers\WdFilter.sys [2013-01-29 230904]
S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys [2012-07-26 33520]
S3 wpcfltr;Family Safety Filter Driver; C:\Windows\system32\DRIVERS\wpcfltr.sys [2012-07-26 45056]
S4 udfs;udfs; C:\Windows\system32\DRIVERS\udfs.sys [2012-07-26 321024]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

log z RSIT (3/3)

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [2009-11-18 98208]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-02-26 240640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-02-26 361984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]
R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 DcomLaunch;@combase.dll,-5012; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-03-21 1341664]
R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 EventSystem;@comres.dll,-2450; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 hpsrv;@oem14.inf,%hpservice_desc%;HP Service; C:\Windows\system32\Hpservice.exe [2013-03-01 43320]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [2013-02-01 1039160]
R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 RpcSs;@combase.dll,-5010; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2013-02-20 239176]
R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\Windows\system32\lsass.exe [2013-03-22 35840]
R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\Windows\System32\spoolsv.exe [2012-07-26 769024]
R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R2 Wcmsvc;@%SystemRoot%\System32\wcmsvc.dll,-4097; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 Winmgmt;@%Systemroot%\system32\wbem\wmisvc.dll,-205; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 WlanSvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R2 WMPNetworkSvc;@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101; C:\Program Files\Windows Media Player\wmpnetwk.exe [2013-03-22 1314816]
R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-11-05 1001376]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-05-31 641352]
R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe [2013-03-22 35840]
R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe [2013-03-22 29696]
R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
R3 wlidsvc;@%SystemRoot%\system32\wlidsvc.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-16 116648]
S2 SharedAccess;@%SystemRoot%\system32\ipnathlp.dll,-106; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe [2012-07-26 4881408]
S2 WinDefend;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310; C:\Program Files\Windows Defender\MsMpEng.exe [2013-01-29 14920]
S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\Windows\System32\alg.exe [2012-07-26 94208]
S3 AllUserInstallAgent;@%SystemRoot%\System32\AUInstallAgent.dll,-101; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-12 51648]
S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 Browser;@%systemroot%\system32\browser.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 COMSysApp;@comres.dll,-947; C:\Windows\system32\dllhost.exe [2012-07-26 10752]
S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 Eaphost;@%systemroot%\system32\eapsvc.dll,-1; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe [2013-03-22 35840]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2012-07-26 669696]
S3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-27 43616]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-16 116648]
S3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe [2013-03-22 35840]
S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 MSDTC;@comres.dll,-2797; C:\Windows\System32\msdtc.exe [2012-07-26 144384]
S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\Windows\system32\msiexec.exe [2012-07-26 124416]
S3 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\Windows\system32\lsass.exe [2013-03-22 35840]
S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2012-07-26 20992]
S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 PrintNotify;@C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll,-1; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\Windows\system32\locator.exe [2012-07-26 9728]
S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe [2012-07-26 14848]
S3 stisvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe [2013-05-16 98304]
S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe [2012-07-26 40960]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe [2013-06-01 680960]
S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 vmicrdv;@%systemroot%\system32\vmicres.dll,-601; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 vmicshutdown;@%systemroot%\system32\vmicres.dll,-301; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 vmictimesync;@%systemroot%\system32\vmicres.dll,-401; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 vmicvss;@%systemroot%\system32\vmicres.dll,-501; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 VSS;@%systemroot%\system32\vssvc.exe,-102; C:\Windows\system32\vssvc.exe [2013-05-04 1483776]
S3 W32Time;@%SystemRoot%\system32\w32time.dll,-200; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2012-07-26 1616896]
S3 WbioSrvc;@%systemroot%\system32\wbiosrvc.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 wcncsvc;@%SystemRoot%\system32\wcncsvc.dll,-3; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 WcsPlugInService;@%SystemRoot%\system32\WcsPlugInService.dll,-200; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 WebClient;@%systemroot%\system32\webclnt.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 Wecsvc;@%SystemRoot%\system32\wecsvc.dll,-200; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 wercplsupport;@%SystemRoot%\System32\wercplsupport.dll,-101; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 WerSvc;@%SystemRoot%\System32\wersvc.dll,-100; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 WiaRpc;@%SystemRoot%\system32\wiarpc.dll,-2; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 WinRM;@%Systemroot%\system32\wsmsvc.dll,-101; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S3 wmiApSrv;@%Systemroot%\system32\wbem\wmiapsrv.exe,-110; C:\Windows\system32\wbem\WmiApSrv.exe [2012-07-26 198144]
S3 WPCSvc;@%SystemRoot%\system32\wpcsvc.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S3 WPDBusEnum;@%SystemRoot%\system32\wpdbusenum.dll,-100; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S4 NetTcpPortSharing;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8201; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-12 139696]
S4 RemoteAccess;@%Systemroot%\system32\mprdim.dll,-200; C:\Windows\System32\svchost.exe [2013-03-22 29696]
S4 RemoteRegistry;@regsvc.dll,-1; C:\Windows\system32\svchost.exe [2013-03-22 29696]
S4 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\Windows\system32\svchost.exe [2013-03-22 29696]

-----------------EOF-----------------

Combofix.log

ComboFix 13-07-27.01 - Monika . 07. 2013 8:34.1.4 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.7389.5676 [GMT 2:00]
Spuštěný z: c:\users\Monika\Downloads\ComboFix.exe
AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\hosts\hoSTs-bho.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-28 do 2013-07-30 )))))))))))))))))))))))))))))))
.
.
2013-07-30 06:41 . 2013-07-30 06:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-27 17:08 . 2013-07-27 17:08 -------- d-----w- c:\users\Public\CyberLink
2013-07-26 13:11 . 2013-07-26 13:11 289968 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10211.bin
2013-07-22 21:31 . 2013-07-22 21:32 -------- d-----w- c:\program files (x86)\The KMPlayer
2013-07-19 22:13 . 2012-08-21 11:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2013-07-19 22:12 . 2013-07-19 22:12 -------- d-----w- c:\program files\iPod
2013-07-19 22:12 . 2013-07-19 22:13 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-19 22:12 . 2013-07-19 22:13 -------- d-----w- c:\program files\iTunes
2013-07-19 22:12 . 2013-07-19 22:13 -------- d-----w- c:\program files (x86)\iTunes
2013-07-19 22:12 . 2013-07-19 22:12 -------- d-----w- c:\programdata\Apple Computer
2013-07-19 22:12 . 2013-07-19 22:12 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-07-19 22:11 . 2013-07-19 22:11 -------- d-----w- c:\program files\Common Files\Apple
2013-07-19 22:11 . 2013-07-19 22:12 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-07-17 21:24 . 2013-06-21 05:04 19187712 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-07-17 21:24 . 2013-06-21 04:46 18523648 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-07-17 21:23 . 2013-05-15 22:35 144384 ----a-w- c:\windows\system32\tssdisai.dll
2013-07-17 21:20 . 2012-11-20 05:24 1164800 ----a-w- c:\windows\SysWow64\Display.dll
2013-07-17 21:20 . 2012-11-20 05:17 1184256 ----a-w- c:\windows\system32\Display.dll
2013-07-17 21:20 . 2012-11-20 05:02 6656 ----a-w- c:\windows\SysWow64\KBDKURD.DLL
2013-07-17 21:20 . 2012-11-20 04:59 7168 ----a-w- c:\windows\system32\KBDKURD.DLL
2013-07-17 21:20 . 2012-11-08 04:25 523776 ----a-w- c:\windows\SysWow64\WSShared.dll
2013-07-17 21:20 . 2012-11-08 04:25 143872 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.dll
2013-07-17 21:20 . 2012-11-08 04:25 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 21:20 . 2012-11-08 04:22 641536 ----a-w- c:\windows\system32\WSShared.dll
2013-07-17 21:20 . 2012-11-08 04:22 198656 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.dll
2013-07-17 21:20 . 2012-11-08 04:22 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 21:07 . 2013-06-27 22:04 78200 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-17 21:07 . 2013-06-27 22:04 693112 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-17 21:01 . 2013-07-17 21:10 -------- d-----r- c:\windows\BrowserChoice
2013-07-17 17:45 . 2013-06-23 22:41 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-07-17 17:27 . 2013-07-17 17:27 -------- d-----w- c:\programdata\Age of Empires 3
2013-07-17 17:16 . 2005-02-05 17:45 3544272 ----a-w- c:\windows\system32\d3dx9_24.dll
2013-07-17 15:46 . 2013-04-10 22:35 2035200 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2013-07-17 15:46 . 2013-04-11 04:12 1029632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\journal.dll
2013-07-17 15:46 . 2013-04-11 04:12 1413632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\InkObj.dll
2013-07-17 15:46 . 2013-04-10 22:35 1617920 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-17 15:46 . 2013-04-10 22:35 1318912 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-17 15:46 . 2013-04-10 22:35 1306112 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-17 15:46 . 2013-04-10 22:35 1272320 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-17 15:43 . 2013-04-16 02:34 1455368 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-07-17 15:41 . 2012-11-10 04:22 122880 ----a-w- c:\windows\system32\VmHostAI.dll
2013-07-17 15:41 . 2012-11-10 04:22 126976 ----a-w- c:\windows\system32\RDWebAI.dll
2013-07-17 15:41 . 2012-11-10 04:20 135680 ----a-w- c:\windows\system32\appserverai.dll
2013-07-17 15:41 . 2012-11-10 04:23 132608 ----a-w- c:\windows\SysWow64\poqexec.exe
2013-07-17 15:41 . 2012-11-10 04:23 148480 ----a-w- c:\windows\system32\poqexec.exe
2013-07-17 15:35 . 2013-05-30 23:14 4036096 ----a-w- c:\windows\system32\win32k.sys
2013-07-17 15:28 . 2013-03-02 09:59 411880 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-07-17 15:19 . 2013-04-23 22:55 1889280 ----a-w- c:\windows\system32\crypt32.dll
2013-07-17 15:19 . 2013-04-23 23:13 1013248 ----a-w- c:\windows\SysWow64\certutil.exe
2013-07-17 15:19 . 2013-04-23 23:12 1569792 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-07-17 15:19 . 2013-04-23 22:56 1255936 ----a-w- c:\windows\system32\certutil.exe
2013-07-17 15:19 . 2013-04-23 23:12 109056 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-07-17 15:19 . 2013-04-23 22:55 68096 ----a-w- c:\windows\system32\cryptsvc.dll
2013-07-17 15:19 . 2013-04-23 22:55 141312 ----a-w- c:\windows\system32\cryptnet.dll
2013-07-17 15:05 . 2013-06-01 09:21 595968 ----a-w- c:\windows\system32\qedit.dll
2013-07-17 15:05 . 2013-06-01 09:25 496640 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-17 15:05 . 2012-10-24 03:25 26624 ----a-w- c:\windows\system32\ReAgentc.exe
2013-07-17 15:05 . 2012-10-24 02:48 24064 ----a-w- c:\windows\SysWow64\ReAgentc.exe
2013-07-17 15:02 . 2013-03-02 08:23 375808 ----a-w- c:\windows\SysWow64\ReAgent.dll
2013-07-17 15:02 . 2013-03-02 02:44 1011200 ----a-w- c:\windows\system32\reseteng.dll
2013-07-17 15:02 . 2012-12-15 04:55 443392 ----a-w- c:\windows\system32\ReAgent.dll
2013-07-17 15:00 . 2013-02-12 00:17 20992 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-07-17 14:52 . 2013-06-11 23:25 19238912 ----a-w- c:\windows\system32\mshtml.dll
2013-07-17 14:50 . 2013-03-06 07:10 112872 ----a-w- c:\windows\system32\consent.exe
2013-07-17 14:50 . 2013-03-06 06:31 222208 ----a-w- c:\windows\system32\shdocvw.dll
2013-07-17 14:50 . 2013-03-06 06:29 70144 ----a-w- c:\windows\system32\appinfo.dll
2013-07-17 14:50 . 2013-05-04 06:59 2842112 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-17 14:50 . 2013-05-04 04:57 2620928 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-17 14:50 . 2013-05-15 02:25 888320 ----a-w- c:\windows\system32\autochk.exe
2013-07-17 14:50 . 2013-05-15 02:25 542208 ----a-w- c:\windows\system32\untfs.dll
2013-07-17 14:50 . 2013-05-15 02:24 793088 ----a-w- c:\windows\SysWow64\autochk.exe
2013-07-17 14:50 . 2013-05-15 02:24 482816 ----a-w- c:\windows\SysWow64\untfs.dll
2013-07-17 14:50 . 2013-05-30 23:24 1257472 ----a-w- c:\windows\system32\kernel32.dll
2013-07-17 14:47 . 2013-05-23 23:01 1300992 ----a-w- c:\windows\system32\gdi32.dll
2013-07-17 14:47 . 2013-05-23 22:27 1022464 ----a-w- c:\windows\SysWow64\gdi32.dll
2013-07-17 14:47 . 2013-04-27 05:20 733184 ----a-w- c:\windows\system32\win32spl.dll
2013-07-17 14:37 . 2013-03-15 00:17 861184 ----a-w- c:\windows\system32\drivers\http.sys
2013-07-17 14:37 . 2013-03-22 03:49 2382336 ----a-w- c:\windows\SysWow64\esent.dll
2013-07-17 14:37 . 2013-03-21 22:47 2851840 ----a-w- c:\windows\system32\esent.dll
2013-07-17 14:35 . 2005-05-26 13:34 3767504 ----a-w- c:\windows\system32\d3dx9_26.dll
2013-07-17 14:35 . 2005-05-26 13:34 2297552 ----a-w- c:\windows\SysWow64\d3dx9_26.dll
2013-07-17 14:35 . 2005-03-18 15:19 3823312 ----a-w- c:\windows\system32\d3dx9_25.dll
2013-07-17 14:15 . 2013-07-17 14:15 -------- d-----w- c:\program files (x86)\Microsoft Games
2013-07-17 13:58 . 2013-07-17 13:58 -------- d-----w- c:\program files\ESET
2013-07-17 13:31 . 2013-07-17 13:34 -------- d-----w- c:\program files\Phoenix
2013-07-17 13:14 . 2013-07-17 13:43 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2013-07-17 13:13 . 2013-07-17 13:13 -------- d-----w- c:\program files\WinRAR
2013-07-17 12:40 . 2013-07-30 06:41 -------- d-----w- c:\program files (x86)\hosts
2013-07-17 12:28 . 2013-07-17 12:38 -------- d-----w- c:\program files (x86)\TornTV.com
2013-07-17 12:16 . 2013-07-17 12:16 -------- d-----w- c:\programdata\Babylon
2013-07-17 12:16 . 2013-07-17 13:11 -------- d-----w- c:\programdata\Tarma Installer
2013-07-17 12:16 . 2013-07-17 15:32 -------- d-----w- c:\program files (x86)\FTDownloader.com
2013-07-17 12:03 . 2013-07-17 12:03 -------- d-----w- c:\program files (x86)\IrfanView
2013-07-17 11:57 . 2013-07-17 11:57 -------- d-----w- c:\program files (x86)\BurnAware Free
2013-07-17 11:45 . 2013-07-17 11:45 -------- d-----w- c:\program files (x86)\Seznam.cz
2013-07-17 11:43 . 2013-07-17 11:43 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-07-17 11:43 . 2013-07-17 11:43 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2013-07-17 11:42 . 2013-07-17 15:19 -------- d-----w- c:\programdata\DAEMON Tools Lite
2013-07-17 01:01 . 2013-07-17 01:01 50784 ----a-w- c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2013-07-17 01:01 . 2013-07-17 01:01 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2013-07-16 15:38 . 2013-07-16 15:39 -------- d-----w- c:\program files (x86)\Google
2013-07-16 15:23 . 2013-07-17 21:15 -------- d-----w- c:\users\Monika
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-16 15:23 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-07-03 3673184]
"cz.seznam.software.autoupdate"="c:\users\Monika\AppData\Roaming\Seznam.cz\szninstall.exe" [2013-05-16 1062472]
"cz.seznam.software.szndesktop"="c:\users\Monika\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" [2013-04-12 92664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2013-02-25 642656]
"AccelerometerSysTrayApplet"="c:\program files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe" [2013-03-01 77088]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-07-13 93296]
"HPMessageService"="c:\program files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe" [2013-02-25 1045304]
"HP CoolSense"="c:\program files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" [2012-11-05 1343904]
"seznam-listicka-distribuce"="c:\program files (x86)\Seznam.cz\distribution\szninstall.exe" [2013-05-16 1062472]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R3 RTSPER;Realtek PCIe CardReader Driver;c:\windows\system32\DRIVERS\RtsPer.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPer.sys [x]
R3 SmbDrv;SmbDrv;c:\windows\System32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\System32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 amd_sata;amd_sata;c:\windows\System32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\System32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\System32\drivers\amdkmpfd.sys;c:\windows\SYSNATIVE\drivers\amdkmpfd.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.EXE;c:\program files\Realtek\Audio\HDA\AERTSr64.EXE [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [x]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW86.sys;c:\windows\SYSNATIVE\drivers\AtihdW86.sys [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;c:\windows\system32\DRIVERS\rtwlane.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlane.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
apphost REG_MULTI_SZ apphostsvc
iissvcs REG_MULTI_SZ w3svc was
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-16 15:39 1173456 ----a-w- c:\program files (x86)\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-07-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-16 15:38]
.
2013-07-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-16 15:38]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-03-08 7156296]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=13415
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
mStart Page = hxxp://www.bing.com?pc=HPNTDFJS
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.5
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{11111111-1111-1111-1111-110311531182} - c:\program files (x86)\hosts\hosts-bho.dll
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
Wow6432Node-HKCU-Run-SearchProtection - c:\users\Monika\AppData\Roaming\Search Protection\SearchProtection.EXE
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-bi_uninstaller - c:\users\Monika\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2013-07-30 08:44:58
ComboFix-quarantined-files.txt 2013-07-30 06:44
.
Před spuštěním: 907 578 273 792 bytes free
Po spuštění: 907 579 604 992 bytes free
.
- - End Of File - - EB08C990E4FFF7D66485ED8C0B10E2DA
5FB38429D5D77768867C76DCBDB35194

No a jeste CF na W8, ten je tam nove a jeste neni zcela poradne otestovan...Mela jste stesti...

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Prohledat
• Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte

# AdwCleaner v2.306 - Log vytvooen 30/07/2013 v 09:40:54
# Aktualizováno 19/07/2013 Xplode
# Operaení systém : Windows 8 (64 bits)
# Uživatel : Monika - MONIKA-HP
# Spuštin systém : Normální
# Spuštino z : C:\Users\Monika\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\FTDownloader.com
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\Tarma Installer
Složka Nalezeno : C:\Users\Monika\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com
Složka Nalezeno : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Složka Nalezeno : C:\Users\Monika\AppData\Roaming\search protection

***** [Registry] *****

Klíe Nalezeno : HKCU\Software\1ClickDownload
Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Crossrider
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\BI
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\InstalledBrowserExtensions
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0035382.BHO
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0035382.Sandbox
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CrossriderApp0035382.Sandbox.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110311531182}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220322532282}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550355535582}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660366536682}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531182}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355535582}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536682}
Klíe Nalezeno : HKU\S-1-5-21-1185667902-1444087626-541321960-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16537

[OK] Registry jsou eisté.

-\\ Google Chrome v28.0.1500.72

Soubor : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Preferences

Nalezeno [l.2598] : urls_to_restore_on_startup = [ "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=D0E6B8763F24A82C&affID=119781&tsp=4946" ]

*************************

AdwCleaner[R1].txt - [3364 octets] - [30/07/2013 09:39:57]
AdwCleaner[R2].txt - [3301 octets] - [30/07/2013 09:40:54]

########## EOF - C:\AdwCleaner[R2].txt - [3361 octets] ##########

Spustte znovu AdwCleaner

• Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
• Kliknete na Smazat
• PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem

# AdwCleaner v2.306 - Log vytvooen 30/07/2013 v 09:49:52
# Aktualizováno 19/07/2013 Xplode
# Operaení systém : Windows 8 (64 bits)
# Uživatel : Monika - MONIKA-HP
# Spuštin systém : Normální
# Spuštino z : C:\Users\Monika\Desktop\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files (x86)\FTDownloader.com
Složka Vymazáno : C:\ProgramData\Babylon
Složka Vymazáno : C:\ProgramData\Tarma Installer
Složka Vymazáno : C:\Users\Monika\AppData\Roaming\Babylon
Složka Vymazáno : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com
Složka Vymazáno : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Složka Vymazáno : C:\Users\Monika\AppData\Roaming\search protection

***** [Registry] *****

Klíe Vymazáno : HKCU\Software\1ClickDownload
Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\Crossrider
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Vymazáno : HKCU\Software\BI
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\InstalledBrowserExtensions
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CrossriderApp0035382.BHO
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CrossriderApp0035382.Sandbox
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CrossriderApp0035382.Sandbox.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Klíe Vymazáno : HKLM\Software\PIP
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110311531182}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220322532282}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550355535582}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660366536682}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311531182}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355535582}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536682}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16537

[OK] Registry jsou eisté.

-\\ Google Chrome v28.0.1500.72

Soubor : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Preferences

Vymazáno [l.2598] : urls_to_restore_on_startup = [ "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=D0E6B8763F2[...]

*************************

AdwCleaner[R1].txt - [3364 octets] - [30/07/2013 09:39:57]
AdwCleaner[R2].txt - [3424 octets] - [30/07/2013 09:40:54]
AdwCleaner[S1].txt - [3178 octets] - [30/07/2013 09:49:52]

########## EOF - C:\AdwCleaner[S1].txt - [3238 octets] ##########

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

• Ukoncete vsechny programy
• Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
• Pockejte na dokonceni PreScanu
• Zvolte moznost Prohledat (scan)
• Po dokonceni skenu kliknete na Zpráva (Report)- otevre se log, ten sem vlozte
• Detailni postup vc. obrazku mate zde http://forum.viry.cz/viewtopic.php?f=24&t=120452

RogueKiller V8.6.4 [Jul 29 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 8 (6.2.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : Monika [Práva správce]
Mód : Kontrola -- Datum : 07/30/2013 10:03:56
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : cz.seznam.software.autoupdate ("C:\Users\Monika\AppData\Roaming\Seznam.cz\szninstall.exe" -c [7]) -> NALEZENO
[RUN][SUSP PATH] HKCU\[...]\Run : cz.seznam.software.szndesktop ("C:\Users\Monika\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q [7]) -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-1185667902-1444087626-541321960-1002\[...]\Run : cz.seznam.software.autoupdate ("C:\Users\Monika\AppData\Roaming\Seznam.cz\szninstall.exe" -c [7]) -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-1185667902-1444087626-541321960-1002\[...]\Run : cz.seznam.software.szndesktop ("C:\Users\Monika\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q [7]) -> NALEZENO
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST1000LM 024 HN-M101MBB SATA Disk Device +++++
--- User ---
[MBR] bc9b768535bb231cf1888266a5ef7cff
[BSP] 98c32b21db4f4be79393ae5617a021b8 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 953869 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_07302013_100356.txt >>

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Registry::
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "DAEMON Tools Lite"=-
  "cz.seznam.software.autoupdate"=-
  "cz.seznam.software.szndesktop"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "RemoteControl10"=-
  "seznam-listicka-distribuce"=-
  "iTunesHelper"=-
  
  Folder::
  c:\program files (x86)\hosts
  c:\users\Monika\AppData\Roaming\Search Protection
  
  RegLock::
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  
  File::
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  
  ClearJavaCache::
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

ComboFix 13-07-30.02 - Monika . 07. 2013 14:13:25.2.4 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.7389.5928 [GMT 2:00]
Spuštěný z: c:\users\Monika\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Monika\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\hosts
c:\program files (x86)\hosts\background.html
c:\program files (x86)\hosts\hosts-bg.exe
c:\program files (x86)\hosts\hosts-buttonutil.dll
c:\program files (x86)\hosts\hosts-buttonutil.exe
c:\program files (x86)\hosts\hosts-buttonutil64.dll
c:\program files (x86)\hosts\hosts-buttonutil64.exe
c:\program files (x86)\hosts\hosts-codedownloader.exe
c:\program files (x86)\hosts\hosts-helper.exe
c:\program files (x86)\hosts\hosts.ico
c:\program files (x86)\hosts\Installer.log
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-28 do 2013-07-30 )))))))))))))))))))))))))))))))
.
.
2013-07-30 12:20 . 2013-07-30 12:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-30 06:55 . 2013-07-30 07:14 -------- d-----w- c:\program files\trend micro
2013-07-30 06:55 . 2013-07-30 06:55 -------- d-----w- C:\rsit
2013-07-30 06:49 . 2013-07-30 06:51 -------- d-----w- c:\windows\system32\MRT
2013-07-27 17:08 . 2013-07-27 17:08 -------- d-----w- c:\users\Public\CyberLink
2013-07-26 13:11 . 2013-07-26 13:11 289968 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10211.bin
2013-07-22 21:31 . 2013-07-22 21:32 -------- d-----w- c:\program files (x86)\The KMPlayer
2013-07-19 22:13 . 2012-08-21 11:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2013-07-19 22:12 . 2013-07-19 22:12 -------- d-----w- c:\program files\iPod
2013-07-19 22:12 . 2013-07-19 22:13 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-19 22:12 . 2013-07-19 22:13 -------- d-----w- c:\program files\iTunes
2013-07-19 22:12 . 2013-07-19 22:13 -------- d-----w- c:\program files (x86)\iTunes
2013-07-19 22:12 . 2013-07-19 22:12 -------- d-----w- c:\programdata\Apple Computer
2013-07-19 22:12 . 2013-07-19 22:12 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-07-19 22:11 . 2013-07-19 22:11 -------- d-----w- c:\program files\Common Files\Apple
2013-07-19 22:11 . 2013-07-19 22:12 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-07-17 21:24 . 2013-06-21 05:04 19187712 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-07-17 21:24 . 2013-06-21 04:46 18523648 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2013-07-17 21:23 . 2013-05-15 22:35 144384 ----a-w- c:\windows\system32\tssdisai.dll
2013-07-17 21:20 . 2012-11-20 05:24 1164800 ----a-w- c:\windows\SysWow64\Display.dll
2013-07-17 21:20 . 2012-11-20 05:17 1184256 ----a-w- c:\windows\system32\Display.dll
2013-07-17 21:20 . 2012-11-20 05:02 6656 ----a-w- c:\windows\SysWow64\KBDKURD.DLL
2013-07-17 21:20 . 2012-11-20 04:59 7168 ----a-w- c:\windows\system32\KBDKURD.DLL
2013-07-17 21:20 . 2012-11-08 04:25 523776 ----a-w- c:\windows\SysWow64\WSShared.dll
2013-07-17 21:20 . 2012-11-08 04:25 143872 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.dll
2013-07-17 21:20 . 2012-11-08 04:25 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 21:20 . 2012-11-08 04:22 641536 ----a-w- c:\windows\system32\WSShared.dll
2013-07-17 21:20 . 2012-11-08 04:22 198656 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.dll
2013-07-17 21:20 . 2012-11-08 04:22 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-07-17 21:07 . 2013-06-27 22:04 78200 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-17 21:07 . 2013-06-27 22:04 693112 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-17 21:01 . 2013-07-17 21:10 -------- d-----r- c:\windows\BrowserChoice
2013-07-17 17:27 . 2013-07-17 17:27 -------- d-----w- c:\programdata\Age of Empires 3
2013-07-17 17:16 . 2005-02-05 17:45 3544272 ----a-w- c:\windows\system32\d3dx9_24.dll
2013-07-17 15:46 . 2013-04-10 22:35 2035200 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2013-07-17 15:46 . 2013-04-11 04:12 1029632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\journal.dll
2013-07-17 15:46 . 2013-04-11 04:12 1413632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Ink\InkObj.dll
2013-07-17 15:46 . 2013-04-10 22:35 1617920 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-17 15:46 . 2013-04-10 22:35 1318912 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-17 15:46 . 2013-04-10 22:35 1306112 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-17 15:46 . 2013-04-10 22:35 1272320 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-17 15:43 . 2013-04-16 02:34 1455368 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-07-17 15:41 . 2012-11-10 04:22 122880 ----a-w- c:\windows\system32\VmHostAI.dll
2013-07-17 15:41 . 2012-11-10 04:22 126976 ----a-w- c:\windows\system32\RDWebAI.dll
2013-07-17 15:41 . 2012-11-10 04:20 135680 ----a-w- c:\windows\system32\appserverai.dll
2013-07-17 15:41 . 2012-11-10 04:23 132608 ----a-w- c:\windows\SysWow64\poqexec.exe
2013-07-17 15:41 . 2012-11-10 04:23 148480 ----a-w- c:\windows\system32\poqexec.exe
2013-07-17 15:35 . 2013-05-30 23:14 4036096 ----a-w- c:\windows\system32\win32k.sys
2013-07-17 15:28 . 2013-03-02 09:59 411880 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-07-17 15:19 . 2013-04-23 22:55 1889280 ----a-w- c:\windows\system32\crypt32.dll
2013-07-17 15:19 . 2013-04-23 23:13 1013248 ----a-w- c:\windows\SysWow64\certutil.exe
2013-07-17 15:19 . 2013-04-23 23:12 1569792 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-07-17 15:19 . 2013-04-23 22:56 1255936 ----a-w- c:\windows\system32\certutil.exe
2013-07-17 15:19 . 2013-04-23 23:12 109056 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-07-17 15:19 . 2013-04-23 22:55 68096 ----a-w- c:\windows\system32\cryptsvc.dll
2013-07-17 15:19 . 2013-04-23 22:55 141312 ----a-w- c:\windows\system32\cryptnet.dll
2013-07-17 15:05 . 2013-06-01 09:21 595968 ----a-w- c:\windows\system32\qedit.dll
2013-07-17 15:05 . 2013-06-01 09:25 496640 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-17 15:05 . 2012-10-24 03:25 26624 ----a-w- c:\windows\system32\ReAgentc.exe
2013-07-17 15:05 . 2012-10-24 02:48 24064 ----a-w- c:\windows\SysWow64\ReAgentc.exe
2013-07-17 15:02 . 2013-03-02 08:23 375808 ----a-w- c:\windows\SysWow64\ReAgent.dll
2013-07-17 15:02 . 2013-03-02 02:44 1011200 ----a-w- c:\windows\system32\reseteng.dll
2013-07-17 15:02 . 2012-12-15 04:55 443392 ----a-w- c:\windows\system32\ReAgent.dll
2013-07-17 15:00 . 2013-02-12 00:17 20992 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-07-17 14:52 . 2013-06-11 23:25 19238912 ----a-w- c:\windows\system32\mshtml.dll
2013-07-17 14:50 . 2013-03-06 07:10 112872 ----a-w- c:\windows\system32\consent.exe
2013-07-17 14:50 . 2013-03-06 06:31 222208 ----a-w- c:\windows\system32\shdocvw.dll
2013-07-17 14:50 . 2013-03-06 06:29 70144 ----a-w- c:\windows\system32\appinfo.dll
2013-07-17 14:50 . 2013-05-04 06:59 2842112 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-17 14:50 . 2013-05-04 04:57 2620928 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-17 14:50 . 2013-05-15 02:25 888320 ----a-w- c:\windows\system32\autochk.exe
2013-07-17 14:50 . 2013-05-15 02:25 542208 ----a-w- c:\windows\system32\untfs.dll
2013-07-17 14:50 . 2013-05-15 02:24 793088 ----a-w- c:\windows\SysWow64\autochk.exe
2013-07-17 14:50 . 2013-05-15 02:24 482816 ----a-w- c:\windows\SysWow64\untfs.dll
2013-07-17 14:50 . 2013-05-30 23:24 1257472 ----a-w- c:\windows\system32\kernel32.dll
2013-07-17 14:47 . 2013-05-23 23:01 1300992 ----a-w- c:\windows\system32\gdi32.dll
2013-07-17 14:47 . 2013-05-23 22:27 1022464 ----a-w- c:\windows\SysWow64\gdi32.dll
2013-07-17 14:47 . 2013-04-27 05:20 733184 ----a-w- c:\windows\system32\win32spl.dll
2013-07-17 14:37 . 2013-03-15 00:17 861184 ----a-w- c:\windows\system32\drivers\http.sys
2013-07-17 14:37 . 2013-03-22 03:49 2382336 ----a-w- c:\windows\SysWow64\esent.dll
2013-07-17 14:37 . 2013-03-21 22:47 2851840 ----a-w- c:\windows\system32\esent.dll
2013-07-17 14:35 . 2005-05-26 13:34 3767504 ----a-w- c:\windows\system32\d3dx9_26.dll
2013-07-17 14:35 . 2005-05-26 13:34 2297552 ----a-w- c:\windows\SysWow64\d3dx9_26.dll
2013-07-17 14:35 . 2005-03-18 15:19 3823312 ----a-w- c:\windows\system32\d3dx9_25.dll
2013-07-17 14:15 . 2013-07-17 14:15 -------- d-----w- c:\program files (x86)\Microsoft Games
2013-07-17 13:58 . 2013-07-17 13:58 -------- d-----w- c:\program files\ESET
2013-07-17 13:31 . 2013-07-17 13:34 -------- d-----w- c:\program files\Phoenix
2013-07-17 13:14 . 2013-07-17 13:43 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2013-07-17 13:13 . 2013-07-17 13:13 -------- d-----w- c:\program files\WinRAR
2013-07-17 12:03 . 2013-07-17 12:03 -------- d-----w- c:\program files (x86)\IrfanView
2013-07-17 11:57 . 2013-07-17 11:57 -------- d-----w- c:\program files (x86)\BurnAware Free
2013-07-17 11:45 . 2013-07-17 11:45 -------- d-----w- c:\program files (x86)\Seznam.cz
2013-07-17 11:43 . 2013-07-17 11:43 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-07-17 11:43 . 2013-07-17 11:43 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2013-07-17 11:42 . 2013-07-17 15:19 -------- d-----w- c:\programdata\DAEMON Tools Lite
2013-07-17 01:01 . 2013-07-17 01:01 50784 ----a-w- c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2013-07-17 01:01 . 2013-07-17 01:01 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2013-07-16 15:38 . 2013-07-16 15:39 -------- d-----w- c:\program files (x86)\Google
2013-07-16 15:23 . 2013-07-17 21:15 -------- d-----w- c:\users\Monika
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-16 15:23 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2013-02-25 642656]
"AccelerometerSysTrayApplet"="c:\program files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe" [2013-03-01 77088]
"HPMessageService"="c:\program files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe" [2013-02-25 1045304]
"HP CoolSense"="c:\program files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" [2012-11-05 1343904]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R3 RTSPER;Realtek PCIe CardReader Driver;c:\windows\system32\DRIVERS\RtsPer.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPer.sys [x]
R3 SmbDrv;SmbDrv;c:\windows\System32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x]
R3 SmbDrvI;SmbDrvI;c:\windows\System32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S0 amd_sata;amd_sata;c:\windows\System32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\System32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\System32\drivers\amdkmpfd.sys;c:\windows\SYSNATIVE\drivers\amdkmpfd.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\System32\drivers\dtsoftbus01.sys;c:\windows\SYSNATIVE\drivers\dtsoftbus01.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.EXE;c:\program files\Realtek\Audio\HDA\AERTSr64.EXE [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [x]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW86.sys;c:\windows\SYSNATIVE\drivers\AtihdW86.sys [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;c:\windows\system32\DRIVERS\rtwlane.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlane.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
apphost REG_MULTI_SZ apphostsvc
iissvcs REG_MULTI_SZ w3svc was
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-16 15:39 1173456 ----a-w- c:\program files (x86)\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-03-08 7156296]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/?clid=13415
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://www.bing.com?pc=HPNTDFJS
mStart Page = hxxp://www.bing.com?pc=HPNTDFJS
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.5
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe
c:\program files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
.
**************************************************************************
.
Celkový čas: 2013-07-30 14:27:46 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-07-30 12:27
ComboFix2.txt 2013-07-30 06:44
.
Před spuštěním: 904 445 665 280 bytes free
Po spuštění: 904 111 505 408 bytes free
.
- - End Of File - - E0FCC743DE1756342BF878A3B85ACFC2
5FB38429D5D77768867C76DCBDB35194

Jak se chova PC