Eset zlobí . Je tam zas vir ?

Zpráva

S3jp4k · #1 Příspěvek od **S3jp4k** » 23 úno 2014 19:50

Zdravím ! nevím proč ,ale když dám volitelnou kontrolu v Esetu tak se mi to sekne tady je screen kde se to sekne : https://imagizer.imageshack.us/v2/1260x ... 6/ja4r.png . Už sem to psal do sekce přímo pro Eset ale nevim jestli za to nemůže nějaký vir co blokuje eset.
takže dám log z RSIT :

Logfile of random's system information tool 1.09 (written by random/random)
Run by Š3jp4k at 2014-02-23 19:48:50
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 65 GB (56%) free of 114 GB
Total RAM: 8136 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:48:56, on 23.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\trend micro\Š3jp4k.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Data\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://D:\Data\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service V2 - Qualcomm Atheros - C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8401 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\OO Software\Defrag\oodag.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe"
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
"taskhost.exe"
\??\C:\Windows\system32\conhost.exe "-168660726193865172-1706112623-8106165855573262782096830355-2722520561216588663
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\OO Software\Defrag\oodtray.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1092.0.1120930510\982292113" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x1187 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.3489 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group17 pct:1h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_08/UMA-Uniformity-Trial-1-Percent/group_40/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="1092.21.1583729455\1961283365" /prefetch:673131151
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"D:\Stažené soubory\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\Data\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - D:\Data\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-01-21 2234144]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-01-21 1179576]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-12-06 7506136]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2014-01-24 4464936]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Creative Cloud]
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2014-02-11 2239376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10 472984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoKMS]
C:\Windows\AutoKMS.exe [2014-02-19 615936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
D:\Data\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cm108Sound]
C:\Windows\syswow64\RunDll32.exe [2009-07-14 44544]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
D:\Data\Origin\Origin.exe [2014-02-20 3598680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
C:\Program Files\OO Software\Defrag\oodtray.exe [2014-01-24 4464936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^O&O Defrag Tray.lnk]
C:\Windows\Installer\{177DE549-9107-4370-A840-9FC4AE8BC2BE}\app_icon.ico [2014-02-19 292878]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\Data\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-02-23 19:48:50 ----D---- C:\rsit
2014-02-23 19:48:50 ----D---- C:\Program Files\trend micro
2014-02-23 18:13:50 ----D---- C:\ProgramData\ESET
2014-02-23 18:13:50 ----D---- C:\Program Files\ESET
2014-02-22 23:46:26 ----D---- C:\Users\Š3jp4k\AppData\Roaming\TeamViewer
2014-02-22 23:46:24 ----D---- C:\Program Files (x86)\TeamViewer
2014-02-21 07:03:32 ----D---- C:\ProgramData\WarThunder
2014-02-21 07:00:16 ----D---- C:\Users\Š3jp4k\AppData\Roaming\LolClient
2014-02-21 07:00:15 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Macromedia
2014-02-21 00:35:03 ----D---- C:\Users\Š3jp4k\AppData\Roaming\The Creative Assembly
2014-02-20 20:43:56 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-02-20 20:43:56 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-02-20 20:43:56 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-02-20 20:43:44 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2014-02-20 20:43:22 ----D---- C:\ProgramData\PMB Files
2014-02-20 20:43:19 ----D---- C:\Program Files (x86)\Pando Networks
2014-02-20 20:40:54 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Riot Games
2014-02-20 15:38:10 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2014-02-20 15:37:51 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-02-20 15:37:50 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2014-02-20 15:36:49 ----D---- C:\ProgramData\Package Cache
2014-02-20 15:36:45 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-02-20 15:36:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-02-20 15:36:45 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-02-20 15:36:45 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-02-20 15:36:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-02-20 15:36:45 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-02-20 15:36:45 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-02-20 15:36:45 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-02-20 15:36:45 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-02-20 15:36:45 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-02-20 15:36:44 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-02-20 15:36:44 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-02-20 15:36:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-02-20 15:36:44 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-02-20 15:36:44 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-02-20 15:36:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-02-20 15:36:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-02-20 15:36:44 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-02-20 15:36:44 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-02-20 15:36:44 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-02-20 15:36:44 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-02-20 15:36:44 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-02-20 15:36:44 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-02-20 15:36:44 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2014-02-20 15:36:43 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2014-02-20 15:36:43 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-02-20 15:36:43 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-02-20 15:36:43 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-02-20 15:36:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-02-20 15:36:42 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-02-20 15:36:41 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-02-20 15:36:41 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-02-20 15:36:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-02-20 15:36:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-02-20 15:36:41 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-02-20 15:36:41 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-02-20 15:36:41 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-02-20 15:36:41 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-02-20 15:36:40 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2014-02-20 15:36:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2014-02-20 15:36:40 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2014-02-20 15:36:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2014-02-20 15:36:40 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2014-02-20 15:36:40 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2014-02-20 15:36:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-02-20 15:36:40 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-02-20 15:36:39 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2014-02-20 15:36:39 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2014-02-20 15:36:39 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2014-02-20 15:36:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2014-02-20 15:36:39 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2014-02-20 15:36:39 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2014-02-20 15:36:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2014-02-20 15:36:39 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-02-20 15:36:39 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-02-20 15:36:39 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-02-20 15:36:39 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-02-20 15:36:39 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-02-20 15:36:39 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-02-20 15:36:39 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-02-20 15:36:38 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2014-02-20 15:36:38 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-02-20 15:36:38 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2014-02-20 15:36:38 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2014-02-20 15:36:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2014-02-20 15:36:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2014-02-20 15:36:38 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-02-20 15:36:38 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-02-20 15:36:38 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-02-20 15:36:38 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-02-20 15:36:38 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-02-20 15:36:38 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-02-20 15:36:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-02-20 15:36:37 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2014-02-20 15:36:37 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2014-02-20 15:36:37 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2014-02-20 15:36:37 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2014-02-20 15:36:37 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2014-02-20 15:36:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2014-02-20 15:36:37 ----A---- C:\Windows\system32\xinput1_3.dll
2014-02-20 15:36:37 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-02-20 15:36:37 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-02-20 15:36:37 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-02-20 15:36:37 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-02-20 15:36:37 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-02-20 15:36:37 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-02-20 15:36:36 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2014-02-20 15:36:36 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2014-02-20 15:36:36 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-02-20 15:36:36 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2014-02-20 15:36:36 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2014-02-20 15:36:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2014-02-20 15:36:36 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-02-20 15:36:36 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-02-20 15:36:36 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-02-20 15:36:36 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-02-20 15:36:36 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-02-20 15:36:36 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-02-20 15:36:35 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-02-20 15:36:35 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-02-20 15:36:35 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-02-20 15:36:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-02-20 15:36:35 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2014-02-20 15:36:35 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2014-02-20 15:36:35 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-02-20 15:36:35 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-02-20 15:36:35 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-02-20 15:36:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-02-20 15:36:35 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-02-20 15:36:35 ----A---- C:\Windows\system32\d3dx10.dll
2014-02-20 15:36:34 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-02-20 15:36:34 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-02-20 15:36:34 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-02-20 15:36:34 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-02-20 15:36:34 ----A---- C:\Windows\system32\xinput1_2.dll
2014-02-20 15:36:34 ----A---- C:\Windows\system32\xinput1_1.dll
2014-02-20 15:36:34 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-02-20 15:36:34 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-02-20 15:36:33 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-02-20 15:36:33 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-02-20 15:36:33 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-02-20 15:36:33 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-02-20 15:36:33 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-02-20 15:36:33 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-02-20 15:36:32 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-02-20 15:36:32 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-02-20 15:36:32 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-02-20 15:36:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-02-20 15:36:32 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-02-20 15:36:32 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-02-20 15:36:32 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-02-20 15:36:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-02-20 15:36:31 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-02-20 15:36:31 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-02-20 15:36:31 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-02-20 15:36:31 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-02-20 07:17:54 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Origin
2014-02-20 07:17:11 ----D---- C:\ProgramData\Origin
2014-02-20 07:17:11 ----D---- C:\ProgramData\Electronic Arts
2014-02-19 22:19:12 ----N---- C:\Windows\Vmix108.dll
2014-02-19 22:19:04 ----N---- C:\Windows\SYSWOW64\cmpa108.dll
2014-02-19 22:19:04 ----N---- C:\Windows\SYSWOW64\CM108.dll
2014-02-19 22:19:02 ----N---- C:\Windows\system32\Cmeau108.exe
2014-02-19 22:19:02 ----A---- C:\Windows\system32\drivers\CM10864.sys
2014-02-19 21:50:09 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-02-19 21:43:44 ----D---- C:\Program Files\Adobe
2014-02-19 21:42:36 ----D---- C:\Program Files\Common Files\Adobe
2014-02-19 21:34:18 ----D---- C:\Windows\pss
2014-02-19 21:33:07 ----D---- C:\Users\Š3jp4k\AppData\Roaming\TS3Client
2014-02-19 21:23:25 ----D---- C:\Users\Š3jp4k\AppData\Roaming\NVIDIA
2014-02-19 21:23:23 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Publish Providers
2014-02-19 21:22:31 ----D---- C:\Program Files\Sony
2014-02-19 21:22:31 ----D---- C:\Program Files (x86)\Sony
2014-02-19 21:22:28 ----D---- C:\ProgramData\Sony
2014-02-19 21:19:19 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Sony
2014-02-19 21:18:34 ----D---- C:\Program Files (x86)\Adobe
2014-02-19 21:18:30 ----D---- C:\ProgramData\Adobe
2014-02-19 21:17:42 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-19 21:17:41 ----D---- C:\Windows\SYSWOW64\Macromed
2014-02-19 21:17:40 ----D---- C:\Windows\system32\Macromed
2014-02-19 20:55:22 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Skype
2014-02-19 20:55:19 ----RD---- C:\Program Files (x86)\Skype
2014-02-19 20:55:19 ----D---- C:\ProgramData\Skype
2014-02-19 20:46:16 ----D---- C:\Windows\system32\oodag
2014-02-19 20:46:14 ----D---- C:\Program Files\OO Software
2014-02-19 20:45:40 ----D---- C:\ProgramData\OO Software
2014-02-19 20:35:28 ----D---- C:\Program Files\CCleaner
2014-02-19 20:28:42 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Malwarebytes
2014-02-19 20:28:36 ----D---- C:\ProgramData\Malwarebytes
2014-02-19 20:28:36 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-19 20:28:36 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-02-19 20:21:41 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-02-19 20:21:41 ----D---- C:\Program Files\Realtek
2014-02-19 20:21:34 ----A---- C:\Windows\system32\WavesGUILib64.dll
2014-02-19 20:21:34 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-02-19 20:21:34 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-02-19 20:21:34 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-02-19 20:21:34 ----A---- C:\Windows\system32\SRSHP64.dll
2014-02-19 20:21:33 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-02-19 20:21:33 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-02-19 20:21:33 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RtkApi64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RTEED64A.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RtDataProc64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RTCOM64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-02-19 20:21:32 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2014-02-19 20:21:31 ----A---- C:\Windows\system32\MBWrp64.dll
2014-02-19 20:21:31 ----A---- C:\Windows\system32\drivers\MBfilt64.sys
2014-02-19 20:21:30 ----A---- C:\Windows\SYSWOW64\MBAPO232.dll
2014-02-19 20:21:30 ----A---- C:\Windows\system32\MBAPO264.dll
2014-02-19 20:21:29 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-19 20:21:29 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-19 20:21:29 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-19 20:21:27 ----A---- C:\Windows\system32\FMAPO64.dll
2014-02-19 20:21:26 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-19 20:21:26 ----A---- C:\Windows\system32\AERTAR64.dll
2014-02-19 20:21:26 ----A---- C:\Windows\system32\AERTAC64.dll
2014-02-19 20:21:24 ----A---- C:\Windows\RtlExUpd.dll
2014-02-19 20:16:39 ----D---- C:\ProgramData\Qualcomm
2014-02-19 20:16:23 ----D---- C:\Program Files\Qualcomm Atheros
2014-02-19 20:15:15 ----D---- C:\ProgramData\Downloaded Installations
2014-02-19 20:01:24 ----N---- C:\Windows\system32\CmiInstallResAll64.dll
2014-02-19 20:01:18 ----RA---- C:\Windows\difxapi.dll
2014-02-19 19:56:38 ----D---- C:\Users\Š3jp4k\AppData\Roaming\ESET
2014-02-19 19:22:06 ----D---- C:\Program Files\Microsoft Silverlight
2014-02-19 19:22:06 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-02-19 19:20:47 ----D---- C:\Program Files\Microsoft Office
2014-02-19 19:11:56 ----A---- C:\Windows\AutoKMS.ini
2014-02-19 19:11:56 ----A---- C:\Windows\AutoKMS.exe
2014-02-19 19:09:38 ----D---- C:\Program Files\Common Files\DESIGNER
2014-02-19 19:09:28 ----D---- C:\Program Files\Microsoft Synchronization Services
2014-02-19 19:09:22 ----D---- C:\Windows\PCHEALTH
2014-02-19 19:09:22 ----D---- C:\Program Files\Microsoft Sync Framework
2014-02-19 19:09:22 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2014-02-19 19:07:13 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-02-19 19:06:51 ----D---- C:\Program Files\Microsoft Analysis Services
2014-02-19 19:06:51 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-02-19 19:06:49 ----D---- C:\ProgramData\Microsoft Help
2014-02-19 19:06:49 ----D---- C:\Program Files (x86)\Microsoft Office
2014-02-19 19:04:35 ----D---- C:\Users\Š3jp4k\AppData\Roaming\WinRAR
2014-02-19 19:04:22 ----D---- C:\Program Files\WinRAR
2014-02-19 18:49:13 ----A---- C:\Windows\system32\RTCM_Config.ini
2014-02-19 18:49:12 ----A---- C:\Windows\SYSWOW64\RtCamX.dll
2014-02-19 18:49:12 ----A---- C:\Windows\system32\RtCamX64.dll
2014-02-19 18:49:12 ----A---- C:\Windows\system32\drivers\rtsuvc.sys
2014-02-19 18:49:12 ----A---- C:\Windows\RtCamU64.exe
2014-02-19 18:42:23 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-02-19 18:42:23 ----A---- C:\Windows\system32\vbscript.dll
2014-02-19 18:42:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-02-19 18:42:03 ----A---- C:\Windows\system32\msrating.dll
2014-02-19 18:42:02 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-02-19 18:42:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-02-19 18:42:02 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-02-19 18:42:02 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-02-19 18:42:02 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-02-19 18:42:02 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-02-19 18:42:02 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\msfeeds.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\jsproxy.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\ieUnatt.exe
2014-02-19 18:42:02 ----A---- C:\Windows\system32\ieui.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\iesetup.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\iernonce.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-02-19 18:42:02 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-02-19 18:42:02 ----A---- C:\Windows\system32\ie4uinit.exe
2014-02-19 18:42:01 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-02-19 18:42:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-02-19 18:42:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-02-19 18:42:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-02-19 18:42:01 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-02-19 18:42:01 ----A---- C:\Windows\system32\wininet.dll
2014-02-19 18:42:01 ----A---- C:\Windows\system32\urlmon.dll
2014-02-19 18:42:01 ----A---- C:\Windows\system32\mshtml.dll
2014-02-19 18:42:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-02-19 18:42:01 ----A---- C:\Windows\system32\iertutil.dll
2014-02-19 18:42:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-02-19 18:42:00 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-02-19 18:42:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-02-19 18:42:00 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-02-19 18:42:00 ----A---- C:\Windows\system32\ieframe.dll
2014-02-19 18:41:59 ----A---- C:\Windows\system32\jscript9.dll
2014-02-19 18:41:38 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-02-19 18:41:38 ----A---- C:\Windows\system32\mstscax.dll
2014-02-19 18:35:48 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2014-02-19 18:34:43 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvwgf2umx.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvopencl.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvoglv64.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvoglshim64.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvinitx.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\NvIFR64.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvhdap64.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\NvFBC64.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvdispgenco6433489.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvdispco6433489.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvcuvid.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvcuvenc.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvcuda.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\nvcompiler.dll
2014-02-19 18:34:43 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2014-02-19 18:34:43 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2014-02-19 18:30:02 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-19 18:30:02 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-02-19 18:30:02 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-02-19 18:30:02 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-02-19 18:30:02 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-02-19 18:30:02 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-02-19 18:29:58 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2014-02-19 18:29:58 ----A---- C:\Windows\system32\nvspcap64.dll
2014-02-19 18:29:48 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2014-02-19 18:29:48 ----A---- C:\Windows\system32\nvaudcap64v.dll
2014-02-19 18:29:48 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2014-02-19 18:27:39 ----D---- C:\Program Files (x86)\Google
2014-02-19 18:06:21 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-02-19 18:06:21 ----A---- C:\Windows\system32\wmploc.DLL
2014-02-19 18:06:20 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-02-19 18:06:20 ----A---- C:\Windows\system32\wmp.dll
2014-02-19 18:05:49 ----D---- C:\Windows\system32\MRT
2014-02-19 18:05:49 ----A---- C:\Windows\system32\MRT.exe
2014-02-19 18:04:37 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-19 18:04:20 ----D---- C:\Windows\Migration
2014-02-19 18:04:20 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-02-19 18:03:01 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-02-19 18:00:18 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-02-19 18:00:18 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\url.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-02-19 18:00:17 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\wextract.exe
2014-02-19 18:00:17 ----A---- C:\Windows\system32\webcheck.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\url.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-02-19 18:00:17 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-19 18:00:17 ----A---- C:\Windows\system32\pngfilt.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\occache.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\msls31.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\mshtmler.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\mshtmled.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\mshta.exe
2014-02-19 18:00:17 ----A---- C:\Windows\system32\msfeedssync.exe
2014-02-19 18:00:17 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\licmgr10.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\jsIntl.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\jscript.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\inseng.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\imgutil.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\iexpress.exe
2014-02-19 18:00:17 ----A---- C:\Windows\system32\iesysprep.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\iepeers.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\iedkcs32.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\ieapfltr.dat
2014-02-19 18:00:17 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\icardie.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\elshyph.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\dxtrans.dll
2014-02-19 18:00:17 ----A---- C:\Windows\system32\dxtmsft.dll
2014-02-19 17:59:05 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-19 17:59:05 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-19 17:59:05 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-19 17:59:05 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-02-19 17:59:04 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-02-19 17:59:04 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-02-19 17:59:04 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-02-19 17:59:04 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-02-19 17:59:04 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-02-19 17:59:04 ----A---- C:\Windows\system32\wksprtPS.dll
2014-02-19 17:59:04 ----A---- C:\Windows\system32\wksprt.exe
2014-02-19 17:59:04 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-02-19 17:59:04 ----A---- C:\Windows\system32\tsgqec.dll
2014-02-19 17:59:04 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-02-19 17:59:04 ----A---- C:\Windows\system32\mstsc.exe
2014-02-19 17:59:04 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-02-19 17:55:14 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-19 17:55:14 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2014-02-19 17:55:14 ----A---- C:\Windows\system32\drivers\terminpt.sys
2014-02-19 17:55:14 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-02-19 17:55:13 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-02-19 17:55:13 ----A---- C:\Windows\system32\rdpudd.dll
2014-02-19 17:55:13 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-02-19 17:55:13 ----A---- C:\Windows\system32\rdpcorets.dll
2014-02-19 17:54:03 ----A---- C:\Windows\system32\browserchoice.exe
2014-02-19 17:51:33 ----D---- C:\ProgramData\NVIDIA
2014-02-19 17:51:21 ----A---- C:\Windows\system32\nvvsvc.exe
2014-02-19 17:51:21 ----A---- C:\Windows\system32\nvsvcr.dll
2014-02-19 17:51:21 ----A---- C:\Windows\system32\nvsvc64.dll
2014-02-19 17:51:21 ----A---- C:\Windows\system32\nvshext.dll
2014-02-19 17:51:21 ----A---- C:\Windows\system32\nvmctray.dll
2014-02-19 17:51:21 ----A---- C:\Windows\system32\nvcpl.dll
2014-02-19 17:51:15 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-02-19 17:51:15 ----A---- C:\Windows\system32\OpenCL.dll
2014-02-19 17:51:11 ----D---- C:\ProgramData\NVIDIA Corporation
2014-02-19 17:51:10 ----D---- C:\Program Files\NVIDIA Corporation
2014-02-19 17:51:10 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-02-19 17:46:22 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-02-19 17:46:22 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-02-19 17:46:21 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-02-19 17:46:21 ----A---- C:\Windows\system32\qdvd.dll
2014-02-19 17:46:20 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-02-19 17:46:20 ----A---- C:\Windows\system32\tzres.dll
2014-02-19 17:46:20 ----A---- C:\Windows\system32\crypt32.dll
2014-02-19 17:46:19 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-02-19 17:46:19 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-02-19 17:46:19 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-02-19 17:46:19 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-02-19 17:46:19 ----A---- C:\Windows\system32\wintrust.dll
2014-02-19 17:46:19 ----A---- C:\Windows\system32\cryptsvc.dll
2014-02-19 17:46:19 ----A---- C:\Windows\system32\cryptnet.dll
2014-02-19 17:46:18 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-02-19 17:46:18 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-02-19 17:46:18 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-02-19 17:46:18 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-02-19 17:46:18 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-19 17:46:18 ----A---- C:\Windows\system32\poqexec.exe
2014-02-19 17:46:18 ----A---- C:\Windows\system32\credui.dll
2014-02-19 17:46:18 ----A---- C:\Windows\system32\authui.dll
2014-02-19 17:46:17 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-02-19 17:46:17 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-02-19 17:46:17 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-02-19 17:46:17 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-02-19 17:46:17 ----A---- C:\Windows\system32\winsrv.dll
2014-02-19 17:46:17 ----A---- C:\Windows\system32\smss.exe
2014-02-19 17:46:17 ----A---- C:\Windows\system32\msieftp.dll
2014-02-19 17:46:17 ----A---- C:\Windows\system32\KernelBase.dll
2014-02-19 17:46:17 ----A---- C:\Windows\system32\kernel32.dll
2014-02-19 17:46:17 ----A---- C:\Windows\system32\csrsrv.dll
2014-02-19 17:46:17 ----A---- C:\Windows\system32\conhost.exe
2014-02-19 17:46:17 ----A---- C:\Windows\system32\comctl32.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-02-19 17:46:16 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-02-19 17:46:16 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-02-19 17:46:16 ----A---- C:\Windows\system32\apisetschema.dll
2014-02-19 17:46:15 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-02-19 17:46:15 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-02-19 17:46:15 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-02-19 17:46:15 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-02-19 17:46:15 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-02-19 17:46:15 ----A---- C:\Windows\system32\WMPhoto.dll
2014-02-19 17:46:15 ----A---- C:\Windows\system32\WebClnt.dll
2014-02-19 17:46:15 ----A---- C:\Windows\system32\msxml3r.dll
2014-02-19 17:46:15 ----A---- C:\Windows\system32\msxml3.dll
2014-02-19 17:46:15 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-02-19 17:46:15 ----A---- C:\Windows\system32\davclnt.dll
2014-02-19 17:46:14 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-02-19 17:46:14 ----A---- C:\Windows\system32\imagehlp.dll
2014-02-19 17:46:14 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-02-19 17:46:14 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-02-19 17:46:14 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-02-19 17:46:14 ----A---- C:\Windows\system32\drivers\afd.sys
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-02-19 17:46:11 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-02-19 17:46:11 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-02-19 17:46:11 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-02-19 17:46:11 ----A---- C:\Windows\system32\secproc_isv.dll
2014-02-19 17:46:11 ----A---- C:\Windows\system32\secproc.dll
2014-02-19 17:46:11 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-19 17:46:11 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-02-19 17:46:11 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-02-19 17:46:11 ----A---- C:\Windows\system32\RMActivate.exe
2014-02-19 17:46:11 ----A---- C:\Windows\system32\msdrm.dll
2014-02-19 17:46:09 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-02-19 17:46:08 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-02-19 17:46:08 ----A---- C:\Windows\system32\d3d10warp.dll
2014-02-19 17:46:08 ----A---- C:\Windows\system32\d2d1.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\user.exe
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-02-19 17:46:07 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\wow64.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\tdh.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-02-19 17:46:07 ----A---- C:\Windows\system32\ntdll.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\lpk.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\fontsub.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\dciman32.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\atmlib.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\atmfd.dll
2014-02-19 17:46:07 ----A---- C:\Windows\system32\advapi32.dll
2014-02-19 17:46:06 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-02-19 17:46:06 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-02-19 17:46:06 ----A---- C:\Windows\system32\shell32.dll
2014-02-19 17:46:06 ----A---- C:\Windows\system32\shdocvw.dll
2014-02-19 17:46:06 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-02-19 17:46:06 ----A---- C:\Windows\system32\drivers\netio.sys
2014-02-19 17:46:05 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-02-19 17:46:05 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-02-19 17:46:05 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-02-19 17:46:05 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-02-19 17:46:05 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-02-19 17:46:05 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\win32k.sys
2014-02-19 17:46:05 ----A---- C:\Windows\system32\sspisrv.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\sspicli.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\schannel.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\secur32.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\rpcrt4.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\ncrypt.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\mswsock.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\lsass.exe
2014-02-19 17:46:05 ----A---- C:\Windows\system32\lsasrv.dll
2014-02-19 17:46:05 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-02-19 17:46:05 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-02-19 17:46:05 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-02-19 17:46:05 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-02-19 17:46:05 ----A---- C:\Windows\system32\drivers\cng.sys
2014-02-19 17:46:04 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-02-19 17:46:04 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-02-19 17:46:04 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-02-19 17:46:01 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-02-19 17:46:01 ----A---- C:\Windows\system32\gdi32.dll
2014-02-19 17:45:56 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-19 17:45:56 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-19 17:45:00 ----A---- C:\Windows\system32\scavengeui.dll
2014-02-19 17:44:59 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-02-19 17:44:59 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-02-19 17:44:59 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-02-19 17:44:59 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-02-19 17:44:59 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-02-19 17:44:59 ----A---- C:\Windows\system32\wscript.exe
2014-02-19 17:44:59 ----A---- C:\Windows\system32\scrrun.dll
2014-02-19 17:44:59 ----A---- C:\Windows\system32\nshwfp.dll
2014-02-19 17:44:59 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-02-19 17:44:59 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-02-19 17:44:59 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-02-19 17:44:59 ----A---- C:\Windows\system32\cscript.exe
2014-02-19 17:42:43 ----A---- C:\Windows\system32\wups2.dll
2014-02-19 17:42:43 ----A---- C:\Windows\system32\wucltux.dll
2014-02-19 17:42:43 ----A---- C:\Windows\system32\wuaueng.dll
2014-02-19 17:42:43 ----A---- C:\Windows\system32\wuauclt.exe
2014-02-19 17:42:42 ----A---- C:\Windows\system32\wuwebv.dll
2014-02-19 17:42:42 ----A---- C:\Windows\system32\wups.dll
2014-02-19 17:42:42 ----A---- C:\Windows\system32\wudriver.dll
2014-02-19 17:42:42 ----A---- C:\Windows\system32\wuapp.exe
2014-02-19 17:42:42 ----A---- C:\Windows\system32\wuapi.dll
2014-02-19 17:39:02 ----SHD---- C:\Windows\Installer
2014-02-19 17:37:00 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-19 17:37:00 ----D---- C:\Program Files (x86)\Realtek
2014-02-19 17:36:58 ----HD---- C:\Program Files (x86)\Temp
2014-02-19 17:35:20 ----D---- C:\Program Files (x86)\Intel
2014-02-19 17:35:20 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-02-19 17:35:14 ----D---- C:\Intel
2014-02-19 17:35:02 ----D---- C:\MSI
2014-02-19 17:33:21 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Adobe
2014-02-19 17:33:16 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Identities
2014-02-19 17:33:13 ----SD---- C:\Users\Š3jp4k\AppData\Roaming\Microsoft
2014-02-19 17:33:13 ----D---- C:\Users\Š3jp4k\AppData\Roaming\Media Center Programs
2014-02-19 17:33:12 ----SHD---- C:\Recovery
2014-02-19 17:33:12 ----SHD---- C:\ProgramData\Šablony
2014-02-19 17:33:12 ----SHD---- C:\ProgramData\Plocha
2014-02-19 17:33:12 ----SHD---- C:\ProgramData\Oblíbené položky
2014-02-19 17:33:12 ----SHD---- C:\ProgramData\Nabídka Start
2014-02-19 17:33:12 ----SHD---- C:\ProgramData\Dokumenty
2014-02-19 17:33:12 ----SHD---- C:\ProgramData\Data aplikací
2014-02-19 17:33:11 ----D---- C:\Windows\SoftwareDistribution
2014-02-19 17:29:12 ----D---- C:\Windows\Prefetch
2014-02-19 17:29:05 ----SHD---- C:\System Volume Information
2014-02-19 17:29:05 ----ASH---- C:\pagefile.sys
2014-02-19 17:29:05 ----ASH---- C:\hiberfil.sys
2014-02-19 17:28:40 ----D---- C:\Windows\Panther
2014-01-24 14:32:52 ----A---- C:\Windows\system32\ooscrsav.scr
2014-01-24 14:32:36 ----A---- C:\Windows\system32\oodbs.exe
2014-01-24 14:32:20 ----A---- C:\Windows\system32\oodssrs.dll
2014-01-24 14:32:14 ----A---- C:\Windows\system32\oodbsrs.dll

======List of files/folders modified in the last 1 month======

2014-02-23 19:48:50 ----RD---- C:\Program Files
2014-02-23 19:27:05 ----D---- C:\Windows\System32
2014-02-23 19:27:05 ----D---- C:\Windows\inf
2014-02-23 19:27:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-02-23 19:15:12 ----D---- C:\Windows\Temp
2014-02-23 19:00:01 ----D---- C:\Windows\system32\LogFiles
2014-02-23 18:14:41 ----D---- C:\Windows\system32\config
2014-02-23 18:14:07 ----D---- C:\Windows\system32\DriverStore
2014-02-23 18:14:07 ----D---- C:\Windows\system32\drivers
2014-02-23 18:14:07 ----D---- C:\Windows\system32\catroot
2014-02-23 18:13:52 ----D---- C:\Windows
2014-02-23 18:13:50 ----HD---- C:\ProgramData
2014-02-23 18:11:30 ----D---- C:\Windows\system32\catroot2
2014-02-22 23:46:28 ----D---- C:\Windows\system32\Tasks
2014-02-22 23:46:26 ----RSD---- C:\Windows\Fonts
2014-02-22 23:46:24 ----RD---- C:\Program Files (x86)
2014-02-22 09:20:32 ----D---- C:\Windows\winsxs
2014-02-21 13:56:05 ----D---- C:\Windows\SysWOW64
2014-02-21 13:52:24 ----D---- C:\Windows\system32\wdi
2014-02-21 07:04:36 ----RD---- C:\Users
2014-02-20 21:50:47 ----D---- C:\Windows\Logs
2014-02-20 21:18:48 ----RSD---- C:\Windows\assembly
2014-02-20 20:43:44 ----D---- C:\Windows\Tasks
2014-02-20 15:38:12 ----D---- C:\Program Files (x86)\Common Files
2014-02-20 15:36:33 ----D---- C:\Windows\Microsoft.NET
2014-02-20 13:49:38 ----D---- C:\Windows\rescache
2014-02-19 22:19:02 ----D---- C:\Windows\system
2014-02-19 22:10:43 ----D---- C:\Windows\SYSWOW64\LogFiles
2014-02-19 22:10:42 ----D---- C:\Windows\debug
2014-02-19 21:42:46 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-02-19 21:42:36 ----D---- C:\Program Files\Common Files
2014-02-19 19:50:25 ----A---- C:\Windows\win.ini
2014-02-19 19:39:20 ----D---- C:\Program Files\Common Files\System
2014-02-19 19:22:31 ----SD---- C:\ProgramData\Microsoft
2014-02-19 19:09:38 ----D---- C:\Windows\ShellNew
2014-02-19 19:09:25 ----D---- C:\Program Files (x86)\MSBuild
2014-02-19 18:49:17 ----D---- C:\Windows\twain_32
2014-02-19 18:44:49 ----D---- C:\Program Files (x86)\Internet Explorer
2014-02-19 18:44:48 ----D---- C:\Program Files\Internet Explorer
2014-02-19 18:42:52 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-02-19 18:42:52 ----D---- C:\Windows\system32\cs-CZ
2014-02-19 18:14:40 ----D---- C:\Program Files\Windows Media Player
2014-02-19 18:14:40 ----D---- C:\Program Files (x86)\Windows Media Player
2014-02-19 18:14:39 ----D---- C:\Windows\SYSWOW64\wbem
2014-02-19 18:14:39 ----D---- C:\Windows\SYSWOW64\migration
2014-02-19 18:14:39 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-19 18:14:39 ----D---- C:\Windows\system32\wbem
2014-02-19 18:14:39 ----D---- C:\Windows\system32\migration
2014-02-19 18:14:39 ----D---- C:\Windows\system32\en-US
2014-02-19 18:14:39 ----D---- C:\Windows\system32\drivers\en-US
2014-02-19 18:14:39 ----D---- C:\Windows\PolicyDefinitions
2014-02-19 18:14:38 ----D---- C:\Windows\AppPatch
2014-02-19 17:51:20 ----D---- C:\Windows\Help
2014-02-19 17:50:39 ----D---- C:\Windows\system32\CodeIntegrity
2014-02-19 17:39:10 ----D---- C:\Windows\system32\restore
2014-02-19 17:33:15 ----SHD---- C:\$Recycle.Bin
2014-02-19 17:33:12 ----D---- C:\Program Files\Windows NT
2014-02-19 17:31:45 ----D---- C:\Windows\system32\sysprep
2014-02-19 17:29:44 ----D---- C:\Windows\system32\drivers\UMDF
2014-02-19 17:29:12 ----D---- C:\Windows\CSC
2014-02-08 19:34:51 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-02-08 19:34:51 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2014-02-08 19:34:51 ----A---- C:\Windows\system32\nvumdshimx.dll
2014-02-08 19:34:51 ----A---- C:\Windows\system32\nvapi64.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2013-09-17 239296]
R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 BfLwf;Qualcomm Atheros Bandwidth Control; C:\Windows\system32\DRIVERS\bflwfx64.sys [2013-11-08 80080]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-12-10 3771352]
R3 KbFilter_Kb_FlexDef3x;HID Keyboard(FlexDef3x) Driver Service; C:\Windows\system32\DRIVERS\KbFilter_FlexDef3x.sys [2012-10-16 22016]
R3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w7x64.sys [2013-03-20 154320]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-11-28 197408]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-12-27 39200]
R3 rtsuvc;USB Video Device; C:\Windows\system32\DRIVERS\rtsuvc.sys [2012-04-06 8222440]
R3 USBPNPA;USB PnP Sound Device Interface; C:\Windows\system32\drivers\CM10864.sys [2009-11-18 1308160]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 MSICDSetup;MSICDSetup; \??\E:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2012-08-23 29696]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-01-21 1593632]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-01-21 16939296]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-02-08 923936]
R2 OODefragAgent;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2014-01-24 1657128]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-02-20 76888]
R2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2; C:\Program Files\Qualcomm Atheros\Network Manager\KillerService.exe [2014-01-22 344576]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-02-08 411936]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-02-17 4915040]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-19 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-20 257928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-19 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; D:\Data\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-02-20 569024]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-07-06 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 23 úno 2014 20:13

Zdravím! V logu nic nebezpečného nevidím. Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

S3jp4k · #3 Příspěvek od **S3jp4k** » 23 úno 2014 21:26

Combofix použiji , ale teť jsem zkoušel Eset opravit tak že když se dělá odinstalace antiviráku tak je tam na výběr i oprava na to sem klikl a opravil poté jsem spustil volitelnou kontrolu a proběhla úspěšně. Resetoval jsem pc a pro jistotu znova a zase se to seklo na stejném místě . Tak počkám jetli se to náhodou neodsekne... Co myslíte je to způsobené virem nebo má problém Eset ?

#4 Příspěvek od **Rudy** » 23 úno 2014 21:29

Těžko říci. Pokud odinstalujete Eset jejich utilitou: http://www.bleepingcomputer.com/downloa ... installer/ a pak nainstalujete nový a on bude fungovat, bylo to chybou esetu. Běžným odinstalovaním se může stát, že v PC něco zbude a pak to bude zlobit.

S3jp4k · #5 Příspěvek od **S3jp4k** » 23 úno 2014 21:31

dobře zkusím to odinstalovat jejich utilitou kterou jste my poslal

#6 Příspěvek od **Rudy** » 23 úno 2014 21:35

S3jp4k · #7 Příspěvek od **S3jp4k** » 24 úno 2014 07:13

I tak se to seklo na stejném místě

. Předtím než spustíme Combofix jsem ještě kontaktoval technickou podporu přímo z programu (píšou že je to doporučené) tak chvilku vydržte ... Třeba my pomůžou.

#8 Příspěvek od **Rudy** » 24 úno 2014 17:29

OK. Sám jsem zvědavý, co vám odpoví.

S3jp4k · #9 Příspěvek od **S3jp4k** » 24 úno 2014 17:39

no řešíme to ale tet je asi Off nebo AFK už dlouho neodpověděl . Takto to probíhá :
já : Dobrý den , když spustí hlubokou kontrolu počítače (volitelná kontrola) tak se mi to sekne v určitém momentě ... Ale např. smart kontrola normálně funguje. Když se to sekne zastaví se čas atd. ale kolečko se pořád točí vlevo. Když kontrolu přeruším a kouknu se na protokol tak je tam uveden doopravdický čas (je tam správný čas i s časem se seknutou kontrolou). zde je screen kde přesně se to sekne : https://imagizer.imageshack.us/v2/1260x ... 6/ja4r.png
(Mám Eset SMART SECURITY7) Eset už jsem zkoušel reinstalovat i pomocí vaší utilitou na odstranění celého esetu.Aktualizace normálně fungují. Doufám že to nedělá nějaký vir ale když jsem na forum viry.cz dal log z RSIT říkali že je čistý potom mám sepnout ještě Combofix ,ale to se mi moc nehce protože nevím jestli je to tím virem nebo ne ...

on :Dobrý den,

a nezasekne se ESET vždy na tom samém souboru (viz. screenshot)? Předpokládám, že zaseknutí trvá déle než pět minut?

já : ano a už se to ani neodsekne

on : Dobrý den,

zkuste na ten soubor udělat výjimku: https://servis.eset.cz/index.php?/Knowl ... ni-ochrany

já : tet jsem udělal kontrolu volitelnou 2x po sobě a obě uspěšné tak už se to asi nějak dalo do kupy, ale hned po tom tet když zapnu pc tak mi to píše že není připojen net potom vytáhnu kabel (lan) zase zapojím a normálně se to rozjede. tak skusím přinstalovat ovladač

já : tak jsem přišel na to že někdy to je úspěšné a někdy se to tam sekne ... takže to mám dát do výjimky ? Já jen aby to nebyl nějakej vir nebo tak

on :Dobrý den,

zkuste, zda ta výjimka pomůže, pak víme, že je to tím souborem (velikost, chybný kontrolní součet). Výjimka pomohla?

já : kontroly proběhly úspěšně pro výjimce(3x). Ale smart kontrola normálně funguje i když výjimka není ... A hlavně když nebyla výjimka tak se i občas stalo že hluboké kontrola proběhla uspěšně.

pak už neodepsal tet čekám co odepíše. Pokud ještě dnes vůbec napíše

#10 Příspěvek od **Rudy** » 24 úno 2014 17:51

OK. Já si klidně počkám. Uvidíme, info od něj by mělo být směrodatné.

S3jp4k · #11 Příspěvek od **S3jp4k** » 24 úno 2014 17:52

nechci vás otravovat ale tak když sem ten "začátečník" chci se zeptat ohledně toho možného chybného kontrolního součtu... Co to vůbec je ? A dá se to opravit ?

#12 Příspěvek od **Rudy** » 24 úno 2014 18:26

Kontrolní součet, neboli CRC, viz. wikipedie: http://cs.wikipedia.org/wiki/Cyklick%C3 ... ou%C4%8Det

S3jp4k · #13 Příspěvek od **S3jp4k** » 24 úno 2014 21:15

ale víte co je divné že 6x mám úspěch ve volitelné kontrole a najednou v 7 pokuse se to sekne tak kde se to seká ... Nepochopím. pokud by byl problém se souborem tak uspěch není nikdy ne ?

#14 Příspěvek od **Rudy** » 24 úno 2014 21:23

Ano, to je to, co bohužel nevím. na to bude nejlepší znát stanovisko Esetu.

S3jp4k · #15 Příspěvek od **S3jp4k** » 25 úno 2014 12:56

takže mi odpověděl toto : Dobrý den,

evidentně bude problém v tom souboru, nastavte na něj tu výjimku, nebo ho smažte (pokud není potřeba).

takže nevím jestli teda výjimka nebo smazat (nechci moc tu vyjimku kuli tomu jestli se tam třeba neukládají nějaké registry atd. a potom by se to nekontrolovalo. takže radši smazat ale já nevím jestli ho vůbec můžu smazat nejradši bych ho nějak nahradil neví te jak ? Přišel jsem na to že když zadám toto do chromu C:\Users\Š3jp4k\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms tak mi začne automaticky stahovat soubor ten co mám poškozený takže mě napadlo jetli ho nemám nahradit a bude to Ok.

Nevíte někdo co to je za soubor ?

VIRY.CZ

Eset zlobí . Je tam zas vir ?

Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?

Re: Eset zlobí . Je tam zas vir ?