VIRY.CZ

rosím o radu, popis failu je celkem dlouhy tak pozorně čtete Smile

Mám flashku 8GB, a je na ní 5GB dat, převážně písniček, ale to je irelevantní.
Problém je ten že se všechny zobrazují jako zástupce, mají 1kb a když je zkopíruji tak samozřejmě jako zástupce...takže si je pak nespustím, spustit přímo z flashky to jde.
Když dám vlastnosti/obecné tak je označene políčko archivovat, avšak když ho odoznačním a dám použít,poté ok abych okénko zavřel a následně dám znovu vlastnosti/obecné tak je to znovu jako archivovane.
Pokud dám otevřít umístění souboru tak je v C:\windows\system32 a odkazuje na program cmd.

Problémy trvají od doby co jsem fleshku použil 1x jako medium pro uložení v tiskárně HP.

ještě dodám že jako zástupci se tvaří jen složky a soubory po otevření fleshky, pokud otevřu složku tak v ní je všechno v cajku. Asi mě nezbude než vykopírovat obsah těch složek jednu po druho a pak těch pár mp3 co je bez složky stáhnout znova :/

edit: naformatovano, cokoliv co tam vložim je opět zástupce+ po formatovani se tam oběvil soubor s názvem yyhnxpveqe který to asi všechno zpusobuje

už jsem boužil usbfresher, usb disinfektor ale dal už nevim co :/

Zdravim

Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=24&t=130784

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

• Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
• Spustte a kliknete na Deletion
• Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

spraveno super díki

příkládám log, ale asi je bezpředmětný když už je to spraveno
Logfile of random's system information tool 1.09 (written by random/random)
Run by Kuba at 2013-12-02 23:17:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 233 GB (66%) free of 351 GB
Total RAM: 3558 MB (24% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:17:50, on 2.12.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16736)
Boot mode: Normal

Running processes:
C:\windows\SysWOW64\Rundll32.exe
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\USB Camera\VM331_STI.EXE
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Kuba.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: BS Player ControlBar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [BackgroundContainer] "C:\windows\SysWOW64\Rundll32.exe" "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [USBDriveFresher] C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [YYHNXP~1] "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
O4 - HKCU\..\Run: [yyhnxpveqe] "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: 564c81d66252657e082919bce2f72f30.exe
O4 - Startup: a.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Ralink UPnP Media Server (RaMediaServer) - Unknown owner - C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12621 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
atieclxx
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
taskeng.exe {038B0150-063F-4853-9466-83CC6267DD84}
"C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe"
C:\windows\SysWOW64\Rundll32.exe "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\Explorer.EXE
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Program Files (x86)\Steam\Steam.exe" -silent
"C:\windows\System32\WScript.exe" "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera\VM331_STI.EXE"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 5392
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\windows\System32\WScript.exe" "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
"C:\windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "C:\Program Files (x86)\USBDriveFresher\USBDriveFresher 1.1.0 Quick Start Guide.pdf"
"C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe"
"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" --channel=1300.1.1033311909 --type=renderer "C:\Program Files (x86)\USBDriveFresher\USBDriveFresher 1.1.0 Quick Start Guide.pdf"
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=5d6a8924-fcbb-4d42-a69f-6c166ad9bc3a /coreSdkOptions=4126 /logConfFile="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\68da917a-3f7a-462d-b7f2-1421ffdef72c-21a4-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\"
"C:\Program Files\Windows Sidebar\sidebar.exe" /addGadget
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3800.0.1448643933\711984013" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --gpu-vendor-id=0x1002 --gpu-device-id=0x9648 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=8.901.3.5000 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --instant-process --disable-html-notifications --channel="3800.1.958209880\959036269" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.2.475146391\1159386722" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --extension-process --renderer-print-preview --disable-html-notifications --channel="3800.3.450499292\1298609124" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3800.5.1721291523\1605139532" --ppapi-flash-args --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b3021d04-205b-4b2d-b313-2a88e61884d3 -SystemEventPortName:HostProcess-df99e021-893a-4399-8508-028f375fa168 -IoCancelEventPortName:HostProcess-8037a972-eb52-448b-8b8e-9278de1dcd25 -NonStateChangingEventPortName:HostProcess-d2e39f4d-f5a5-45e6-a692-de709aec3a28 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0554c74a-9514-4a75-845f-01a72e69e244 -DeviceGroupId:WpdFsGroup
taskeng.exe {D459402A-7BED-483A-B6BC-05615F5B3042}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.7.2020767354\817768226" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/CookieRetentionPriorityStudy/ExperimentOn/DeferBackgroundExtensionCreation/Deferred/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group5 pct:10d stable:pp1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_02/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="3800.8.576318382\1861104834" /prefetch:673131151
wmiadap.exe /R /T
C:\windows\system32\wbem\wmiprvse.exe
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe11_ Global\UsGthrCtrlFltPipeMssGthrPipe11 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Kuba\Downloads\RSITx64.exe"
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\windows\tasks\AutoKMS.job
C:\windows\tasks\AutoKMSDaily.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2011-06-07 81024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner64.dll [2012-01-14 750064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-01-14 410288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C680BAE-655C-4E3D-8FC4-E6A520C3D928}]
SteadyVideoBHO Class - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2011-06-07 69760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
Partner BHO Class - C:\ProgramData\Partner\Partner.dll [2012-01-14 433648]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-14 305328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player ControlBar Toolbar - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll [2013-11-06 226592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2012-01-14 410288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2012-01-14 305328]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player ControlBar Toolbar - C:\Program Files (x86)\BS_Player_ControlBar\prxtbBS_P.dll [2013-11-06 226592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-04-22 11831400]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-22 2538280]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2012-01-14 206176]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-01-14 789920]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-01-14 9769888]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-01-14 5908928]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BackgroundContainer"=C:\windows\SysWOW64\Rundll32.exe [2009-07-14 44544]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2013-10-30 1820584]
"USBDriveFresher"=C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe [2011-08-29 3380224]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"YYHNXP~1"=C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS []
"yyhnxpveqe"=C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-12-15 343168]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2010-01-15 536576]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-29 228448]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-01-14 329056]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2013-11-07 4956176]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
564c81d66252657e082919bce2f72f30.exe
a.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0xFFFFFFFF
"NoDriveTypeAutoRun"=36

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-12-02 23:17:44 ----D---- C:\rsit
2013-12-02 23:17:44 ----D---- C:\Program Files\trend micro
2013-12-02 22:11:31 ----D---- C:\Users\Kuba\AppData\Roaming\AVG2014
2013-12-02 22:10:30 ----D---- C:\Users\Kuba\AppData\Roaming\TuneUp Software
2013-12-02 22:09:25 ----HD---- C:\$AVG
2013-12-02 22:09:24 ----D---- C:\ProgramData\AVG2014
2013-12-02 22:08:44 ----D---- C:\Program Files (x86)\AVG
2013-12-02 22:01:18 ----HD---- C:\ProgramData\Common Files
2013-12-02 22:01:18 ----D---- C:\ProgramData\MFAData
2013-12-02 21:59:26 ----A---- C:\windows\system32\PerfStringBackup.TMP
2013-12-02 21:58:14 ----D---- C:\ProgramData\IsolatedStorage
2013-12-02 21:58:01 ----D---- C:\Program Files (x86)\USBDriveFresher
2013-12-02 19:06:00 ----RASHD---- C:\autorun.inf
2013-11-25 21:58:50 ----D---- C:\Users\Kuba\AppData\Roaming\Bitcoin
2013-11-25 21:58:37 ----D---- C:\Program Files (x86)\Bitcoin
2013-11-22 03:26:30 ----D---- C:\windows\SYSWOW64\Wat
2013-11-22 03:26:30 ----D---- C:\windows\system32\Wat
2013-11-21 08:16:24 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll
2013-11-21 08:16:24 ----A---- C:\windows\system32\WindowsCodecs.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\wextract.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\webcheck.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\SetIEInstalledDate.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\pngfilt.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\occache.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msrating.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msls31.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmler.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\mshta.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeedssync.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeedsbs.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\inseng.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\imgutil.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iexpress.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\iepeers.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\IEAdvpack.dll
2013-11-20 10:21:31 ----A---- C:\windows\SYSWOW64\elshyph.dll
2013-11-20 10:21:31 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2013-11-20 10:21:31 ----A---- C:\windows\system32\elshyph.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\url.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\licmgr10.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\iedkcs32.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieapfltr.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\ieapfltr.dat
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\icardie.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\dxtrans.dll
2013-11-20 10:21:30 ----A---- C:\windows\SYSWOW64\dxtmsft.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\wininet.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\wextract.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\webcheck.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\vbscript.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\urlmon.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\url.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\SetIEInstalledDate.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\pngfilt.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\occache.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msrating.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msls31.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmlmedia.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmler.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtmled.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshtml.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\mshta.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeedssync.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeedsbs.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\msfeeds.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\licmgr10.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jsproxy.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jscript9.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\jscript.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\inseng.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\imgutil.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iexpress.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieUnatt.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieui.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iesysprep.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iesetup.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iertutil.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iernonce.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iepeers.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieframe.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\iedkcs32.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieapfltr.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ieapfltr.dat
2013-11-20 10:21:30 ----A---- C:\windows\system32\IEAdvpack.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\ie4uinit.exe
2013-11-20 10:21:30 ----A---- C:\windows\system32\icardie.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\dxtrans.dll
2013-11-20 10:21:30 ----A---- C:\windows\system32\dxtmsft.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-11-20 10:01:22 ----AH---- C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\XpsPrint.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\XpsGdiConverter.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\WMPhoto.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\WindowsCodecsExt.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\UIAnimation.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\dxgi.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10warp.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10level9.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10core.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10_1core.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10_1.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d3d10.dll
2013-11-20 10:01:22 ----A---- C:\windows\SYSWOW64\d2d1.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\XpsPrint.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\XpsGdiConverter.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\WMPhoto.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\UIAnimation.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\msmpeg2vdec.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\FntCache.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\dxgi.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\DWrite.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10warp.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10level9.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10core.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10_1core.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10_1.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d3d10.dll
2013-11-20 10:01:22 ----A---- C:\windows\system32\d2d1.dll
2013-11-20 10:00:27 ----A---- C:\windows\system32\spoolsv.exe
2013-11-20 10:00:25 ----A---- C:\windows\splwow64.exe
2013-11-20 09:36:36 ----A---- C:\windows\SYSWOW64\imagehlp.dll
2013-11-20 09:36:36 ----A---- C:\windows\system32\imagehlp.dll
2013-11-20 09:36:36 ----A---- C:\windows\system32\drivers\fs_rec.sys
2013-11-20 09:36:35 ----A---- C:\windows\SYSWOW64\wmi.dll
2013-11-20 09:36:35 ----A---- C:\windows\system32\wmi.dll
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbport.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbd.sys
2013-11-19 16:26:42 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-11-18 10:38:53 ----A---- C:\windows\system32\browserchoice.exe
2013-11-18 08:04:04 ----D---- C:\Program Files\Microsoft Silverlight
2013-11-18 08:04:04 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-11-18 07:28:16 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2013-11-18 07:28:16 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2013-11-18 07:28:14 ----A---- C:\windows\system32\WUDFSvc.dll
2013-11-18 07:28:14 ----A---- C:\windows\system32\WUDFPlatform.dll
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFx.dll
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFHost.exe
2013-11-18 07:28:13 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\cryptsvc.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\cryptnet.dll
2013-11-14 16:38:38 ----A---- C:\windows\SYSWOW64\crypt32.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\cryptsvc.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\cryptnet.dll
2013-11-14 16:38:38 ----A---- C:\windows\system32\crypt32.dll
2013-11-14 16:38:27 ----A---- C:\windows\system32\drivers\afd.sys
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\credui.dll
2013-11-14 16:38:21 ----A---- C:\windows\SYSWOW64\authui.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\credui.dll
2013-11-14 16:38:21 ----A---- C:\windows\system32\authui.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\sspicli.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\schannel.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\secur32.dll
2013-11-14 16:38:11 ----A---- C:\windows\SYSWOW64\ncrypt.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\sspisrv.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\sspicli.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\schannel.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\secur32.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\ncrypt.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\lsass.exe
2013-11-14 16:38:11 ----A---- C:\windows\system32\lsasrv.dll
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\ksecdd.sys
2013-11-14 16:38:11 ----A---- C:\windows\system32\drivers\cng.sys
2013-11-14 16:38:03 ----A---- C:\windows\SYSWOW64\gdi32.dll
2013-11-14 16:38:03 ----A---- C:\windows\system32\gdi32.dll
2013-11-14 16:38:02 ----A---- C:\windows\SYSWOW64\nshwfp.dll
2013-11-14 16:38:02 ----A---- C:\windows\SYSWOW64\FWPUCLNT.DLL
2013-11-14 16:38:02 ----A---- C:\windows\system32\nshwfp.dll
2013-11-14 16:38:02 ----A---- C:\windows\system32\IKEEXT.DLL
2013-11-14 16:38:02 ----A---- C:\windows\system32\FWPUCLNT.DLL
2013-11-14 16:37:36 ----A---- C:\windows\SYSWOW64\comctl32.dll
2013-11-14 16:37:36 ----A---- C:\windows\system32\comctl32.dll
2013-11-14 16:37:20 ----A---- C:\windows\SYSWOW64\poqexec.exe
2013-11-14 16:37:20 ----A---- C:\windows\system32\poqexec.exe
2013-11-14 16:37:18 ----A---- C:\windows\system32\dhcpcore6.dll
2013-11-14 16:37:17 ----A---- C:\windows\SYSWOW64\dhcpcsvc6.dll
2013-11-14 16:37:17 ----A---- C:\windows\SYSWOW64\dhcpcore6.dll
2013-11-14 16:37:17 ----A---- C:\windows\system32\dhcpcsvc6.dll
2013-11-14 16:37:05 ----A---- C:\windows\SYSWOW64\mstscax.dll
2013-11-14 16:37:05 ----A---- C:\windows\SYSWOW64\aaclient.dll
2013-11-14 16:37:05 ----A---- C:\windows\system32\mstscax.dll
2013-11-14 16:37:04 ----A---- C:\windows\SYSWOW64\tsgqec.dll
2013-11-14 16:37:04 ----A---- C:\windows\system32\tsgqec.dll
2013-11-14 16:37:04 ----A---- C:\windows\system32\aaclient.dll
2013-11-14 16:36:54 ----A---- C:\windows\SYSWOW64\wintrust.dll
2013-11-14 16:36:54 ----A---- C:\windows\system32\wintrust.dll
2013-11-14 16:36:40 ----A---- C:\windows\SYSWOW64\quartz.dll
2013-11-14 16:36:40 ----A---- C:\windows\SYSWOW64\qdvd.dll
2013-11-14 16:36:40 ----A---- C:\windows\system32\quartz.dll
2013-11-14 16:36:40 ----A---- C:\windows\system32\qdvd.dll
2013-11-14 16:36:35 ----A---- C:\windows\SYSWOW64\ntshrui.dll
2013-11-14 16:36:35 ----A---- C:\windows\system32\ntshrui.dll
2013-11-14 16:36:25 ----A---- C:\windows\system32\consent.exe
2013-11-14 16:36:25 ----A---- C:\windows\system32\appinfo.dll
2013-11-14 16:36:15 ----A---- C:\windows\SYSWOW64\webio.dll
2013-11-14 16:36:15 ----A---- C:\windows\system32\webio.dll
2013-11-14 16:36:11 ----A---- C:\windows\system32\wwansvc.dll
2013-11-14 16:36:11 ----A---- C:\windows\system32\wwanprotdim.dll
2013-11-14 16:36:08 ----A---- C:\windows\system32\drivers\ntfs.sys
2013-11-14 16:35:56 ----A---- C:\windows\SYSWOW64\tzres.dll
2013-11-14 16:35:56 ----A---- C:\windows\system32\tzres.dll
2013-11-14 16:35:42 ----A---- C:\windows\system32\drivers\ataport.sys
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\lpk.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\fontsub.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\dciman32.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\atmlib.dll
2013-11-14 16:35:37 ----A---- C:\windows\SYSWOW64\atmfd.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\lpk.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\fontsub.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\dciman32.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\atmlib.dll
2013-11-14 16:35:37 ----A---- C:\windows\system32\atmfd.dll
2013-11-14 16:35:32 ----A---- C:\windows\SYSWOW64\d3d11.dll
2013-11-14 16:35:32 ----A---- C:\windows\system32\d3d11.dll
2013-11-14 16:35:29 ----A---- C:\windows\system32\drivers\ndis.sys
2013-11-14 16:35:28 ----A---- C:\windows\system32\drivers\RNDISMP.sys
2013-11-14 16:35:23 ----A---- C:\windows\system32\KernelBase.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-11-14 16:35:22 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-11-14 16:35:22 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2013-11-14 16:35:22 ----A---- C:\windows\SYSWOW64\kernel32.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\winsrv.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\smss.exe
2013-11-14 16:35:22 ----A---- C:\windows\system32\kernel32.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\csrsrv.dll
2013-11-14 16:35:22 ----A---- C:\windows\system32\conhost.exe
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-11-14 16:35:21 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-11-14 16:35:21 ----A---- C:\windows\SYSWOW64\apisetschema.dll
2013-11-14 16:35:21 ----A---- C:\windows\system32\apisetschema.dll
2013-11-14 16:35:18 ----A---- C:\windows\system32\WMVDECOD.DLL
2013-11-14 16:35:17 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2013-11-14 16:35:17 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-11-14 16:35:14 ----A---- C:\windows\system32\Wdfres.dll
2013-11-14 16:35:14 ----A---- C:\windows\system32\drivers\WdfLdr.sys
2013-11-14 16:35:14 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdrmemptylst.exe
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdpwsx.dll
2013-11-14 16:35:09 ----A---- C:\windows\system32\rdpcorekmts.dll
2013-11-14 16:35:05 ----A---- C:\windows\system32\rpcrt4.dll
2013-11-14 16:35:04 ----A---- C:\windows\SYSWOW64\rpcrt4.dll
2013-11-14 16:35:01 ----A---- C:\windows\system32\drivers\usbvideo.sys
2013-11-14 16:35:01 ----A---- C:\windows\system32\drivers\usbcir.sys
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml6.dll
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml3r.dll
2013-11-14 16:34:59 ----A---- C:\windows\SYSWOW64\msxml3.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml6.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml3r.dll
2013-11-14 16:34:59 ----A---- C:\windows\system32\msxml3.dll
2013-11-14 16:34:56 ----A---- C:\windows\SYSWOW64\ncsi.dll
2013-11-14 16:34:56 ----A---- C:\windows\system32\ncsi.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\nlaapi.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\netevent.dll
2013-11-14 16:34:55 ----A---- C:\windows\SYSWOW64\netcorehc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\nlasvc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\nlaapi.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\netevent.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\netcorehc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\iphlpsvc.dll
2013-11-14 16:34:55 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2013-11-14 16:34:48 ----A---- C:\windows\system32\drivers\hidparse.sys
2013-11-14 16:34:48 ----A---- C:\windows\system32\drivers\hidclass.sys
2013-11-14 16:34:46 ----A---- C:\windows\system32\profsvc.dll
2013-11-14 16:34:12 ----A---- C:\windows\SYSWOW64\WebClnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\SYSWOW64\davclnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\system32\WebClnt.dll
2013-11-14 16:34:12 ----A---- C:\windows\system32\drivers\mrxdav.sys
2013-11-14 16:34:12 ----A---- C:\windows\system32\davclnt.dll
2013-11-14 16:34:10 ----A---- C:\windows\SYSWOW64\dpnet.dll
2013-11-14 16:34:10 ----A---- C:\windows\system32\dpnet.dll
2013-11-14 16:34:09 ----A---- C:\windows\SYSWOW64\qedit.dll
2013-11-14 16:34:09 ----A---- C:\windows\system32\qedit.dll
2013-11-14 16:34:03 ----A---- C:\windows\system32\OxpsConverter.exe
2013-11-14 16:33:40 ----A---- C:\windows\SYSWOW64\usp10.dll
2013-11-14 16:33:40 ----A---- C:\windows\system32\usp10.dll
2013-11-14 16:33:37 ----A---- C:\windows\system32\drivers\tssecsrv.sys
2013-11-14 16:33:36 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-11-14 16:33:35 ----A---- C:\windows\SYSWOW64\mswsock.dll
2013-11-14 16:33:35 ----A---- C:\windows\system32\mswsock.dll
2013-11-14 16:33:35 ----A---- C:\windows\system32\drivers\netio.sys
2013-11-14 16:33:35 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2013-11-14 16:33:28 ----A---- C:\windows\SYSWOW64\Wpc.dll
2013-11-14 16:33:28 ----A---- C:\windows\SYSWOW64\gameux.dll
2013-11-14 16:33:28 ----A---- C:\windows\system32\Wpc.dll
2013-11-14 16:33:28 ----A---- C:\windows\system32\gameux.dll
2013-11-14 16:33:11 ----A---- C:\windows\system32\win32k.sys
2013-11-14 16:33:10 ----A---- C:\windows\system32\drivers\rdpwd.sys
2013-11-14 16:32:30 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe
2013-11-14 16:32:30 ----A---- C:\windows\system32\ntoskrnl.exe
2013-11-14 16:32:29 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe
2013-11-14 16:32:29 ----A---- C:\windows\system32\advapi32.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\tdh.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\ntdll.dll
2013-11-14 16:32:28 ----A---- C:\windows\SYSWOW64\advapi32.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\wow64win.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\wow64.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\tdh.dll
2013-11-14 16:32:28 ----A---- C:\windows\system32\ntdll.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\wow32.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\user.exe
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\setup16.exe
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2013-11-14 16:32:27 ----A---- C:\windows\SYSWOW64\instnm.exe
2013-11-14 16:32:27 ----A---- C:\windows\system32\wow64cpu.dll
2013-11-14 16:32:27 ----A---- C:\windows\system32\ntvdm64.dll
2013-11-14 16:32:25 ----A---- C:\windows\system32\drivers\partmgr.sys
2013-11-14 16:32:24 ----A---- C:\windows\SYSWOW64\kerberos.dll
2013-11-14 16:32:24 ----A---- C:\windows\system32\kerberos.dll
2013-11-14 16:32:19 ----A---- C:\windows\system32\msi.dll
2013-11-14 16:32:18 ----A---- C:\windows\SYSWOW64\msi.dll
2013-11-14 16:31:37 ----A---- C:\windows\system32\drivers\bthport.sys
2013-11-14 16:31:35 ----A---- C:\windows\SYSWOW64\synceng.dll
2013-11-14 16:31:35 ----A---- C:\windows\system32\synceng.dll
2013-11-14 16:31:33 ----A---- C:\windows\system32\shell32.dll
2013-11-14 16:31:32 ----A---- C:\windows\SYSWOW64\shell32.dll
2013-11-14 16:31:31 ----A---- C:\windows\SYSWOW64\shdocvw.dll
2013-11-14 16:31:31 ----A---- C:\windows\system32\shdocvw.dll
2013-11-14 16:31:22 ----A---- C:\windows\SYSWOW64\win32spl.dll
2013-11-14 16:31:22 ----A---- C:\windows\system32\win32spl.dll
2013-11-14 16:31:21 ----A---- C:\windows\system32\taskhost.exe
2013-11-14 16:31:09 ----A---- C:\windows\SYSWOW64\cryptdlg.dll
2013-11-14 16:31:09 ----A---- C:\windows\system32\cryptdlg.dll
2013-11-14 16:30:58 ----A---- C:\windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 16:30:58 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 16:30:45 ----A---- C:\windows\SYSWOW64\netapi32.dll
2013-11-14 16:30:45 ----A---- C:\windows\SYSWOW64\browcli.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\netapi32.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\browser.dll
2013-11-14 16:30:45 ----A---- C:\windows\system32\browcli.dll
2013-11-14 16:30:44 ----A---- C:\windows\system32\drivers\fvevol.sys
2013-11-14 16:30:42 ----A---- C:\windows\SYSWOW64\srclient.dll
2013-11-14 16:30:42 ----A---- C:\windows\system32\srcore.dll
2013-11-14 16:30:39 ----A---- C:\windows\SYSWOW64\msvcrt.dll
2013-11-14 16:30:39 ----A---- C:\windows\system32\msvcrt.dll
2013-11-14 16:30:31 ----A---- C:\windows\SYSWOW64\certutil.exe
2013-11-14 16:30:31 ----A---- C:\windows\system32\certutil.exe
2013-11-14 16:30:30 ----A---- C:\windows\SYSWOW64\certenc.dll
2013-11-14 16:30:30 ----A---- C:\windows\system32\certenc.dll
2013-11-14 16:30:15 ----A---- C:\windows\system32\localspl.dll
2013-11-14 16:30:13 ----A---- C:\windows\system32\drivers\bowser.sys
2013-11-14 16:30:12 ----A---- C:\windows\SYSWOW64\EncDec.dll
2013-11-14 16:30:12 ----A---- C:\windows\system32\EncDec.dll
2013-11-14 16:30:11 ----A---- C:\windows\system32\drivers\dxgmms1.sys
2013-11-14 16:30:11 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-11-14 16:30:10 ----A---- C:\windows\system32\cdd.dll
2013-11-14 16:29:46 ----A---- C:\windows\SYSWOW64\cdosys.dll
2013-11-14 16:29:46 ----A---- C:\windows\system32\cdosys.dll
2013-11-14 16:29:41 ----A---- C:\windows\system32\scavengeui.dll
2013-11-14 16:29:40 ----A---- C:\windows\SYSWOW64\packager.dll
2013-11-14 16:29:40 ----A---- C:\windows\system32\packager.dll
2013-11-13 20:18:03 ----A---- C:\windows\SYSWOW64\XAudio2_7.dll
2013-11-13 20:18:03 ----A---- C:\windows\SYSWOW64\XAPOFX1_5.dll
2013-11-13 20:18:03 ----A---- C:\windows\system32\XAudio2_7.dll
2013-11-13 20:18:03 ----A---- C:\windows\system32\XAPOFX1_5.dll
2013-11-13 20:18:02 ----A---- C:\windows\SYSWOW64\xactengine3_7.dll
2013-11-13 20:18:02 ----A---- C:\windows\system32\xactengine3_7.dll
2013-11-13 20:18:01 ----A---- C:\windows\SYSWOW64\D3DCompiler_43.dll
2013-11-13 20:18:01 ----A---- C:\windows\system32\D3DCompiler_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\D3DX9_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dx11_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dx10_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\SYSWOW64\d3dcsx_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\D3DX9_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dx11_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dx10_43.dll
2013-11-13 20:18:00 ----A---- C:\windows\system32\d3dcsx_43.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\XAudio2_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\XAPOFX1_4.dll
2013-11-13 20:17:59 ----A---- C:\windows\SYSWOW64\xactengine3_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\XAudio2_6.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\XAPOFX1_4.dll
2013-11-13 20:17:59 ----A---- C:\windows\system32\xactengine3_6.dll
2013-11-13 20:17:58 ----A---- C:\windows\SYSWOW64\X3DAudio1_7.dll
2013-11-13 20:17:58 ----A---- C:\windows\system32\X3DAudio1_7.dll
2013-11-13 20:17:57 ----A---- C:\windows\system32\XAudio2_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\SYSWOW64\xactengine3_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\SYSWOW64\D3DCompiler_42.dll
2013-11-13 20:17:56 ----A---- C:\windows\system32\xactengine3_5.dll
2013-11-13 20:17:56 ----A---- C:\windows\system32\D3DCompiler_42.dll
2013-11-13 20:17:55 ----A---- C:\windows\SYSWOW64\d3dcsx_42.dll
2013-11-13 20:17:55 ----A---- C:\windows\system32\d3dcsx_42.dll
2013-11-13 20:17:54 ----A---- C:\windows\SYSWOW64\d3dx11_42.dll
2013-11-13 20:17:54 ----A---- C:\windows\system32\d3dx11_42.dll
2013-11-13 20:17:53 ----A---- C:\windows\SYSWOW64\D3DX9_42.dll
2013-11-13 20:17:53 ----A---- C:\windows\system32\D3DX9_42.dll
2013-11-13 20:17:51 ----A---- C:\windows\system32\d3dx10_41.dll
2013-11-13 20:17:51 ----A---- C:\windows\system32\D3DCompiler_41.dll
2013-11-13 20:17:50 ----A---- C:\windows\SYSWOW64\D3DX9_41.dll
2013-11-13 20:17:50 ----A---- C:\windows\system32\D3DX9_41.dll
2013-11-13 20:17:49 ----A---- C:\windows\SYSWOW64\XAudio2_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\SYSWOW64\xactengine3_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\XAudio2_4.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\XAPOFX1_3.dll
2013-11-13 20:17:49 ----A---- C:\windows\system32\xactengine3_4.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\X3DAudio1_6.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\d3dx10_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\SYSWOW64\D3DCompiler_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\X3DAudio1_6.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\d3dx10_40.dll
2013-11-13 20:17:48 ----A---- C:\windows\system32\D3DCompiler_40.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\XAudio2_3.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\XAPOFX1_2.dll
2013-11-13 20:17:47 ----A---- C:\windows\SYSWOW64\D3DX9_40.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\XAudio2_3.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\XAPOFX1_2.dll
2013-11-13 20:17:47 ----A---- C:\windows\system32\D3DX9_40.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\XAudio2_2.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\XAPOFX1_1.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\xactengine3_3.dll
2013-11-13 20:17:46 ----A---- C:\windows\SYSWOW64\X3DAudio1_5.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\XAudio2_2.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\XAPOFX1_1.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\xactengine3_3.dll
2013-11-13 20:17:46 ----A---- C:\windows\system32\X3DAudio1_5.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\xactengine3_2.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\d3dx10_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\SYSWOW64\D3DCompiler_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\xactengine3_2.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\d3dx10_39.dll
2013-11-13 20:17:45 ----A---- C:\windows\system32\D3DCompiler_39.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\XAudio2_1.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\XAPOFX1_0.dll
2013-11-13 20:17:44 ----A---- C:\windows\SYSWOW64\D3DX9_39.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\XAudio2_1.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\XAPOFX1_0.dll
2013-11-13 20:17:44 ----A---- C:\windows\system32\D3DX9_39.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\xactengine3_1.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\X3DAudio1_4.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\d3dx10_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\SYSWOW64\D3DCompiler_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\xactengine3_1.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\X3DAudio1_4.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\d3dx10_38.dll
2013-11-13 20:17:43 ----A---- C:\windows\system32\D3DCompiler_38.dll
2013-11-13 20:17:42 ----A---- C:\windows\SYSWOW64\XAudio2_0.dll
2013-11-13 20:17:42 ----A---- C:\windows\SYSWOW64\D3DX9_38.dll
2013-11-13 20:17:42 ----A---- C:\windows\system32\XAudio2_0.dll
2013-11-13 20:17:42 ----A---- C:\windows\system32\D3DX9_38.dll
2013-11-13 20:17:41 ----A---- C:\windows\SYSWOW64\xactengine3_0.dll
2013-11-13 20:17:41 ----A---- C:\windows\SYSWOW64\X3DAudio1_3.dll
2013-11-13 20:17:41 ----A---- C:\windows\system32\xactengine3_0.dll
2013-11-13 20:17:41 ----A---- C:\windows\system32\X3DAudio1_3.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\xactengine2_10.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\D3DX9_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\d3dx10_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\SYSWOW64\D3DCompiler_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\xactengine2_10.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\D3DX9_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\d3dx10_37.dll
2013-11-13 20:17:40 ----A---- C:\windows\system32\D3DCompiler_37.dll
2013-11-13 20:17:39 ----A---- C:\windows\SYSWOW64\d3dx10_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\SYSWOW64\D3DCompiler_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\system32\d3dx10_36.dll
2013-11-13 20:17:39 ----A---- C:\windows\system32\D3DCompiler_36.dll
2013-11-13 20:17:38 ----A---- C:\windows\SYSWOW64\xactengine2_9.dll
2013-11-13 20:17:38 ----A---- C:\windows\SYSWOW64\d3dx9_36.dll
2013-11-13 20:17:38 ----A---- C:\windows\system32\xactengine2_9.dll
2013-11-13 20:17:38 ----A---- C:\windows\system32\d3dx9_36.dll
2013-11-13 20:17:37 ----A---- C:\windows\SYSWOW64\d3dx10_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\SYSWOW64\D3DCompiler_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\system32\d3dx10_35.dll
2013-11-13 20:17:37 ----A---- C:\windows\system32\D3DCompiler_35.dll
2013-11-13 20:17:36 ----A---- C:\windows\SYSWOW64\xactengine2_8.dll
2013-11-13 20:17:36 ----A---- C:\windows\SYSWOW64\X3DAudio1_2.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\xactengine2_8.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\X3DAudio1_2.dll
2013-11-13 20:17:36 ----A---- C:\windows\system32\d3dx9_35.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\xinput1_3.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\xactengine2_7.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\d3dx9_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\d3dx10_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\SYSWOW64\D3DCompiler_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\xinput1_3.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\xactengine2_7.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\d3dx9_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\d3dx10_34.dll
2013-11-13 20:17:35 ----A---- C:\windows\system32\D3DCompiler_34.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\xactengine2_6.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\d3dx9_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\d3dx10_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\SYSWOW64\D3DCompiler_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\xactengine2_6.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\d3dx9_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\d3dx10_33.dll
2013-11-13 20:17:34 ----A---- C:\windows\system32\D3DCompiler_33.dll
2013-11-13 20:17:33 ----A---- C:\windows\SYSWOW64\xactengine2_5.dll
2013-11-13 20:17:33 ----A---- C:\windows\SYSWOW64\d3dx10.dll
2013-11-13 20:17:33 ----A---- C:\windows\system32\xactengine2_5.dll
2013-11-13 20:17:33 ----A---- C:\windows\system32\d3dx10.dll
2013-11-13 20:17:31 ----A---- C:\windows\SYSWOW64\xactengine2_4.dll
2013-11-13 20:17:31 ----A---- C:\windows\SYSWOW64\x3daudio1_1.dll
2013-11-13 20:17:31 ----A---- C:\windows\system32\xactengine2_4.dll
2013-11-13 20:17:31 ----A---- C:\windows\system32\x3daudio1_1.dll
2013-11-13 20:17:30 ----A---- C:\windows\SYSWOW64\xactengine2_3.dll
2013-11-13 20:17:30 ----A---- C:\windows\SYSWOW64\d3dx9_31.dll
2013-11-13 20:17:30 ----A---- C:\windows\system32\xactengine2_3.dll
2013-11-13 20:17:30 ----A---- C:\windows\system32\d3dx9_31.dll
2013-11-13 20:17:29 ----A---- C:\windows\SYSWOW64\xinput1_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\SYSWOW64\xactengine2_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\system32\xinput1_2.dll
2013-11-13 20:17:29 ----A---- C:\windows\system32\xactengine2_2.dll
2013-11-13 20:17:28 ----A---- C:\windows\SYSWOW64\xinput1_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\SYSWOW64\xactengine2_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\system32\xinput1_1.dll
2013-11-13 20:17:28 ----A---- C:\windows\system32\xactengine2_1.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\xactengine2_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\x3daudio1_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\SYSWOW64\d3dx9_30.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\xactengine2_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\x3daudio1_0.dll
2013-11-13 20:17:24 ----A---- C:\windows\system32\d3dx9_30.dll
2013-11-13 20:17:23 ----A---- C:\windows\SYSWOW64\d3dx9_29.dll
2013-11-13 20:17:23 ----A---- C:\windows\SYSWOW64\d3dx9_28.dll
2013-11-13 20:17:23 ----A---- C:\windows\system32\d3dx9_29.dll
2013-11-13 20:17:23 ----A---- C:\windows\system32\d3dx9_28.dll
2013-11-13 20:17:22 ----A---- C:\windows\SYSWOW64\d3dx9_27.dll
2013-11-13 20:17:22 ----A---- C:\windows\SYSWOW64\d3dx9_26.dll
2013-11-13 20:17:22 ----A---- C:\windows\system32\d3dx9_27.dll
2013-11-13 20:17:22 ----A---- C:\windows\system32\d3dx9_26.dll
2013-11-13 20:17:21 ----A---- C:\windows\SYSWOW64\d3dx9_25.dll
2013-11-13 20:17:21 ----A---- C:\windows\SYSWOW64\d3dx9_24.dll
2013-11-13 20:17:21 ----A---- C:\windows\system32\d3dx9_25.dll
2013-11-13 20:17:21 ----A---- C:\windows\system32\d3dx9_24.dll
2013-11-13 16:46:00 ----D---- C:\Program Files (x86)\Steam
2013-11-13 13:18:47 ----D---- C:\Users\Kuba\AppData\Roaming\BSplayer Pro
2013-11-13 13:18:47 ----D---- C:\Users\Kuba\AppData\Roaming\BSplayer
2013-11-13 13:18:46 ----D---- C:\Program Files (x86)\Webteh
2013-11-13 13:18:24 ----D---- C:\Program Files (x86)\Conduit
2013-11-13 13:18:23 ----D---- C:\ProgramData\Conduit
2013-11-13 13:18:22 ----D---- C:\Program Files (x86)\BS_Player_ControlBar
2013-11-12 16:04:29 ----A---- C:\windows\SYSWOW64\rdpcore.dll
2013-11-12 16:04:29 ----A---- C:\windows\system32\rdpcore.dll
2013-11-12 16:04:29 ----A---- C:\windows\system32\drivers\tdtcp.sys
2013-11-12 15:56:40 ----A---- C:\windows\system32\wups2.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wucltux.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wuaueng.dll
2013-11-12 15:56:40 ----A---- C:\windows\system32\wuauclt.exe
2013-11-12 15:56:26 ----A---- C:\windows\system32\wups.dll
2013-11-12 15:56:26 ----A---- C:\windows\system32\wudriver.dll
2013-11-12 15:56:26 ----A---- C:\windows\system32\wuapi.dll
2013-11-12 15:56:12 ----A---- C:\windows\system32\wuwebv.dll
2013-11-12 15:56:12 ----A---- C:\windows\system32\wuapp.exe
2013-11-12 15:16:31 ----A---- C:\windows\AutoKMS.ini
2013-11-12 15:03:31 ----D---- C:\Program Files\Common Files\DESIGNER
2013-11-12 15:02:51 ----D---- C:\Program Files\Microsoft Synchronization Services
2013-11-12 15:02:26 ----D---- C:\Program Files\Microsoft Sync Framework
2013-11-12 15:02:26 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-11-12 15:02:26 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-11-12 15:00:19 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-11-12 14:59:19 ----D---- C:\Program Files\Microsoft Analysis Services
2013-11-12 14:59:19 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2013-11-12 14:59:00 ----D---- C:\Program Files\Microsoft Office
2013-11-12 14:58:57 ----D---- C:\ProgramData\Microsoft Help
2013-11-12 14:58:29 ----RHD---- C:\MSOCache
2013-11-12 14:52:45 ----D---- C:\Users\Kuba\AppData\Roaming\WinRAR
2013-11-12 14:52:36 ----A---- C:\Users\Kuba\AppData\Roaming\Win32.exe.tmp
2013-11-12 14:52:30 ----D---- C:\Program Files (x86)\WinRAR
2013-11-12 11:11:23 ----D---- C:\Program Files (x86)\Adobe
2013-11-12 11:11:04 ----D---- C:\ProgramData\Adobe
2013-11-12 10:04:24 ----ASH---- C:\pagefile.sys
2013-11-12 10:04:23 ----SHD---- C:\System Volume Information
2013-11-12 10:04:17 ----ASH---- C:\hiberfil.sys
2013-11-12 09:22:20 ----D---- C:\Users\Kuba\AppData\Roaming\Macromedia
2013-11-12 09:22:19 ----D---- C:\Users\Kuba\AppData\Roaming\Adobe
2013-11-12 09:13:41 ----D---- C:\Users\Kuba\AppData\Roaming\ATI
2013-11-12 09:11:04 ----D---- C:\Users\Kuba\AppData\Roaming\Identities
2013-11-12 09:10:58 ----SHD---- C:\$RECYCLE.BIN
2013-11-12 09:08:23 ----SD---- C:\Users\Kuba\AppData\Roaming\Microsoft
2013-11-12 09:08:23 ----D---- C:\Users\Kuba\AppData\Roaming\Media Center Programs
2013-11-12 09:06:48 ----SHD---- C:\Recovery
2013-11-05 21:55:48 ----A---- C:\windows\system32\drivers\avgdiska.sys
2013-11-04 21:52:42 ----A---- C:\windows\system32\drivers\avgidsdrivera.sys

======List of files/folders modified in the last 1 month======

2013-12-02 23:17:44 ----RD---- C:\Program Files
2013-12-02 23:10:49 ----D---- C:\windows\Temp
2013-12-02 22:51:05 ----D---- C:\Windows
2013-12-02 22:24:37 ----D---- C:\windows\System32
2013-12-02 22:24:37 ----D---- C:\windows\inf
2013-12-02 22:11:10 ----SHD---- C:\windows\Installer
2013-12-02 22:11:04 ----D---- C:\windows\system32\Tasks
2013-12-02 22:11:01 ----D---- C:\windows\Prefetch
2013-12-02 22:10:26 ----D---- C:\windows\system32\drivers
2013-12-02 22:09:24 ----HD---- C:\ProgramData
2013-12-02 22:08:44 ----RD---- C:\Program Files (x86)
2013-12-02 22:08:02 ----D---- C:\windows\SysWOW64
2013-12-02 20:55:35 ----D---- C:\windows\system32\config
2013-12-02 20:46:49 ----D---- C:\windows\Tasks
2013-12-02 20:45:53 ----D---- C:\ProgramData\VeriFace
2013-11-30 23:59:49 ----D---- C:\windows\system32\wdi
2013-11-26 19:40:27 ----RSD---- C:\windows\assembly
2013-11-26 19:40:27 ----D---- C:\windows\Microsoft.NET
2013-11-25 09:38:42 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-11-25 09:38:42 ----D---- C:\windows\system32\cs-CZ
2013-11-25 09:33:57 ----D---- C:\windows\SYSWOW64\en-US
2013-11-25 09:33:57 ----D---- C:\windows\system32\en-US
2013-11-24 19:56:10 ----D---- C:\windows\system32\catroot2
2013-11-24 19:56:10 ----D---- C:\windows\system32\catroot
2013-11-24 19:41:28 ----D---- C:\windows\winsxs
2013-11-22 03:53:33 ----D---- C:\windows\rescache
2013-11-22 03:03:32 ----D---- C:\Program Files\Common Files\System
2013-11-22 03:03:32 ----A---- C:\windows\win.ini
2013-11-20 18:52:06 ----D---- C:\Program Files\Internet Explorer
2013-11-20 18:52:06 ----D---- C:\Program Files (x86)\Internet Explorer
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\wbem
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\sk-SK
2013-11-20 18:52:05 ----D---- C:\windows\SYSWOW64\migration
2013-11-20 18:52:03 ----D---- C:\windows\system32\wbem
2013-11-20 18:52:03 ----D---- C:\windows\system32\sk-SK
2013-11-20 18:52:03 ----D---- C:\windows\system32\migration
2013-11-20 18:52:03 ----D---- C:\windows\PolicyDefinitions
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\zh-TW
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\zh-HK
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\tr-TR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\sv-SE
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pt-PT
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pt-BR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\pl-PL
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\nl-NL
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\ko-KR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\it-IT
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\hu-HU
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\fr-FR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\fi-FI
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\es-ES
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\el-GR
2013-11-20 18:52:00 ----D---- C:\windows\SYSWOW64\de-DE
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\zh-CN
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\ru-RU
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\nb-NO
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\ja-JP
2013-11-20 18:51:59 ----D---- C:\windows\SYSWOW64\da-DK
2013-11-20 18:51:58 ----D---- C:\windows\system32\zh-HK
2013-11-20 18:51:58 ----D---- C:\windows\system32\tr-TR
2013-11-20 18:51:58 ----D---- C:\windows\system32\sv-SE
2013-11-20 18:51:58 ----D---- C:\windows\system32\pt-PT
2013-11-20 18:51:58 ----D---- C:\windows\system32\pt-BR
2013-11-20 18:51:58 ----D---- C:\windows\system32\pl-PL
2013-11-20 18:51:58 ----D---- C:\windows\system32\nl-NL
2013-11-20 18:51:58 ----D---- C:\windows\system32\ko-KR
2013-11-20 18:51:58 ----D---- C:\windows\system32\it-IT
2013-11-20 18:51:58 ----D---- C:\windows\system32\hu-HU
2013-11-20 18:51:58 ----D---- C:\windows\system32\fr-FR
2013-11-20 18:51:58 ----D---- C:\windows\system32\fi-FI
2013-11-20 18:51:58 ----D---- C:\windows\system32\es-ES
2013-11-20 18:51:58 ----D---- C:\windows\system32\el-GR
2013-11-20 18:51:57 ----D---- C:\windows\system32\zh-TW
2013-11-20 18:51:57 ----D---- C:\windows\system32\zh-CN
2013-11-20 18:51:57 ----D---- C:\windows\system32\ru-RU
2013-11-20 18:51:57 ----D---- C:\windows\system32\nb-NO
2013-11-20 18:51:57 ----D---- C:\windows\system32\ja-JP
2013-11-20 18:51:57 ----D---- C:\windows\system32\de-DE
2013-11-20 18:51:57 ----D---- C:\windows\system32\da-DK
2013-11-20 18:51:51 ----RSD---- C:\windows\Fonts
2013-11-20 18:51:51 ----D---- C:\Program Files\Windows Journal
2013-11-20 18:51:40 ----D---- C:\windows\system32\DriverStore
2013-11-20 10:22:27 ----D---- C:\windows\Logs
2013-11-18 19:58:50 ----D---- C:\windows\ehome
2013-11-18 19:58:50 ----D---- C:\windows\AppPatch
2013-11-18 19:58:49 ----D---- C:\windows\system32\drivers\cs-CZ
2013-11-18 19:58:49 ----D---- C:\Program Files\Windows Defender
2013-11-18 19:58:49 ----D---- C:\Program Files (x86)\Windows Defender
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Sidebar
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Media Player
2013-11-18 19:58:27 ----D---- C:\Program Files\Windows Mail
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\winrm
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\slmgr
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\migwiz
2013-11-18 19:58:26 ----D---- C:\windows\SYSWOW64\en
2013-11-18 19:58:26 ----D---- C:\windows\servicing
2013-11-18 19:58:26 ----D---- C:\Program Files\Windows Photo Viewer
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Media Player
2013-11-18 19:58:26 ----D---- C:\Program Files (x86)\Windows Mail
2013-11-18 19:58:22 ----D---- C:\windows\SYSWOW64\drivers\en-US
2013-11-18 19:58:22 ----D---- C:\windows\SYSWOW64\drivers
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\WCN
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\DriverStore
2013-11-18 19:58:17 ----D---- C:\windows\SYSWOW64\Dism
2013-11-18 19:58:16 ----D---- C:\windows\SYSWOW64\Printing_Admin_Scripts
2013-11-18 19:58:16 ----D---- C:\windows\en-US
2013-11-18 19:58:15 ----D---- C:\windows\system32\winrm
2013-11-18 19:58:15 ----D---- C:\windows\system32\sysprep
2013-11-18 19:58:15 ----D---- C:\windows\system32\slmgr
2013-11-18 19:58:15 ----D---- C:\windows\system32\oobe
2013-11-18 19:58:15 ----D---- C:\windows\system32\migwiz
2013-11-18 19:58:15 ----D---- C:\windows\system32\en
2013-11-18 19:58:15 ----D---- C:\windows\system32\Boot
2013-11-18 19:58:05 ----D---- C:\windows\system32\WCN
2013-11-18 19:58:05 ----D---- C:\windows\system32\drivers\en-US
2013-11-18 19:58:05 ----D---- C:\windows\system32\Dism
2013-11-18 19:58:03 ----D---- C:\windows\system32\Printing_Admin_Scripts
2013-11-18 19:57:53 ----D---- C:\Program Files\DVD Maker
2013-11-18 19:57:37 ----D---- C:\windows\Speech
2013-11-14 11:51:23 ----D---- C:\Program Files (x86)\McAfee
2013-11-14 00:36:10 ----D---- C:\ProgramData\McAfee
2013-11-14 00:36:10 ----D---- C:\Program Files\Common Files
2013-11-14 00:36:03 ----D---- C:\Program Files (x86)\Common Files
2013-11-12 16:05:04 ----D---- C:\windows\SoftwareDistribution
2013-11-12 15:17:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-11-12 15:17:29 ----D---- C:\Program Files (x86)\Lenovo
2013-11-12 15:03:32 ----D---- C:\windows\ShellNew
2013-11-12 15:03:31 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-11-12 15:02:41 ----D---- C:\Program Files (x86)\MSBuild
2013-11-12 15:02:26 ----SD---- C:\ProgramData\Microsoft
2013-11-12 14:59:02 ----D---- C:\Program Files (x86)\Microsoft Office
2013-11-12 14:58:03 ----D---- C:\windows\system32\restore
2013-11-12 10:05:44 ----D---- C:\windows\debug
2013-11-12 10:05:39 ----D---- C:\windows\system32\LogFiles
2013-11-12 10:04:58 ----D---- C:\windows\Panther
2013-11-12 09:08:23 ----RD---- C:\Users
2013-11-11 05:50:16 ----N---- C:\windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\windows\system32\DRIVERS\avgidsha.sys [2013-10-24 194872]
R0 Avgloga;AVG Logging Driver; C:\windows\system32\DRIVERS\avgloga.sys [2013-10-31 294712]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2013-10-01 123704]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2013-09-10 31544]
R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2012-01-14 57952]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2012-01-14 39008]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 Avgdiska;AVG Disk Driver; C:\windows\system32\DRIVERS\avgdiska.sys [2013-11-05 150808]
R1 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\avgidsdrivera.sys [2013-11-04 240920]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2013-10-31 212280]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2012-01-14 13408]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2012-01-14 29792]
R3 amdiox64;AMD IO Driver; C:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2011-12-15 10208256]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2011-12-15 317952]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-09-29 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2011-01-13 349736]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2011-01-13 106536]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2011-01-13 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2011-01-13 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2011-01-13 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2011-04-26 2852200]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\windows\system32\DRIVERS\netr28x.sys [2011-04-21 1360960]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2010-11-30 307304]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2010-05-31 333928]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-12-22 1407024]
R3 usbfilter;AMD USB Filter Driver; C:\windows\system32\DRIVERS\usbfilter.sys [2011-08-17 53376]
R3 vm331avs;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys [2011-04-26 250752]
R3 vmuvcflt;Vimicro USB Camera Filter; C:\windows\System32\Drivers\vmuvcflt.sys [2010-08-16 8320]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2011-12-15 204288]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-12-15 361984]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2011-01-13 956192]
R2 RaMediaServer;Ralink UPnP Media Server; C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe [2010-05-19 454656]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-10-30 566696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 136176]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe []
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-01-14 182768]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 Partner Service;Partner Service; C:\ProgramData\Partner\Partner.exe [2012-01-14 332272]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2013-11-22 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Bordelu mate ale v PC jeste hoooodne

Dejte mi log z USBFixu

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill iExplore.exe:
  http://download.bleepingcomputer.com/gr ... xplore.exe
  
  Rkill uSeRiNiT.exe:
  http://download.bleepingcomputer.com/gr ... eRiNiT.exe
  
  Rkill WiNlOgOn.exe:
  http://download.bleepingcomputer.com/gr ... NlOgOn.exe

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Na plose vznikne log Rkill.txt ten mi sem vlozte
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

hmm, sem před měsícem dělal reinstal
log z usb fixu
############################## | UsbFix V 7.134 | [Deletion]

User: Kuba (Administrator) # KUBA-PC
Updated 06/09/2013 by El Desaparecido
Started at 23:20:14 | 02/12/2013

Website: http://www.sosvirus.net/
Upload Malware: http://www.sosvirus.net/upload_malware.php
Contact: eldesaparecido@sosvirus.net

PC: LENOVO (Sabine) (x64-based PC)
CPU: AMD A4-3300M APU with Radeon(tm) HD Graphics (1900)
RAM -> [Total : 3558 | Free : 1001]
BIOS: Phoenix BIOS SC-T v2.1
BOOT: Normal boot

OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16736

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: AVG AntiVirus Free Edition 2014 [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Fixed drive # 343 Gb (228 Mb free - 66%) [] # NTFS
D:\ -> Fixed drive # 108 Gb (56 Mb free - 52%) [Nový svazek] # NTFS
F:\ -> CD-ROM
G:\ -> Removable drive # 961 Mb (800 Mb free - 83%) [] # FAT

################## | El Desaparecido Section |

HKLM\SOFTWARE | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE | Run : [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM\SOFTWARE | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HKLM\SOFTWARE\wow6432Node | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE\wow6432Node | Run : [331BigDog] - C:\Program Files (x86)\USB Camera\VM331_STI.EXE
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Mirage] - "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
HKLM\SOFTWARE\wow6432Node | Run : [YouCam Tray] - "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
HKLM\SOFTWARE\wow6432Node | Run : [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
HKLM\SOFTWARE\wow6432Node | Run : [UpdatePRCShortCut] - "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [BackgroundContainer] - "C:\windows\SysWOW64\Rundll32.exe" "C:\Users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [Steam] - "C:\Program Files (x86)\Steam\steam.exe" -silent
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [USBDriveFresher] - C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [YYHNXP~1] - "C:\Users\Kuba\AppData\Local\Temp\YYHNXP~1.VBS"
HKU\S-1-5-21-3020168705-86197495-629518565-1002\SOFTWARE | Run : [yyhnxpveqe] - "C:\Users\Kuba\AppData\Local\Temp\yyhnxpveqe.vbs"
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Stopped processes |

Stopped! C:\windows\system32\atiesrxx.exe (888)
Stopped! C:\windows\system32\atieclxx.exe (1080)
Stopped! C:\windows\System32\spoolsv.exe (1340)
Stopped! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1636)
Stopped! C:\windows\system32\taskhost.exe (1644)
Stopped! C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (1768)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (1808)
Stopped! C:\windows\system32\taskeng.exe (1936)
Stopped! C:\Program Files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe (1944)
Stopped! C:\windows\SysWOW64\Rundll32.exe (1992)
Stopped! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (2712)
Stopped! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (2724)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (2736)
Stopped! C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe (2856)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (2864)
Stopped! C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (2872)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (3040)
Stopped! C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe (2264)
Stopped! C:\Program Files (x86)\Steam\Steam.exe (2616)
Stopped! C:\windows\System32\WScript.exe (2648)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (2832)
Stopped! C:\Program Files (x86)\USB Camera\VM331_STI.EXE (928)
Stopped! C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (1736)
Stopped! C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe (2472)
Stopped! C:\windows\system32\SearchIndexer.exe (204)
Stopped! C:\Program Files\Windows Media Player\wmpnetwk.exe (3088)
Stopped! C:\windows\SysWOW64\RunDll32.exe (2500)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe (3220)
Stopped! C:\windows\system32\DllHost.exe (3184)
Stopped! C:\Program Files (x86)\Common Files\Steam\SteamService.exe (4088)
Stopped! C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe (3804)
Stopped! C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (1980)
Stopped! C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (4212)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (5392)
Stopped! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (5480)
Stopped! C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (6092)
Stopped! C:\windows\System32\WScript.exe (5868)
Stopped! C:\windows\system32\wuauclt.exe (5788)
Stopped! C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (1300)
Stopped! C:\Program Files (x86)\USBDriveFresher\USBDriveFresher.exe (5924)
Stopped! C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (1796)
Stopped! C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (4428)
Stopped! C:\Program Files\Windows Sidebar\sidebar.exe (6000)
Stopped! C:\Program Files (x86)\AVG\AVG2014\avgui.exe (8596)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3800)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5400)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4116)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3000)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8584)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4876)
Stopped! C:\windows\System32\WUDFHost.exe (4676)
Stopped! C:\windows\system32\taskeng.exe (7740)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (6628)
Stopped! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (8860)
Stopped! C:\windows\system32\NOTEPAD.EXE (2196)
Stopped! C:\windows\system32\NOTEPAD.EXE (4288)

################## | Files # Infected Folders |

Not deleted ! G:\yyhnxpveqe.vbs
Deleted ! C:\Users\Kuba\AppData\Roaming\Win32.exe.tmp
Deleted ! G:\Sandra Maria Magdalena [mp3s.lnk
Deleted ! G:\Initial D - Mega Mix (HD).lnk
Deleted ! G:\.lnk
Deleted ! G:\yyhnxpveqe.lnk
Deleted ! G:\HPSCANS.lnk
Deleted ! C:\Users\Kuba\AppData\Local\Temp\a.exe

(!) Temporary files deleted.

################## | Registry |

Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|yyhnxpveqe

################## | Mountpoints2 |


################## | Listing |

[02/12/2013 - 22:09:25 | D ] C:\$AVG
[12/11/2013 - 09:10:58 | SHD ] C:\$RECYCLE.BIN
[02/12/2013 - 19:06:00 | RASHD ] C:\autorun.inf
[14/07/2009 - 06:08:56 | SHD ] C:\Documents and Settings
[13/11/2013 - 13:18:34 | N | 9] C:\END
[02/12/2013 - 22:14:31 | N | 135957] C:\FaceProv.log
[14/01/2012 - 15:48:14 | N | 102] C:\FactoryLog.txt
[02/12/2013 - 20:45:06 | ASH | 2798211072] C:\hiberfil.sys
[14/01/2012 - 07:21:04 | N | 64] C:\Lenovo EE Boot Optimizer.log
[14/01/2012 - 07:02:43 | D ] C:\LOGFILE
[12/11/2013 - 14:58:29 | RHD ] C:\MSOCache
[02/12/2013 - 20:45:09 | ASH | 3730948096] C:\pagefile.sys
[14/07/2009 - 04:20:08 | D ] C:\PerfLogs
[02/12/2013 - 23:17:44 | D ] C:\Program Files
[02/12/2013 - 22:08:44 | D ] C:\Program Files (x86)
[02/12/2013 - 22:09:24 | HD ] C:\ProgramData
[12/11/2013 - 09:06:48 | SHD ] C:\Recovery
[14/01/2012 - 06:55:12 | N | 2150] C:\RHDSetup.log
[02/12/2013 - 23:17:55 | D ] C:\rsit
[02/12/2013 - 22:09:00 | SHD ] C:\System Volume Information
[02/12/2013 - 23:23:13 | D ] C:\UsbFix
[02/12/2013 - 23:23:34 | A | 9852] C:\UsbFix [Clean 1] KUBA-PC.txt
[14/01/2012 - 07:37:30 | D ] C:\UserGuidePDF
[12/11/2013 - 09:08:23 | D ] C:\Users
[02/12/2013 - 22:51:05 | D ] C:\Windows
[12/11/2013 - 09:10:58 | SHD ] D:\$RECYCLE.BIN
[02/12/2013 - 19:06:00 | RASHD ] D:\autorun.inf
[11/11/2013 - 21:27:52 | D ] D:\KUBA-PC
[11/11/2013 - 21:26:27 | N | 528] D:\MediaID.bin
[12/11/2013 - 09:06:01 | SHD ] D:\System Volume Information
[27/11/2013 - 17:30:08 | N | 20135936] G:\.HPIMAGE.VFS
[27/11/2013 - 17:31:52 | D ] G:\HPSCANS
[25/11/2013 - 18:05:34 | N | 5701695] G:\Sandra Maria Magdalena [mp3s.nadruhou.net].mp3
[27/11/2013 - 20:01:14 | N | 77905] G:\yyhnxpveqe.vbs
[26/11/2013 - 18:28:06 | N | 140106919] G:\Initial D - Mega Mix (HD).mp3

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | E.O.F | http://www.sosvirus.net |

log z rkillu:
Rkill 2.6.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/03/2013 09:05:33 PM in x64 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* Windows Defender (WinDefend) is not Running.
Startup Type set to: Manual

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 12/03/2013 09:05:44 PM
Execution time: 0 hours(s), 0 minute(s), and 10 seconds(s)

Pokracujte ComboFixem

combofix, chvíli to trvalo: jen dodam že sem včera nainstaloval antivir tak možná tam toho sajrajtu bude min
ComboFix 13-12-01.01 - Kuba 03.12.2013 21:13:51.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3558.2352 [GMT 1:00]
Spuštěný z: c:\users\Kuba\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Kuba\AppData\Local\Microsoft\Windows\Temporary Internet Files\{02144931-1B3F-4386-A397-E2A6BF977BA6}.xps
c:\windows\s.bat
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-03 do 2013-12-03 )))))))))))))))))))))))))))))))
.
.
2013-12-03 20:20 . 2013-12-03 20:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-02 22:19 . 2013-12-02 22:23 -------- d-----w- C:\UsbFix
2013-12-02 22:17 . 2013-12-02 22:17 -------- d-----w- C:\rsit
2013-12-02 22:17 . 2013-12-02 22:17 -------- d-----w- c:\program files\trend micro
2013-12-02 21:09 . 2013-12-02 21:09 -------- d-----w- C:\$AVG
2013-12-02 21:09 . 2013-12-02 21:13 -------- d-----w- c:\programdata\AVG2014
2013-12-02 21:08 . 2013-12-02 21:08 -------- d-----w- c:\program files (x86)\AVG
2013-12-02 21:01 . 2013-12-03 17:31 -------- d-----w- c:\programdata\MFAData
2013-12-02 21:01 . 2013-12-02 21:01 -------- d--h--w- c:\programdata\Common Files
2013-12-02 20:59 . 2013-12-03 11:52 5106 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2013-12-02 20:58 . 2013-12-02 20:58 -------- d-----w- c:\programdata\IsolatedStorage
2013-12-02 20:58 . 2013-12-02 20:58 -------- d-----w- c:\program files (x86)\USBDriveFresher
2013-11-30 16:10 . 2013-11-08 03:12 10285968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2CAAAB1E-BA23-48D9-8F33-4D82A3C238B7}\mpengine.dll
2013-11-25 20:58 . 2013-11-25 20:58 -------- d-----w- c:\program files (x86)\Bitcoin
2013-11-22 02:26 . 2013-11-22 02:26 -------- d-----w- c:\windows\SysWow64\Wat
2013-11-22 02:26 . 2013-11-22 02:26 -------- d-----w- c:\windows\system32\Wat
2013-11-21 07:16 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2013-11-21 07:16 . 2013-04-17 06:24 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-11-20 09:01 . 2013-11-20 09:01 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-11-20 09:00 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2013-11-20 09:00 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2013-11-20 08:36 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-11-20 08:36 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2013-11-20 08:36 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2013-11-20 08:36 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2013-11-20 08:36 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2013-11-19 15:26 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-19 15:26 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-19 15:26 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-19 15:26 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-19 15:26 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-19 15:26 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-19 15:26 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-19 09:14 . 2013-11-19 09:14 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2013-11-18 09:59 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2013-11-18 09:38 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2013-11-18 07:04 . 2013-11-18 07:04 -------- d-----w- c:\program files\Microsoft Silverlight
2013-11-18 07:04 . 2013-11-18 07:04 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2013-11-18 06:28 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-11-18 06:28 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-11-18 06:28 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-11-18 06:28 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-11-18 06:28 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2013-11-18 06:28 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2013-11-18 06:28 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-11-14 15:37 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll
2013-11-14 15:36 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll
2013-11-14 15:35 . 2013-07-19 01:58 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-14 15:34 . 2012-11-01 05:43 2002432 ----a-w- c:\windows\system32\msxml6.dll
2013-11-14 15:33 . 2012-11-22 05:44 800768 ----a-w- c:\windows\system32\usp10.dll
2013-11-14 15:32 . 2013-08-29 02:17 5549504 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-11-14 15:31 . 2012-07-06 20:07 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2013-11-14 15:30 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2013-11-14 15:29 . 2012-06-06 06:05 1499136 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-11-13 19:17 . 2010-02-04 09:01 78680 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2013-11-13 15:46 . 2013-11-13 16:53 -------- d-----w- c:\program files (x86)\Common Files\Steam
2013-11-13 15:46 . 2013-12-03 20:08 -------- d-----w- c:\program files (x86)\Steam
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\Webteh
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\Conduit
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\programdata\Conduit
2013-11-13 12:18 . 2013-11-13 12:18 -------- d-----w- c:\program files (x86)\BS_Player_ControlBar
2013-11-12 15:04 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2013-11-12 15:04 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2013-11-12 15:04 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2013-11-12 14:56 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll
2013-11-12 14:56 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2013-11-12 14:56 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
2013-11-12 14:56 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll
2013-11-12 14:56 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll
2013-11-12 14:56 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll
2013-11-12 14:56 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll
2013-11-12 14:56 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll
2013-11-12 14:56 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe
2013-11-12 14:03 . 2013-11-12 14:03 -------- d-----w- c:\program files\Common Files\DESIGNER
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Synchronization Services
2013-11-12 14:02 . 2013-11-25 08:33 -------- d-----w- c:\program files (x86)\Microsoft.NET
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Sync Framework
2013-11-12 14:02 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-11-12 14:00 . 2013-11-12 14:00 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2013-11-12 13:59 . 2013-11-12 13:59 -------- d-----w- c:\program files\Microsoft Analysis Services
2013-11-12 13:59 . 2013-11-12 13:59 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2013-11-12 13:59 . 2013-11-12 14:02 -------- d-----w- c:\program files\Microsoft Office
2013-11-12 13:58 . 2013-11-22 02:10 -------- d-----w- c:\programdata\Microsoft Help
2013-11-12 13:58 . 2013-11-12 13:58 -------- d-----r- C:\MSOCache
2013-11-12 10:11 . 2013-11-12 10:11 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2013-11-12 08:08 . 2013-11-13 15:46 -------- d-----w- c:\users\Kuba
2013-11-12 08:06 . 2013-11-12 08:06 -------- d-----w- C:\Recovery
2013-11-05 20:55 . 2013-11-05 20:55 150808 ----a-w- c:\windows\system32\drivers\avgdiska.sys
2013-11-04 20:52 . 2013-11-04 20:52 240920 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-11-20 09:21 . 2013-11-20 09:21 204800 ----a-w- c:\windows\SysWow64\webcheck.dll
2013-11-20 09:21 . 2013-11-20 09:21 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-11-11 04:50 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe
2013-10-31 22:00 . 2013-10-31 22:00 212280 ----a-w- c:\windows\system32\drivers\avgldx64.sys
2013-10-31 21:49 . 2013-10-31 21:49 294712 ----a-w- c:\windows\system32\drivers\avgloga.sys
2013-10-24 21:25 . 2013-10-24 21:25 194872 ----a-w- c:\windows\system32\drivers\avgidsha.sys
2013-09-30 23:52 . 2013-09-30 23:52 123704 ----a-w- c:\windows\system32\drivers\avgmfx64.sys
2013-09-25 01:57 . 2013-11-14 15:38 247808 ----a-w- c:\windows\SysWow64\schannel.dll
2013-09-09 23:43 . 2013-09-09 23:43 31544 ----a-w- c:\windows\system32\drivers\avgrkx64.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll" [2013-11-06 226592]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
2012-01-14 06:34 433648 ----a-w- c:\programdata\Partner\Partner.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2013-11-06 16:53 226592 ----a-w- c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files (x86)\BS_Player_ControlBar\prxtbBS_P.dll" [2013-11-06 226592]
.
[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BackgroundContainer"="c:\users\Kuba\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll" [2013-11-06 319264]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-10-30 1820584]
"USBDriveFresher"="c:\program files (x86)\USBDriveFresher\USBDriveFresher.exe" [2011-08-29 3380224]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-12-15 343168]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2010-01-15 536576]
"YouCam Mirage"="c:\program files (x86)\Lenovo\YouCam\YCMMirage.exe" [2011-01-28 136488]
"YouCam Tray"="c:\program files (x86)\Lenovo\YouCam\YouCam.exe" [2011-01-28 228448]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2012-01-14 329056]
"UpdatePRCShortCut"="c:\program files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-13 222504]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2013-11-07 4956176]
.
c:\users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
564c81d66252657e082919bce2f72f30.exe [2013-11-10 357376]
a.exe [2013-11-10 357376]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2011-1-13 1138464]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [x]
R2 RaMediaServer;Ralink UPnP Media Server;c:\program files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe;c:\program files (x86)\Ralink\RT2860 Wireless LAN Card\ExtraFiles\RaMediaServer.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 Partner Service;Partner Service;c:\programdata\Partner\Partner.exe;c:\programdata\Partner\Partner.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys;c:\windows\SYSNATIVE\Drivers\vm331avs.sys [x]
S3 vmuvcflt;Vimicro USB Camera Filter;c:\windows\system32\Drivers\vmuvcflt.sys;c:\windows\SYSNATIVE\Drivers\vmuvcflt.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - AVGDISKA
*NewlyCreated* - AVGIDSDRIVER
*NewlyCreated* - AVGIDSHA
*NewlyCreated* - AVGLDX64
*NewlyCreated* - AVGLOGA
*NewlyCreated* - AVGMFX64
*NewlyCreated* - AVGRKX64
*NewlyCreated* - AVGTDIA
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-11-18 21:16 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 06:33]
.
2013-12-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-14 06:33]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
2012-01-14 06:34 750064 ----a-w- c:\programdata\Partner\Partner64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2012-01-14 06:19 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-04-22 11831400]
"Lenovo EE Boot Optimizer"="c:\program files (x86)\Lenovo\Boot Optimizer\PopWnd.exe" [2012-01-14 206176]
"OnekeyStudio"="c:\program files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe" [2012-01-14 789920]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2012-01-14 9769888]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2012-01-14 5908928]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-RunOnce-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-12-03 21:23:54
ComboFix-quarantined-files.txt 2013-12-03 20:23
.
Před spuštěním: Volných bajtů: 240 622 284 800
Po spuštění: Volných bajtů: 240 242 282 496
.
- - End Of File - - 87BDFBAC271DC2BA590AE9E5EBE343AC
A36C5E4F47E84449FF07ED3517B43A31

Trvate na antiviru AVG - u nas neni moc obliben - vysoka zatez systemu, slabsi detekce

netrvám, měl jsem mcafee nebo jak se to píše, bohužel nebyl zdarma, víte o nějakém lepším antiviru zdarma?

Avg je spise parodie na antivir

Odinstalujte Avg a pak pouzijte jeste http://download.avg.com/filedir/util/su ... 4_4116.exe

Nainstalujte Avast Free http://www.avast.com/get/gWR5mo92

Dejte log z DDS http://forum.viry.cz/viewtopic.php?f=13&t=125171

mužu poprosit ještě link na tu utlitku k plnemu odstraneni avg? nemužu na ni kliknout, je tam slovo ''jeste'' součástí hypertextoveho odkazu. Díki

edit: dobry už to mam

Odkaz upraven