VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Vir Policie ČR - log

https://forum.viry.cz:443/viewtopic.php?t=133847

Stránka 1 z 1

Vir Policie ČR - log

Napsal: 04 lis 2013 18:14
od meiilax
Ahojte, objevil se mi vir "Policie ČR", postupoval jsem dle návodu a v nouzovém režimu vytvořil pomocí FRST log. kouknete na něj ? Díky Milan

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013
Ran by Milan (administrator) on MILAN-PC on 04-11-2013 18:08:45
Running from L:\
Windows 8.1 Pro (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\cmd.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe"
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6470760 2012-05-08] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft Device Center\ipoint.exe [2004584 2012-06-26] (Microsoft Corporation)
HKLM\...\Run: [IntelliType Pro] - C:\Program Files\Microsoft Device Center\itype.exe [1464928 2012-06-26] (Microsoft Corporation)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [AtwtusbIcon] - C:\Windows\System32\AtwtusbIcon.exe [3593728 2012-09-10] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Photosmart 5510 series (NET)] - C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [Steam] - F:\Games\Steam\Steam.exe [1814440 2013-09-21] (Valve Corporation)
MountPoints2: {a11ab953-3c06-11e2-be65-806e6f6e6963} - "E:\stub.exe"
HKLM-x32\...\Run: [AdobeCS4ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ControlCenterCount] - C:\Program Files (x86)\MSI\ControlCenter\ControlCenterCount.exe [872448 2012-03-26] (MSI CO.,LTD.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [CStart8] - C:\Program Files (x86)\CStart8\CStart8Tray64.exe [3138656 2013-10-03] (Crawler.com)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-04] (AVAST Software)
AppInit_DLLs: [3568312 2013-11-04] ()
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Photosmart 5510 series (Síť).lnk
ShortcutTarget: Sledovat výstrahy inkoustu - HP Photosmart 5510 series (Síť).lnk -> C:\Program Files\HP\HP Photosmart 5510 series\bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... ORM=IE11SR
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

FireFox:
========
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\txlqgp5i.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: firebug - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\txlqgp5i.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: seo - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\txlqgp5i.default\Extensions\seo@profesional.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.94\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Extension: (avast! Online Security) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

==================== Services (Whitelisted) =================

S3 Apache2.2; C:\web\Apache Software Foundation\Apache2.2\bin\httpd.exe [18432 2012-02-01] (Apache Software Foundation)
S3 AppReadiness; C:\Windows\system32\AppReadiness.dll [533504 2013-09-30] (Microsoft Corporation)
S3 AppXSvc; C:\Windows\system32\appxdeploymentserver.dll [1302016 2013-09-30] (Microsoft Corporation)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-04] (AVAST Software)
S2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [111616 2013-08-22] (Microsoft Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S3 lfsvc; C:\Windows\System32\GeofenceMonitorService.dll [491520 2013-09-30] (Microsoft Corporation)
S4 MsKeyboardFilter; C:\Windows\System32\KeyboardFilterSvc.dll [90464 2013-09-30] (Microsoft Corporation)
S3 MySQL5; C:\web\MySQL\MySQL Server 5.5\my.ini [8905 2012-09-28] ()
S3 NcbService; C:\Windows\System32\ncbservice.dll [151040 2013-08-22] (Microsoft Corporation)
S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [130560 2013-08-22] (Microsoft Corporation)
S3 smphost; C:\Windows\System32\smphost.dll [13312 2013-08-22] (Microsoft Corporation)
S3 vmicguestinterface; C:\Windows\System32\ICSvc.dll [517120 2013-08-22] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [24576 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1581568 2013-09-30] (Microsoft Corporation)
S2 WTService; C:\WINDOWS\system32\atwtusb.exe [581120 2012-09-20] ()

==================== Drivers (Whitelisted) ====================

R0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S1 ahcache; C:\Windows\System32\DRIVERS\ahcache.sys [76800 2013-08-22] (Microsoft Corporation)
S2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-11-04] (AVAST Software)
S2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-11-04] (AVAST Software)
S1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-11-04] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-04] ()
S1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-11-04] (AVAST Software)
S1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-11-04] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-04] ()
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 FARMNTIO; c:\windows\system32\drivers\farmntio.sys [24664 2012-01-11] ()
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
R0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-09-30] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-09-30] (Microsoft Corporation)
R0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 moufiltr; C:\Windows\System32\drivers\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 MSI_MSIBIOS_010507; C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys [33592 2010-05-10] (Your Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
R0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
R3 vhidmini; C:\Windows\System32\drivers\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
U3 idsvc;

==================== NetSvcs (Whitelisted) ===================

NETSVC: lfsvc -> C:\Windows\System32\GeofenceMonitorService.dll (Microsoft Corporation)
NETSVC: MsKeyboardFilter -> C:\Windows\System32\KeyboardFilterSvc.dll (Microsoft Corporation)

==================== One Month Created Files and Folders ========

2013-11-04 18:04 - 2013-11-04 18:04 - 00000000 ____D C:\FRST
2013-11-04 12:26 - 2013-11-04 12:26 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 12:26 - 2013-11-04 12:26 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 12:26 - 2013-11-04 12:26 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00001984 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 12:26 - 2013-11-04 12:26 - 00000000 ____D C:\Users\Milan\AppData\Roaming\AVAST Software
2013-11-04 12:26 - 2013-11-04 12:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-11-04 12:25 - 2013-11-04 12:25 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-04 12:24 - 2013-11-04 12:25 - 87227720 _____ (AVAST Software) C:\Users\Milan\Downloads\avast_free_antivirus_setup (1).exe
2013-11-04 12:23 - 2013-11-04 12:24 - 87227720 _____ (AVAST Software) C:\Users\Milan\Downloads\avast_free_antivirus_setup.exe
2013-11-02 17:29 - 2013-11-02 17:43 - 3006192922 _____ C:\Users\Milan\Desktop\Dido Live At Brixton Academy FULL Concert HD SUBTITULOS ESPAÑOL 720p.avi
2013-10-29 14:34 - 2013-10-23 12:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-10-29 14:34 - 2013-10-23 09:59 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-10-26 14:03 - 2013-10-19 06:38 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-26 14:03 - 2013-10-19 05:52 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-26 14:03 - 2013-10-19 05:33 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-26 14:03 - 2013-10-19 04:59 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-26 14:03 - 2013-10-19 04:42 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-26 14:03 - 2013-10-19 04:19 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-26 14:03 - 2013-10-19 03:42 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-26 14:03 - 2013-10-19 03:27 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-23 20:06 - 2013-10-23 20:06 - 00001143 _____ C:\Users\Public\Desktop\Opera 17.lnk
2013-10-23 20:06 - 2013-10-23 20:06 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Opera Software
2013-10-23 20:06 - 2013-10-23 20:06 - 00000000 ____D C:\Users\Milan\AppData\Local\Opera Software
2013-10-20 20:13 - 2013-10-20 20:13 - 00000000 ____D C:\WINDOWS\PCHEALTH
2013-10-20 16:25 - 2013-10-26 14:29 - 00000000 ____D C:\Users\Milan\AppData\Local\Deployment
2013-10-20 15:34 - 2013-10-20 15:34 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-10-19 21:24 - 2013-10-19 22:39 - 00000000 ____D C:\Users\Milan\Documents\EuroScope
2013-10-19 21:24 - 2013-10-19 21:24 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EuroScope
2013-10-19 21:24 - 2013-10-19 21:24 - 00000000 ____D C:\Program Files (x86)\CsernakGergely
2013-10-19 21:21 - 2013-10-20 19:47 - 00000000 ____D C:\Users\Milan\Documents\VRC
2013-10-19 19:21 - 2013-10-19 19:21 - 00000000 ____D C:\Program Files (x86)\Navigraph
2013-10-19 19:11 - 2013-10-19 19:11 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-10-19 19:11 - 2013-10-19 19:11 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-10-19 19:11 - 2013-10-19 19:11 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-10-19 19:11 - 2013-10-19 19:11 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-10-19 19:04 - 2013-11-04 17:50 - 00003970 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4B4B6258-B3AE-4210-BFDC-46145CB0EE12}
2013-10-19 15:54 - 2013-10-19 15:54 - 00001424 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-19 15:53 - 2013-10-19 15:53 - 00000020 ___SH C:\Users\Milan\ntuser.ini
2013-10-19 12:37 - 2013-10-19 15:53 - 00000000 ___DC C:\WINDOWS\Panther
2013-10-19 12:35 - 2013-10-19 12:35 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-10-19 12:35 - 2013-10-19 12:35 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-10-19 12:35 - 2013-10-19 12:35 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-19 12:34 - 2013-10-19 12:34 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\Program Files\MSBuild
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-10-19 12:32 - 2013-10-19 11:57 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-10-19 12:32 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-10-19 12:32 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-19 12:32 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-10-19 12:32 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-10-19 12:32 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-19 12:32 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-10-19 12:05 - 2013-11-04 18:06 - 01754572 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-19 12:05 - 2013-11-04 18:00 - 01637468 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Šablony
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Poslední
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Okolní síť
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Dokumenty
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Data aplikací
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-10-19 11:50 - 2013-10-19 11:50 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2013-10-19 11:45 - 2013-10-19 11:45 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-10-19 11:44 - 2013-10-19 15:53 - 00000000 ____D C:\Users\Milan
2013-10-19 11:44 - 2013-10-19 12:04 - 00024768 _____ C:\WINDOWS\diagwrn.xml
2013-10-19 11:44 - 2013-10-19 12:04 - 00024768 _____ C:\WINDOWS\diagerr.xml
2013-10-19 11:44 - 2013-10-19 11:45 - 00000000 ___RD C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-10-19 11:44 - 2013-10-19 11:45 - 00000000 ___RD C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-19 11:44 - 2013-10-19 11:45 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Šablony
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Soubory cookie
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Poslední
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Okolní tiskárny
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Okolní síť
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Nabídka Start
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Dokumenty
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Documents\Obrázky
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Documents\Hudba
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Documents\Filmy
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Data aplikací
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\AppData\Local\Data aplikací
2013-10-19 11:44 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-10-19 11:40 - 2013-10-19 11:40 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-10-19 11:39 - 2013-10-19 11:39 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-10-19 11:39 - 2013-10-19 11:39 - 00000000 ____D C:\Program Files\Realtek
2013-10-19 11:39 - 2013-10-03 22:43 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2013-10-19 11:39 - 2013-10-03 22:43 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2013-10-14 12:52 - 2013-10-14 12:52 - 00001068 _____ C:\Users\Public\Desktop\VLC media player.lnk

==================== One Month Modified Files and Folders =======

2013-11-04 18:06 - 2013-10-19 12:05 - 01754572 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-04 18:06 - 2013-09-30 04:56 - 00741936 _____ C:\WINDOWS\system32\perfh005.dat
2013-11-04 18:06 - 2013-09-30 04:56 - 00152594 _____ C:\WINDOWS\system32\perfc005.dat
2013-11-04 18:04 - 2013-11-04 18:04 - 00000000 ____D C:\FRST
2013-11-04 18:02 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-04 18:02 - 2009-07-14 03:30 - 00000593 _____ C:\WINDOWS\win.ini
2013-11-04 18:01 - 2012-12-06 20:19 - 00000439 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2013-11-04 18:00 - 2013-10-19 12:05 - 01637468 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-04 18:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-04 17:57 - 2012-09-28 20:11 - 00000946 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-04 17:53 - 2013-09-29 20:01 - 00006440 _____ C:\WINDOWS\PFRO.log
2013-11-04 17:53 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-11-04 17:50 - 2013-10-19 19:04 - 00003970 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4B4B6258-B3AE-4210-BFDC-46145CB0EE12}
2013-11-04 17:46 - 2012-09-28 20:11 - 00000950 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-04 16:38 - 2012-12-02 00:10 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-649847758-3809949159-3738805346-1000
2013-11-04 12:26 - 2013-11-04 12:26 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-11-04 12:26 - 2013-11-04 12:26 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-11-04 12:26 - 2013-11-04 12:26 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-11-04 12:26 - 2013-11-04 12:26 - 00001984 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-11-04 12:26 - 2013-11-04 12:26 - 00000000 ____D C:\Users\Milan\AppData\Roaming\AVAST Software
2013-11-04 12:26 - 2013-11-04 12:26 - 00000000 ____D C:\Program Files\AVAST Software
2013-11-04 12:26 - 2012-09-29 09:41 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-11-04 12:25 - 2013-11-04 12:25 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-04 12:25 - 2013-11-04 12:24 - 87227720 _____ (AVAST Software) C:\Users\Milan\Downloads\avast_free_antivirus_setup (1).exe
2013-11-04 12:24 - 2013-11-04 12:23 - 87227720 _____ (AVAST Software) C:\Users\Milan\Downloads\avast_free_antivirus_setup.exe
2013-11-04 12:22 - 2012-09-28 20:25 - 00000000 ____D C:\Users\Milan\Documents\Soubory aplikace Outlook
2013-11-02 17:43 - 2013-11-02 17:29 - 3006192922 _____ C:\Users\Milan\Desktop\Dido Live At Brixton Academy FULL Concert HD SUBTITULOS ESPAÑOL 720p.avi
2013-11-01 15:21 - 2012-09-29 10:24 - 00000000 ____D C:\Users\Milan\AppData\Roaming\FileZilla
2013-10-31 21:35 - 2013-08-22 15:46 - 00302240 _____ C:\WINDOWS\setupact.log
2013-10-31 21:33 - 2013-06-16 20:01 - 00000000 ____D C:\Users\Milan\Desktop\jídlo
2013-10-28 14:26 - 2013-08-25 17:28 - 00000000 ____D C:\Users\Milan\Desktop\kapela
2013-10-26 14:47 - 2012-09-30 09:23 - 00000000 ____D C:\Users\Milan\Documents\Flight Simulator Files
2013-10-26 14:29 - 2013-10-20 16:25 - 00000000 ____D C:\Users\Milan\AppData\Local\Deployment
2013-10-23 20:34 - 2013-04-09 19:18 - 00000000 ____D C:\Users\Milan\Documents\SigmaDataCenter3
2013-10-23 20:31 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-10-23 20:06 - 2013-10-23 20:06 - 00001143 _____ C:\Users\Public\Desktop\Opera 17.lnk
2013-10-23 20:06 - 2013-10-23 20:06 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Opera Software
2013-10-23 20:06 - 2013-10-23 20:06 - 00000000 ____D C:\Users\Milan\AppData\Local\Opera Software
2013-10-23 20:06 - 2012-09-28 18:49 - 00000000 ____D C:\Program Files (x86)\Opera
2013-10-23 12:01 - 2013-10-29 14:34 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-10-23 09:59 - 2013-10-29 14:34 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-10-20 20:22 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-10-20 20:18 - 2012-12-02 00:03 - 00000000 ____D C:\Users\Milan\AppData\Local\Packages
2013-10-20 20:18 - 2012-09-28 20:16 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-20 20:13 - 2013-10-20 20:13 - 00000000 ____D C:\WINDOWS\PCHEALTH
2013-10-20 19:47 - 2013-10-19 21:21 - 00000000 ____D C:\Users\Milan\Documents\VRC
2013-10-20 19:47 - 2012-10-10 19:55 - 00000000 ____D C:\Users\Milan\Desktop\FS2004
2013-10-20 16:13 - 2012-09-30 18:59 - 00000000 ____D C:\Program Files (x86)\CH Products
2013-10-20 15:34 - 2013-10-20 15:34 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-10-20 15:21 - 2013-08-22 15:44 - 03373448 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-19 22:39 - 2013-10-19 21:24 - 00000000 ____D C:\Users\Milan\Documents\EuroScope
2013-10-19 21:24 - 2013-10-19 21:24 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EuroScope
2013-10-19 21:24 - 2013-10-19 21:24 - 00000000 ____D C:\Program Files (x86)\CsernakGergely
2013-10-19 19:21 - 2013-10-19 19:21 - 00000000 ____D C:\Program Files (x86)\Navigraph
2013-10-19 19:11 - 2013-10-19 19:11 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-10-19 19:11 - 2013-10-19 19:11 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-10-19 19:11 - 2013-10-19 19:11 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-10-19 19:11 - 2013-10-19 19:11 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-10-19 19:11 - 2013-10-19 19:11 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-10-19 19:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-10-19 15:57 - 2009-07-14 06:09 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2013-10-19 15:54 - 2013-10-19 15:54 - 00001424 _____ C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-19 15:54 - 2012-09-28 17:40 - 00000000 ___RD C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-19 15:54 - 2012-09-28 17:40 - 00000000 ___RD C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-19 15:53 - 2013-10-19 15:53 - 00000020 ___SH C:\Users\Milan\ntuser.ini
2013-10-19 15:53 - 2013-10-19 12:37 - 00000000 ___DC C:\WINDOWS\Panther
2013-10-19 15:53 - 2013-10-19 11:44 - 00000000 ____D C:\Users\Milan
2013-10-19 12:36 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-10-19 12:35 - 2013-10-19 12:35 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-10-19 12:35 - 2013-10-19 12:35 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-10-19 12:35 - 2013-10-19 12:35 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-10-19 12:35 - 2013-10-19 12:35 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-10-19 12:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-10-19 12:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-10-19 12:34 - 2013-10-19 12:34 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\Program Files\MSBuild
2013-10-19 12:32 - 2013-10-19 12:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-10-19 12:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Šablony
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Poslední
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Okolní síť
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Dokumenty
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\Data aplikací
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-10-19 12:05 - 2013-10-19 12:05 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2013-10-19 12:05 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-10-19 12:05 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-10-19 12:04 - 2013-10-19 11:44 - 00024768 _____ C:\WINDOWS\diagwrn.xml
2013-10-19 12:04 - 2013-10-19 11:44 - 00024768 _____ C:\WINDOWS\diagerr.xml
2013-10-19 12:04 - 2012-12-01 23:59 - 00023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-10-19 12:04 - 2012-12-01 23:12 - 00013274 _____ C:\WINDOWS\comsetup.log
2013-10-19 12:02 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-10-19 12:02 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-10-19 11:57 - 2013-10-19 12:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-10-19 11:57 - 2013-09-30 04:58 - 00000000 ____D C:\WINDOWS\ShellNew
2013-10-19 11:57 - 2013-09-22 17:52 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-10-19 11:57 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-10-19 11:57 - 2013-07-28 21:11 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft ICE
2013-10-19 11:57 - 2013-04-13 21:27 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars
2013-10-19 11:57 - 2013-04-09 19:18 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sigma Data Center 3.0
2013-10-19 11:57 - 2013-04-01 12:29 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SceneryConfigEditor
2013-10-19 11:57 - 2013-02-23 11:00 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IETester
2013-10-19 11:57 - 2012-12-24 16:04 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlyTampa-Dubai
2013-10-19 11:57 - 2012-12-23 14:07 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlyTampa-Seattle
2013-10-19 11:57 - 2012-10-14 17:56 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlyTampa-Vienna
2013-10-19 11:57 - 2012-10-10 19:57 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\vroute
2013-10-19 11:57 - 2012-09-30 09:22 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-19 11:57 - 2012-09-29 12:32 - 00000000 ____D C:\WINDOWS\SysWOW64\QuickTime
2013-10-19 11:57 - 2012-09-29 12:24 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-10-19 11:57 - 2012-09-28 21:15 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeFileSync
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-10-19 11:54 - 2013-10-19 11:54 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-10-19 11:54 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log
2013-10-19 11:54 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-19 11:54 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-19 11:54 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-10-19 11:53 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-10-19 11:53 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-10-19 11:53 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-10-19 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-10-19 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-10-19 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-10-19 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-10-19 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-10-19 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-10-19 11:53 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-10-19 11:53 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-10-19 11:53 - 2012-09-30 19:08 - 00000000 ____D C:\WINDOWS\SysWOW64\JVEffect
2013-10-19 11:53 - 2012-09-29 09:02 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2013-10-19 11:50 - 2013-10-19 11:50 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2013-10-19 11:50 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-10-19 11:50 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-10-19 11:50 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-10-19 11:50 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\schemas
2013-10-19 11:50 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-10-19 11:50 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-10-19 11:50 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-10-19 11:50 - 2012-12-02 00:03 - 00000000 ____D C:\ProgramData\PRICache
2013-10-19 11:50 - 2011-04-12 09:45 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-10-19 11:45 - 2013-10-19 11:45 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-10-19 11:45 - 2013-10-19 11:44 - 00000000 ___RD C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-10-19 11:45 - 2013-10-19 11:44 - 00000000 ___RD C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-19 11:45 - 2013-10-19 11:44 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-19 11:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-10-19 11:45 - 2013-04-12 12:29 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FeelThere
2013-10-19 11:45 - 2013-04-11 19:40 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wilco Publishing
2013-10-19 11:45 - 2013-02-03 10:10 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Captain Sim
2013-10-19 11:45 - 2012-10-30 14:56 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UK2000 Scenery
2013-10-19 11:45 - 2012-09-30 19:05 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flight One Software
2013-10-19 11:45 - 2012-09-30 15:19 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiFi
2013-10-19 11:45 - 2012-09-28 22:11 - 00000000 ____D C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MySQL
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Šablony
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Soubory cookie
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Poslední
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Okolní tiskárny
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Okolní síť
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Nabídka Start
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Dokumenty
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Documents\Obrázky
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Documents\Hudba
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Documents\Filmy
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\Data aplikací
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-10-19 11:44 - 2013-10-19 11:44 - 00000000 _SHDL C:\Users\Milan\AppData\Local\Data aplikací
2013-10-19 11:42 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-10-19 11:42 - 2012-09-28 17:39 - 00000000 __SHD C:\Recovery
2013-10-19 11:40 - 2013-10-19 11:40 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-10-19 11:39 - 2013-10-19 11:39 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-10-19 11:39 - 2013-10-19 11:39 - 00000000 ____D C:\Program Files\Realtek
2013-10-19 11:20 - 2012-12-02 00:00 - 01162587 _____ C:\WINDOWS\WindowsUpdate (1).log
2013-10-19 10:54 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-10-19 06:38 - 2013-10-26 14:03 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-19 05:52 - 2013-10-26 14:03 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-10-19 05:33 - 2013-10-26 14:03 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-19 04:59 - 2013-10-26 14:03 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-19 04:42 - 2013-10-26 14:03 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-10-19 04:19 - 2013-10-26 14:03 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-19 03:42 - 2013-10-26 14:03 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-19 03:27 - 2013-10-26 14:03 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-16 17:41 - 2012-09-28 20:11 - 00003922 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-16 17:41 - 2012-09-28 20:11 - 00003686 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-14 19:09 - 2013-04-29 20:14 - 00000000 ____D C:\Program Files (x86)\CStart8
2013-10-14 12:57 - 2012-12-25 10:53 - 00000000 ____D C:\Users\Milan\AppData\Roaming\vlc
2013-10-14 12:52 - 2013-10-14 12:52 - 00001068 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-10-11 15:28 - 2012-12-02 00:05 - 01626624 ___SH C:\Users\Milan\Desktop\Thumbs.db
2013-10-11 14:17 - 2013-03-14 22:14 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 14:17 - 2013-03-14 22:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 17:57 - 2013-07-28 21:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-09 17:55 - 2012-09-30 23:27 - 80541720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-07 10:04 - 2013-01-20 09:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2013-08-22 12:40] - [2013-08-22 13:39] - 0312160 ___AC (Microsoft Corporation) 9F9CE33B50611A1C61A46B8911E0B30B



LastRegBack: 2013-11-04 16:38

==================== End Of Log ============================

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 18:25
od Rudy
Zdravím!
Poprosím o log ComboFix:
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 18:28
od meiilax
Bohužel na Win 8.1 nejde ComboFix spustit, hlásí to problém s módem kompatibility či co..

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 18:41
od Rudy
Jj. To je pravda. Spusťte tedy MBAM: http://www.malwarebytes.org/mbam.php , proveďte kompletní sken a dejte log. Předem nic nemažte.

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 19:59
od meiilax
Jak k tomu logu přijdu ? Po skončení testu se objevil jen dialog, že bylo kontrola ukončena. Když jsem ho zavřel, žádný log na mě nevyskočil..

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 21:00
od Rudy
Měl by být ve složce protokolů (záložka v horní polovině okna).

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 21:31
od meiilax
Ty záložky jsou neaktivní, asi to čeká, až vyberu soubory k odstranění.

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 22:01
od Rudy
meiilax píše:Ty záložky jsou neaktivní, asi to čeká, až vyberu soubory k odstranění.
Jistě. Ale abych mohl posoudit, které položky smazat, potřebuji vidět log. Zde: http://forum.viry.cz/viewtopic.php?f=29&t=115222 najdete stručný popis toho programu.

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 22:04
od meiilax
áá už vím

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.11.04.06

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16384
Milan :: MILAN-PC [administrátor]

4.11.2013 18:48:45
MBAM-log-2013-11-04 (22-03-51).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 635166
Uplynulý čas: 1 hodin, 7 minut, 6 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 1
C:\Users\Milan\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 3
C:\Program Files\Vuze\.install4j\user\mism.exe (PUP.Optional.Conduit.A) -> Nebyla provedena žádná instrukce.
C:\Users\Public\Desktop\MP3 Downloader.lnk (Rogue.Link) -> Nebyla provedena žádná instrukce.
C:\Users\Milan\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Nebyla provedena žádná instrukce.

(konec)

Re: Vir Policie ČR - log

Napsal: 04 lis 2013 22:06
od Rudy
Vše, co MBAM nalezl, smažte.

Re: Vir Policie ČR - log

Napsal: 05 lis 2013 20:59
od meiilax
Smazal jsem to, hotovo ?

Re: Vir Policie ČR - log

Napsal: 05 lis 2013 21:31
od Rudy
Pokud je vše v pořádku, pak ano.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz