VIRY.CZ

Ahoj.

Naformátoval jsem si dnes notebook a začal tam instalovat programy, co potřebuju. Jedním z nich je Daemon Tools, ale zřejmě mi nainstaloval i jiný program - "SpeedUpMyComputer". Jenomže když jej odinstaluju, tak se místo něj nainstaluje "FixMyRegistry". A když tenhle odinstaluju, tak se zase nainstaluje ten první.
Nechci to čistě jen smáznout přes SHIFT+DEL.
Můžete mi tu prosím pomoct program odstranit? Mám případně vytvořit log v některém prográmku?

Děkuji.

Zdravim

Ono je treba u toho instalovani a odinstalovani i poradne cist. A ne jen zbesile klikat na dalsi dalsi dalsi. Vetsinou totiz staci zrusit zatrzitko a je klid

Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=130786

Ale to já právě dělám, vždy instaluju na "Uživatelskou instalaci", protože už i normální SW tam cpe různé kraviny jako lišty nebo antiviry, atp.
Jen jsem při instalaci pracoval na PC a vyskočilo při instalaci okno, zrovna jsem stiskl klávesu a potvrdil volbu. Takže to asi bylo ono :-\
Děkuji za pomoc.

Logfile of random's system information tool 1.10 (written by random/random)
Run by cross at 2014-06-14 23:38:17
Microsoft Windows 7 Home Premium
System drive C: has 95 GB (78%) free of 121 GB
Total RAM: 2937 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:38:25, on 14.6.2014
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16555)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Users\cross\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\cross\Desktop\RSIT.exe
C:\Program Files\trend micro\cross.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SpeedUpMyComputer] C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as /ss
O4 - HKCU\..\Run: [FixMyRegistry] C:\Program Files\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = cross\AppData\Roaming\Dropbox\bin\Dropbox.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

--
End of file - 3971 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-06-14 436600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-14 3890208]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"SpeedUpMyComputer"=C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe [2014-06-03 2054776]
"FixMyRegistry"=C:\Program Files\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss []

C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\cross\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-14 23:38:17 ----D---- C:\rsit
2014-06-14 23:38:17 ----D---- C:\Program Files\trend micro
2014-06-14 23:35:33 ----D---- C:\ProgramData\Adobe
2014-06-14 23:33:13 ----D---- C:\Windows\system32\Macromed
2014-06-14 23:32:46 ----D---- C:\Program Files\Adobe
2014-06-14 23:31:35 ----D---- C:\Program Files\Common Files\Macrovision Shared
2014-06-14 23:15:47 ----D---- C:\Program Files\Microsoft.NET
2014-06-14 23:07:06 ----A---- C:\Windows\system32\atmfd.dll
2014-06-14 23:07:05 ----A---- C:\Windows\system32\atmlib.dll
2014-06-14 23:06:31 ----A---- C:\Windows\system32\msv1_0.dll
2014-06-14 22:59:27 ----D---- C:\Windows\system32\Wat
2014-06-14 22:46:11 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2014-06-14 22:46:11 ----A---- C:\Windows\system32\PresentationHost.exe
2014-06-14 22:46:11 ----A---- C:\Windows\system32\netfxperf.dll
2014-06-14 22:46:11 ----A---- C:\Windows\system32\mscoree.dll
2014-06-14 22:46:10 ----A---- C:\Windows\system32\dfshim.dll
2014-06-14 22:33:04 ----D---- C:\Program Files\SmartTweak
2014-06-14 22:33:00 ----D---- C:\Program Files\Seznam.cz
2014-06-14 22:32:10 ----D---- C:\Users\cross\AppData\Roaming\Seznam.cz
2014-06-14 22:31:21 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2014-06-14 22:31:16 ----D---- C:\Users\cross\AppData\Roaming\DAEMON Tools Lite
2014-06-14 22:31:13 ----D---- C:\Program Files\DAEMON Tools Lite
2014-06-14 22:30:16 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-06-14 22:10:56 ----A---- C:\Windows\system32\Wdfres.dll
2014-06-14 22:10:56 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-06-14 22:10:56 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-06-14 22:08:57 ----D---- C:\Windows\system32\MRT
2014-06-14 22:08:51 ----A---- C:\Windows\system32\MRT.exe
2014-06-14 22:07:40 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-06-14 22:07:40 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-06-14 22:07:39 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-06-14 22:07:39 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-06-14 22:07:37 ----A---- C:\Windows\system32\WUDFHost.exe
2014-06-14 22:07:37 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-06-14 22:07:36 ----A---- C:\Windows\system32\WUDFx.dll
2014-06-14 22:07:09 ----D---- C:\Program Files\Common Files\Adobe
2014-06-14 22:05:43 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-06-14 22:05:42 ----A---- C:\Windows\system32\wmi.dll
2014-06-14 22:05:42 ----A---- C:\Windows\system32\imagehlp.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\wininet.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\urlmon.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\url.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msrating.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msls31.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\mshtmler.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msfeedssync.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieui.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iesysprep.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iesetup.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iertutil.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iernonce.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieframe.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieapfltr.dat
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieakeng.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\icardie.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\wextract.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\webcheck.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\vbscript.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\pngfilt.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\occache.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\mshtml.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\mshta.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\licmgr10.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\jscript9.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\jscript.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\inseng.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\imgutil.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\iexpress.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\iepeers.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\iedkcs32.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\ieakui.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\ieaksie.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\admparse.dll
2014-06-14 22:02:18 ----A---- C:\Windows\system32\browserchoice.exe
2014-06-14 22:00:58 ----D---- C:\Users\cross\AppData\Roaming\Adobe
2014-06-14 21:56:57 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-06-14 21:56:57 ----A---- C:\Windows\system32\drivers\ks.sys
2014-06-14 21:56:15 ----D---- C:\Program Files\AuthenTec
2014-06-14 21:55:45 ----A---- C:\Windows\system32\wcncsvc.dll
2014-06-14 21:54:31 ----D---- C:\Program Files\The KMPlayer
2014-06-14 21:52:49 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-06-14 21:52:49 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-06-14 21:52:49 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-06-14 21:52:46 ----A---- C:\Windows\system32\rtutils.dll
2014-06-14 21:52:41 ----A---- C:\Windows\system32\tzres.dll
2014-06-14 21:52:30 ----A---- C:\Windows\system32\wmpmde.dll
2014-06-14 21:51:29 ----A---- C:\Windows\system32\Wpc.dll
2014-06-14 21:51:29 ----A---- C:\Windows\system32\gameux.dll
2014-06-14 21:51:16 ----A---- C:\Windows\system32\mf.dll
2014-06-14 21:51:16 ----A---- C:\Windows\system32\FntCache.dll
2014-06-14 21:51:15 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-06-14 21:51:15 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-06-14 21:51:15 ----A---- C:\Windows\system32\ExplorerFrame.dll
2014-06-14 21:51:14 ----A---- C:\Windows\system32\XpsRasterService.dll
2014-06-14 21:50:45 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-14 21:50:45 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-14 21:50:43 ----A---- C:\Windows\system32\quartz.dll
2014-06-14 21:50:42 ----A---- C:\Windows\system32\qdvd.dll
2014-06-14 21:50:40 ----A---- C:\Windows\system32\XpsPrint.dll
2014-06-14 21:50:37 ----A---- C:\Windows\system32\wmp.dll
2014-06-14 21:50:35 ----A---- C:\Windows\system32\wmploc.DLL
2014-06-14 21:50:33 ----A---- C:\Windows\system32\mstsc.exe
2014-06-14 21:50:31 ----A---- C:\Windows\system32\mfc42u.dll
2014-06-14 21:50:31 ----A---- C:\Windows\system32\mfc42.dll
2014-06-14 21:50:29 ----A---- C:\Windows\system32\psisdecd.dll
2014-06-14 21:50:28 ----A---- C:\Windows\system32\secproc_isv.dll
2014-06-14 21:50:28 ----A---- C:\Windows\system32\secproc.dll
2014-06-14 21:50:28 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-06-14 21:50:27 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-06-14 21:50:27 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-06-14 21:50:27 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-14 21:50:27 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-06-14 21:50:27 ----A---- C:\Windows\system32\RMActivate.exe
2014-06-14 21:50:26 ----A---- C:\Windows\system32\msasn1.dll
2014-06-14 21:50:23 ----A---- C:\Windows\system32\StructuredQuery.dll
2014-06-14 21:50:22 ----A---- C:\Windows\system32\packager.dll
2014-06-14 21:50:20 ----A---- C:\Windows\system32\t2embed.dll
2014-06-14 21:50:19 ----A---- C:\Windows\system32\netapi32.dll
2014-06-14 21:50:19 ----A---- C:\Windows\system32\browser.dll
2014-06-14 21:50:19 ----A---- C:\Windows\system32\browcli.dll
2014-06-14 21:50:18 ----A---- C:\Windows\system32\fontsub.dll
2014-06-14 21:50:02 ----A---- C:\Windows\system32\CertEnroll.dll
2014-06-14 21:50:01 ----A---- C:\Windows\system32\winresume.exe
2014-06-14 21:50:01 ----A---- C:\Windows\system32\winload.exe
2014-06-14 21:49:57 ----A---- C:\Windows\system32\mssrch.dll
2014-06-14 21:49:56 ----A---- C:\Windows\system32\tquery.dll
2014-06-14 21:49:56 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-06-14 21:49:55 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-06-14 21:49:55 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-06-14 21:49:55 ----A---- C:\Windows\system32\mssvp.dll
2014-06-14 21:49:55 ----A---- C:\Windows\system32\mssphtb.dll
2014-06-14 21:49:55 ----A---- C:\Windows\system32\mssph.dll
2014-06-14 21:49:55 ----A---- C:\Windows\system32\msscntrs.dll
2014-06-14 21:49:27 ----A---- C:\Windows\system32\mstscax.dll
2014-06-14 21:49:26 ----A---- C:\Windows\system32\tsgqec.dll
2014-06-14 21:49:26 ----A---- C:\Windows\system32\aaclient.dll
2014-06-14 21:48:39 ----A---- C:\Windows\system32\msxml3.dll
2014-06-14 21:48:20 ----A---- C:\Windows\system32\lsasrv.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\webio.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\sspicli.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\secur32.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\lsass.exe
2014-06-14 21:48:14 ----A---- C:\Windows\system32\msdri.dll
2014-06-14 21:48:05 ----A---- C:\Windows\system32\localspl.dll
2014-06-14 21:48:04 ----D---- C:\Windows\Panther
2014-06-14 21:47:59 ----A---- C:\Windows\system32\shell32.dll
2014-06-14 21:47:55 ----A---- C:\Windows\system32\ncrypt.dll
2014-06-14 21:47:51 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\winsrv.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\kernel32.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\conhost.exe
2014-06-14 21:47:49 ----H---- C:\Boot.BAK
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-06-14 21:47:46 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-06-14 21:47:46 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-06-14 21:47:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-06-14 21:47:32 ----A---- C:\Windows\system32\ntshrui.dll
2014-06-14 21:47:25 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-06-14 21:47:21 ----A---- C:\Windows\system32\CPFilters.dll
2014-06-14 21:47:20 ----A---- C:\Windows\system32\sbe.dll
2014-06-14 21:47:16 ----A---- C:\Windows\system32\spoolsv.exe
2014-06-14 21:46:54 ----A---- C:\Windows\system32\inetcomm.dll
2014-06-14 21:46:50 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-06-14 21:46:37 ----A---- C:\Windows\system32\schannel.dll
2014-06-14 21:46:37 ----A---- C:\Windows\system32\drivers\cng.sys
2014-06-14 21:46:36 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-14 21:46:36 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-14 21:46:28 ----A---- C:\Windows\system32\upnp.dll
2014-06-14 21:46:26 ----A---- C:\Windows\system32\winhttp.dll
2014-06-14 21:46:26 ----A---- C:\Windows\system32\WebClnt.dll
2014-06-14 21:46:26 ----A---- C:\Windows\system32\davclnt.dll
2014-06-14 21:46:25 ----A---- C:\Windows\system32\wscapi.dll
2014-06-14 21:46:25 ----A---- C:\Windows\system32\slwga.dll
2014-06-14 21:46:24 ----A---- C:\Windows\system32\wscsvc.dll
2014-06-14 21:46:15 ----A---- C:\Windows\system32\cryptsvc.dll
2014-06-14 21:46:15 ----A---- C:\Windows\system32\cryptnet.dll
2014-06-14 21:46:15 ----A---- C:\Windows\system32\crypt32.dll
2014-06-14 21:45:24 ----A---- C:\Windows\system32\odbc32.dll
2014-06-14 21:45:19 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-06-14 21:45:17 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-06-14 21:45:02 ----A---- C:\Windows\system32\win32k.sys
2014-06-14 21:44:59 ----A---- C:\Windows\system32\odbcjt32.dll
2014-06-14 21:44:59 ----A---- C:\Windows\system32\odbccp32.dll
2014-06-14 21:44:58 ----A---- C:\Windows\system32\odbccu32.dll
2014-06-14 21:44:58 ----A---- C:\Windows\system32\odbccr32.dll
2014-06-14 21:44:57 ----A---- C:\Windows\system32\odbctrac.dll
2014-06-14 21:44:54 ----A---- C:\Windows\system32\kerberos.dll
2014-06-14 21:44:51 ----A---- C:\Windows\system32\drivers\volsnap.sys
2014-06-14 21:44:48 ----A---- C:\Windows\system32\mfc40u.dll
2014-06-14 21:44:48 ----A---- C:\Windows\system32\mfc40.dll
2014-06-14 21:44:44 ----A---- C:\Windows\system32\d3d10warp.dll
2014-06-14 21:44:44 ----A---- C:\Windows\system32\d2d1.dll
2014-06-14 21:44:43 ----A---- C:\Windows\system32\DWrite.dll
2014-06-14 21:44:43 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-06-14 21:44:43 ----A---- C:\Windows\system32\d3d10_1.dll
2014-06-14 21:44:35 ----A---- C:\Windows\system32\taskschd.dll
2014-06-14 21:44:35 ----A---- C:\Windows\system32\schedsvc.dll
2014-06-14 21:44:34 ----A---- C:\Windows\system32\wmicmiplugin.dll
2014-06-14 21:44:34 ----A---- C:\Windows\system32\taskeng.exe
2014-06-14 21:44:34 ----A---- C:\Windows\system32\taskcomp.dll
2014-06-14 21:44:34 ----A---- C:\Windows\system32\schtasks.exe
2014-06-14 21:44:29 ----A---- C:\Windows\system32\profsvc.dll
2014-06-14 21:44:26 ----A---- C:\Windows\system32\prevhost.exe
2014-06-14 21:44:23 ----A---- C:\Windows\explorer.exe
2014-06-14 21:44:22 ----A---- C:\Windows\system32\winlogon.exe
2014-06-14 21:44:18 ----A---- C:\Windows\system32\msxml6.dll
2014-06-14 21:44:14 ----A---- C:\Windows\system32\drivers\afd.sys
2014-06-14 21:44:11 ----A---- C:\Windows\system32\ntdll.dll
2014-06-14 21:44:05 ----A---- C:\Windows\system32\ole32.dll
2014-06-14 21:44:03 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-06-14 21:44:03 ----A---- C:\Windows\system32\dnsapi.dll
2014-06-14 21:44:02 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-06-14 21:44:00 ----A---- C:\Windows\system32\srvsvc.dll
2014-06-14 21:43:54 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-06-14 21:43:41 ----A---- C:\Windows\system32\ntkrnlpa.exe
2014-06-14 21:43:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-14 21:43:39 ----A---- C:\Windows\system32\smss.exe
2014-06-14 21:43:39 ----A---- C:\Windows\system32\csrsrv.dll
2014-06-14 21:43:34 ----A---- C:\Windows\system32\consent.exe
2014-06-14 21:43:32 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-06-14 21:43:26 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-06-14 21:43:22 ----A---- C:\Windows\system32\usp10.dll
2014-06-14 21:43:18 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-06-14 21:43:11 ----A---- C:\Windows\system32\poqexec.exe
2014-06-14 21:43:06 ----A---- C:\Windows\system32\msvcrt.dll
2014-06-14 21:43:02 ----A---- C:\Windows\system32\comctl32.dll
2014-06-14 21:42:58 ----A---- C:\Windows\system32\synceng.dll
2014-06-14 21:42:55 ----A---- C:\Windows\system32\dpnet.dll
2014-06-14 21:42:48 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-06-14 21:42:42 ----A---- C:\Windows\system32\wintrust.dll
2014-06-14 21:42:37 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-06-14 21:42:37 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-06-14 21:42:36 ----A---- C:\Windows\system32\rdpwsx.dll
2014-06-14 21:42:30 ----A---- C:\Windows\system32\asycfilt.dll
2014-06-14 21:42:24 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-06-14 21:42:24 ----A---- C:\Windows\system32\drivers\srv.sys
2014-06-14 21:42:23 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-06-14 21:42:16 ----A---- C:\Windows\system32\msi.dll
2014-06-14 21:42:12 ----A---- C:\Windows\system32\srcore.dll
2014-06-14 21:42:06 ----D---- C:\Windows.old
2014-06-14 21:42:05 ----A---- C:\Windows\system32\apphelp.dll
2014-06-14 21:42:01 ----A---- C:\Windows\system32\drivers\dfsc.sys
2014-06-14 21:41:58 ----A---- C:\Windows\system32\ir32_32.dll
2014-06-14 21:41:58 ----A---- C:\Windows\system32\iccvid.dll
2014-06-14 21:41:55 ----A---- C:\Windows\system32\EncDec.dll
2014-06-14 21:41:52 ----A---- C:\Windows\system32\oleaut32.dll
2014-06-14 21:41:52 ----A---- C:\Windows\system32\oleacc.dll
2014-06-14 21:41:47 ----A---- C:\Windows\system32\win32spl.dll
2014-06-14 21:41:17 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-06-14 21:41:14 ----A---- C:\Windows\system32\d3d10level9.dll
2014-06-14 21:41:09 ----A---- C:\Windows\system32\xmllite.dll
2014-06-14 21:41:03 ----A---- C:\Windows\system32\msvidc32.dll
2014-06-14 21:41:03 ----A---- C:\Windows\system32\mciavi32.dll
2014-06-14 21:41:03 ----A---- C:\Windows\system32\avifil32.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\tsbyuv.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\msyuv.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\msrle32.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\iyuv_32.dll
2014-06-14 21:25:59 ----N---- C:\Windows\system32\MpSigStub.exe
2014-06-14 21:25:55 ----D---- C:\Users\cross\AppData\Roaming\DropboxMaster
2014-06-14 21:23:29 ----D---- C:\Users\cross\AppData\Roaming\Dropbox
2014-06-14 21:21:52 ----D---- C:\Users\cross\AppData\Roaming\AVAST Software
2014-06-14 21:20:56 ----A---- C:\Windows\system32\drivers\aswstm.sys
2014-06-14 21:20:55 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-06-14 21:20:54 ----A---- C:\Windows\system32\drivers\aswsp.sys
2014-06-14 21:20:54 ----A---- C:\Windows\system32\drivers\aswsnx.sys
2014-06-14 21:20:52 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-06-14 21:20:52 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-06-14 21:20:48 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-06-14 21:20:44 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-06-14 21:20:38 ----A---- C:\Windows\system32\aswBoot.exe
2014-06-14 21:20:29 ----A---- C:\Windows\avastSS.scr
2014-06-14 21:19:30 ----D---- C:\Program Files\AVAST Software
2014-06-14 21:14:45 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-06-14 21:14:45 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-06-14 21:14:45 ----A---- C:\Windows\system32\cdd.dll
2014-06-14 21:11:48 ----D---- C:\ProgramData\AVAST Software
2014-06-14 21:09:00 ----SHD---- C:\Windows\Installer
2014-06-14 21:04:19 ----D---- C:\Program Files\Google
2014-06-14 21:02:40 ----A---- C:\Windows\system32\rdpcore.dll
2014-06-14 21:02:40 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-06-14 21:02:31 ----A---- C:\Windows\system32\cabview.dll
2014-06-14 21:02:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-14 20:58:56 ----A---- C:\Windows\system32\wups2.dll
2014-06-14 20:58:55 ----A---- C:\Windows\system32\wucltux.dll
2014-06-14 20:58:55 ----A---- C:\Windows\system32\wuaueng.dll
2014-06-14 20:58:55 ----A---- C:\Windows\system32\wuauclt.exe
2014-06-14 20:58:43 ----A---- C:\Windows\system32\wups.dll
2014-06-14 20:58:43 ----A---- C:\Windows\system32\wudriver.dll
2014-06-14 20:58:43 ----A---- C:\Windows\system32\wuapi.dll
2014-06-14 20:58:32 ----A---- C:\Windows\system32\wuwebv.dll
2014-06-14 20:58:32 ----A---- C:\Windows\system32\wuapp.exe
2014-06-14 20:58:14 ----D---- C:\Users\cross\AppData\Roaming\Identities
2014-06-14 20:57:59 ----SD---- C:\Users\cross\AppData\Roaming\Microsoft
2014-06-14 20:57:59 ----D---- C:\Users\cross\AppData\Roaming\Media Center Programs
2014-06-14 20:57:44 ----SHD---- C:\Recovery
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Šablony
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Plocha
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Oblíbené položky
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Nabídka Start
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Dokumenty
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Data aplikací
2014-06-14 20:51:51 ----D---- C:\Windows\SoftwareDistribution
2014-06-14 20:49:06 ----D---- C:\Windows\Prefetch
2014-06-14 20:48:41 ----ASH---- C:\hiberfil.sys
2014-06-14 20:40:27 ----RASH---- C:\BOOTSECT.BAK
2014-06-14 20:40:21 ----SHD---- C:\Boot
2014-06-14 18:05:06 ----ASH---- C:\pagefile.sys

======List of files/folders modified in the last 1 month======

2014-06-15 02:35:30 ----RHD---- C:\MSOCache
2014-06-15 02:35:30 ----D---- C:\Intel
2014-06-15 02:35:30 ----AD---- C:\I386
2014-06-14 23:38:25 ----D---- C:\Windows\Temp
2014-06-14 23:38:17 ----RD---- C:\Program Files
2014-06-14 23:36:51 ----D---- C:\Windows\winsxs
2014-06-14 23:35:33 ----HD---- C:\ProgramData
2014-06-14 23:34:46 ----RSD---- C:\Windows\Fonts
2014-06-14 23:33:13 ----D---- C:\Windows\System32
2014-06-14 23:31:35 ----D---- C:\Program Files\Common Files
2014-06-14 23:19:18 ----RSD---- C:\Windows\assembly
2014-06-14 23:19:12 ----D---- C:\Windows\Microsoft.NET
2014-06-14 23:18:49 ----D---- C:\Windows\system32\cs-CZ
2014-06-14 23:18:19 ----D---- C:\Windows\inf
2014-06-14 23:15:48 ----D---- C:\Windows\system32\en-US
2014-06-14 23:14:17 ----SHD---- C:\System Volume Information
2014-06-14 23:11:25 ----D---- C:\Windows\system32\wdi
2014-06-14 23:10:08 ----D---- C:\Windows\system32\config
2014-06-14 23:08:36 ----D---- C:\Windows\system32\drivers
2014-06-14 23:08:34 ----D---- C:\Windows\system32\DriverStore
2014-06-14 23:07:17 ----D---- C:\Windows\system32\catroot
2014-06-14 23:06:33 ----D---- C:\Windows\system32\catroot2
2014-06-14 23:04:00 ----D---- C:\Program Files\Common Files\System
2014-06-14 22:51:19 ----D---- C:\Windows\AppPatch
2014-06-14 22:51:19 ----D---- C:\Windows
2014-06-14 22:51:19 ----D---- C:\Program Files\Windows Mail
2014-06-14 22:51:17 ----D---- C:\Windows\ehome
2014-06-14 22:51:10 ----D---- C:\Program Files\Windows Journal
2014-06-14 22:51:08 ----D---- C:\Windows\system32\Boot
2014-06-14 22:51:06 ----D---- C:\Program Files\Windows Media Player
2014-06-14 22:50:58 ----D---- C:\Windows\system32\wbem
2014-06-14 22:50:58 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-06-14 22:50:53 ----D---- C:\Program Files\Internet Explorer
2014-06-14 22:50:51 ----D---- C:\Windows\system32\migration
2014-06-14 22:50:51 ----D---- C:\Windows\PolicyDefinitions
2014-06-14 22:42:28 ----D---- C:\Windows\LiveKernelReports
2014-06-14 22:08:56 ----D---- C:\Windows\debug
2014-06-14 22:08:17 ----SD---- C:\ProgramData\Microsoft
2014-06-14 22:08:10 ----D---- C:\Windows\system32\drivers\UMDF
2014-06-14 22:05:16 ----D---- C:\Windows\Logs
2014-06-14 21:56:15 ----D---- C:\Windows\system32\WinBioPlugIns
2014-06-14 21:47:49 ----RASH---- C:\Boot.ini.saved
2014-06-14 21:21:16 ----D---- C:\Windows\system32\Tasks
2014-06-14 21:04:46 ----D---- C:\Windows\system32\CodeIntegrity
2014-06-14 21:04:22 ----D---- C:\Windows\Tasks
2014-06-14 20:58:12 ----SHD---- C:\$Recycle.Bin
2014-06-14 20:58:05 ----D---- C:\Windows\system32\restore
2014-06-14 20:57:57 ----RD---- C:\Users
2014-06-14 20:57:44 ----D---- C:\Program Files\Windows NT
2014-06-14 20:56:38 ----D---- C:\Windows\rescache
2014-06-14 20:52:16 ----D---- C:\Windows\system32\sysprep

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-06-14 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-06-14 180632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-06-14 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-06-14 777488]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-06-14 411680]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-06-14 243128]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-06-14 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-06-14 67824]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2009-09-07 48128]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2009-09-15 44544]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2009-09-15 38400]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-21 1218048]
R3 ATSwpWDF;AuthenTec TruePrint WBF Driver; C:\Windows\system32\DRIVERS\ATSwpWDF.sys [2012-10-18 971752]
R3 e1yexpress;Ovladač gigabitových síťových připojení Intel(R); C:\Windows\system32\DRIVERS\e1y6032.sys [2009-07-14 214016]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 84992]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-06-14 68312]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-06-14 50344]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-14 116648]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-06-14 655624]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-14 116648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-14 1343400]

-----------------EOF-----------------

Jsou tam kluci oba

cross182 píše:O4 - HKCU\..\Run: [SpeedUpMyComputer] C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as /ss
O4 - HKCU\..\Run: [FixMyRegistry] C:\Program Files\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

# AdwCleaner v3.212 - Report created 14/06/2014 at 23:49:57
# Updated 05/06/2014 by Xplode
# Operating System : Windows 7 Home Premium (32 bits)
# Username : cross - CROSS-NTB
# Running from : C:\Users\cross\Desktop\adwcleaner_3.212.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\SmartTweak
Folder Deleted : C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software

***** [ Shortcuts ] *****

***** [ Registry ] *****

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [FixMyRegistry]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SpeedUpMyComputer]
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKCU\Software\smarttweak
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpeedUpMyComputer

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16555

-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://search.qip.ru/search/?query={searchTerms}&from=os

*************************

AdwCleaner[R0].txt - [1525 octets] - [14/06/2014 23:48:37]
AdwCleaner[S0].txt - [1470 octets] - [14/06/2014 23:49:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1530 octets] ##########

Udelejte !!!kompletni!!! kontrolu s MBAM http://www.bleepingcomputer.com/downloa ... re/dl/241/ a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce. Navod zde http://forum.viry.cz/viewtopic.php?f=29&t=115222

Uff, tak to zabralo pár hodin : ))
Přihodil jsem tam kontrolu i externího disku (F:), který často využívám, kdyby tam něco bylo

Stačí to takhle?

: mlwr.JPG (36.31 KiB) Zobrazeno 2063 x

Staci to takhle. Vsechny nalezy nechte odstranit, pak MBAM odinstalujte.

Dejte novy log z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by cross at 2014-06-15 12:04:09
Microsoft Windows 7 Home Premium
System drive C: has 97 GB (80%) free of 121 GB
Total RAM: 2937 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:04:18, on 15.6.2014
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16555)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Users\cross\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\cross\Desktop\RSIT.exe
C:\Program Files\trend micro\cross.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = cross\AppData\Roaming\Dropbox\bin\Dropbox.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

--
End of file - 3064 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-06-14 436600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-14 3890208]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\cross\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-15 11:29:54 ----D---- C:\ProgramData\FLEXnet
2014-06-15 00:03:39 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2014-06-15 00:00:15 ----D---- C:\Users\cross\AppData\Roaming\Malwarebytes
2014-06-14 23:59:55 ----D---- C:\ProgramData\Malwarebytes
2014-06-14 23:59:54 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2014-06-14 23:49:05 ----A---- C:\Windows\system32\sqlite3.dll
2014-06-14 23:48:35 ----D---- C:\AdwCleaner
2014-06-14 23:38:17 ----D---- C:\rsit
2014-06-14 23:38:17 ----D---- C:\Program Files\trend micro
2014-06-14 23:35:33 ----D---- C:\ProgramData\Adobe
2014-06-14 23:33:13 ----D---- C:\Windows\system32\Macromed
2014-06-14 23:32:46 ----D---- C:\Program Files\Adobe
2014-06-14 23:31:35 ----D---- C:\Program Files\Common Files\Macrovision Shared
2014-06-14 23:15:47 ----D---- C:\Program Files\Microsoft.NET
2014-06-14 23:07:06 ----A---- C:\Windows\system32\atmfd.dll
2014-06-14 23:07:05 ----A---- C:\Windows\system32\atmlib.dll
2014-06-14 23:06:31 ----A---- C:\Windows\system32\msv1_0.dll
2014-06-14 22:59:27 ----D---- C:\Windows\system32\Wat
2014-06-14 22:46:11 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2014-06-14 22:46:11 ----A---- C:\Windows\system32\PresentationHost.exe
2014-06-14 22:46:11 ----A---- C:\Windows\system32\netfxperf.dll
2014-06-14 22:46:11 ----A---- C:\Windows\system32\mscoree.dll
2014-06-14 22:46:10 ----A---- C:\Windows\system32\dfshim.dll
2014-06-14 22:33:00 ----D---- C:\Program Files\Seznam.cz
2014-06-14 22:32:10 ----D---- C:\Users\cross\AppData\Roaming\Seznam.cz
2014-06-14 22:31:21 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2014-06-14 22:31:16 ----D---- C:\Users\cross\AppData\Roaming\DAEMON Tools Lite
2014-06-14 22:31:13 ----D---- C:\Program Files\DAEMON Tools Lite
2014-06-14 22:30:16 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-06-14 22:10:56 ----A---- C:\Windows\system32\Wdfres.dll
2014-06-14 22:10:56 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-06-14 22:10:56 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-06-14 22:08:57 ----D---- C:\Windows\system32\MRT
2014-06-14 22:08:51 ----A---- C:\Windows\system32\MRT.exe
2014-06-14 22:07:40 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-06-14 22:07:40 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-06-14 22:07:39 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-06-14 22:07:39 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-06-14 22:07:37 ----A---- C:\Windows\system32\WUDFHost.exe
2014-06-14 22:07:37 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-06-14 22:07:36 ----A---- C:\Windows\system32\WUDFx.dll
2014-06-14 22:07:09 ----D---- C:\Program Files\Common Files\Adobe
2014-06-14 22:05:43 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-06-14 22:05:42 ----A---- C:\Windows\system32\wmi.dll
2014-06-14 22:05:42 ----A---- C:\Windows\system32\imagehlp.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\wininet.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\urlmon.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\url.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msrating.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msls31.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\mshtmler.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msfeedssync.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieui.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iesysprep.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iesetup.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iertutil.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\iernonce.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieframe.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieapfltr.dat
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ieakeng.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-14 22:04:09 ----A---- C:\Windows\system32\icardie.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-14 22:04:09 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\wextract.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\webcheck.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\vbscript.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\pngfilt.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\occache.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\mshtml.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\mshta.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\licmgr10.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\jscript9.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\jscript.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\inseng.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\imgutil.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\iexpress.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-14 22:04:08 ----A---- C:\Windows\system32\iepeers.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\iedkcs32.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\ieakui.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\ieaksie.dll
2014-06-14 22:04:08 ----A---- C:\Windows\system32\admparse.dll
2014-06-14 22:02:18 ----A---- C:\Windows\system32\browserchoice.exe
2014-06-14 22:00:58 ----D---- C:\Users\cross\AppData\Roaming\Adobe
2014-06-14 21:56:57 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-06-14 21:56:57 ----A---- C:\Windows\system32\drivers\ks.sys
2014-06-14 21:56:15 ----D---- C:\Program Files\AuthenTec
2014-06-14 21:55:45 ----A---- C:\Windows\system32\wcncsvc.dll
2014-06-14 21:54:31 ----D---- C:\Program Files\The KMPlayer
2014-06-14 21:52:49 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-06-14 21:52:49 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-06-14 21:52:49 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-06-14 21:52:46 ----A---- C:\Windows\system32\rtutils.dll
2014-06-14 21:52:41 ----A---- C:\Windows\system32\tzres.dll
2014-06-14 21:52:30 ----A---- C:\Windows\system32\wmpmde.dll
2014-06-14 21:51:29 ----A---- C:\Windows\system32\Wpc.dll
2014-06-14 21:51:29 ----A---- C:\Windows\system32\gameux.dll
2014-06-14 21:51:16 ----A---- C:\Windows\system32\mf.dll
2014-06-14 21:51:16 ----A---- C:\Windows\system32\FntCache.dll
2014-06-14 21:51:15 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-06-14 21:51:15 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-06-14 21:51:15 ----A---- C:\Windows\system32\ExplorerFrame.dll
2014-06-14 21:51:14 ----A---- C:\Windows\system32\XpsRasterService.dll
2014-06-14 21:50:45 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-14 21:50:45 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-14 21:50:43 ----A---- C:\Windows\system32\quartz.dll
2014-06-14 21:50:42 ----A---- C:\Windows\system32\qdvd.dll
2014-06-14 21:50:40 ----A---- C:\Windows\system32\XpsPrint.dll
2014-06-14 21:50:37 ----A---- C:\Windows\system32\wmp.dll
2014-06-14 21:50:35 ----A---- C:\Windows\system32\wmploc.DLL
2014-06-14 21:50:33 ----A---- C:\Windows\system32\mstsc.exe
2014-06-14 21:50:31 ----A---- C:\Windows\system32\mfc42u.dll
2014-06-14 21:50:31 ----A---- C:\Windows\system32\mfc42.dll
2014-06-14 21:50:29 ----A---- C:\Windows\system32\psisdecd.dll
2014-06-14 21:50:28 ----A---- C:\Windows\system32\secproc_isv.dll
2014-06-14 21:50:28 ----A---- C:\Windows\system32\secproc.dll
2014-06-14 21:50:28 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-06-14 21:50:27 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-06-14 21:50:27 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-06-14 21:50:27 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-14 21:50:27 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-06-14 21:50:27 ----A---- C:\Windows\system32\RMActivate.exe
2014-06-14 21:50:26 ----A---- C:\Windows\system32\msasn1.dll
2014-06-14 21:50:23 ----A---- C:\Windows\system32\StructuredQuery.dll
2014-06-14 21:50:22 ----A---- C:\Windows\system32\packager.dll
2014-06-14 21:50:20 ----A---- C:\Windows\system32\t2embed.dll
2014-06-14 21:50:19 ----A---- C:\Windows\system32\netapi32.dll
2014-06-14 21:50:19 ----A---- C:\Windows\system32\browser.dll
2014-06-14 21:50:19 ----A---- C:\Windows\system32\browcli.dll
2014-06-14 21:50:18 ----A---- C:\Windows\system32\fontsub.dll
2014-06-14 21:50:02 ----A---- C:\Windows\system32\CertEnroll.dll
2014-06-14 21:50:01 ----A---- C:\Windows\system32\winresume.exe
2014-06-14 21:50:01 ----A---- C:\Windows\system32\winload.exe
2014-06-14 21:49:57 ----A---- C:\Windows\system32\mssrch.dll
2014-06-14 21:49:56 ----A---- C:\Windows\system32\tquery.dll
2014-06-14 21:49:56 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-06-14 21:49:55 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-06-14 21:49:55 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-06-14 21:49:55 ----A---- C:\Windows\system32\mssvp.dll
2014-06-14 21:49:55 ----A---- C:\Windows\system32\mssphtb.dll
2014-06-14 21:49:55 ----A---- C:\Windows\system32\mssph.dll
2014-06-14 21:49:55 ----A---- C:\Windows\system32\msscntrs.dll
2014-06-14 21:49:27 ----A---- C:\Windows\system32\mstscax.dll
2014-06-14 21:49:26 ----A---- C:\Windows\system32\tsgqec.dll
2014-06-14 21:49:26 ----A---- C:\Windows\system32\aaclient.dll
2014-06-14 21:48:39 ----A---- C:\Windows\system32\msxml3.dll
2014-06-14 21:48:20 ----A---- C:\Windows\system32\lsasrv.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\webio.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\sspicli.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\secur32.dll
2014-06-14 21:48:19 ----A---- C:\Windows\system32\lsass.exe
2014-06-14 21:48:14 ----A---- C:\Windows\system32\msdri.dll
2014-06-14 21:48:05 ----A---- C:\Windows\system32\localspl.dll
2014-06-14 21:48:04 ----D---- C:\Windows\Panther
2014-06-14 21:47:59 ----A---- C:\Windows\system32\shell32.dll
2014-06-14 21:47:55 ----A---- C:\Windows\system32\ncrypt.dll
2014-06-14 21:47:51 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\winsrv.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\kernel32.dll
2014-06-14 21:47:51 ----A---- C:\Windows\system32\conhost.exe
2014-06-14 21:47:49 ----H---- C:\Boot.BAK
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-06-14 21:47:49 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-06-14 21:47:48 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-06-14 21:47:47 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-06-14 21:47:46 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-06-14 21:47:46 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-06-14 21:47:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-06-14 21:47:32 ----A---- C:\Windows\system32\ntshrui.dll
2014-06-14 21:47:25 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-06-14 21:47:21 ----A---- C:\Windows\system32\CPFilters.dll
2014-06-14 21:47:20 ----A---- C:\Windows\system32\sbe.dll
2014-06-14 21:47:16 ----A---- C:\Windows\system32\spoolsv.exe
2014-06-14 21:46:54 ----A---- C:\Windows\system32\inetcomm.dll
2014-06-14 21:46:50 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-06-14 21:46:37 ----A---- C:\Windows\system32\schannel.dll
2014-06-14 21:46:37 ----A---- C:\Windows\system32\drivers\cng.sys
2014-06-14 21:46:36 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-14 21:46:36 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-14 21:46:28 ----A---- C:\Windows\system32\upnp.dll
2014-06-14 21:46:26 ----A---- C:\Windows\system32\winhttp.dll
2014-06-14 21:46:26 ----A---- C:\Windows\system32\WebClnt.dll
2014-06-14 21:46:26 ----A---- C:\Windows\system32\davclnt.dll
2014-06-14 21:46:25 ----A---- C:\Windows\system32\wscapi.dll
2014-06-14 21:46:25 ----A---- C:\Windows\system32\slwga.dll
2014-06-14 21:46:24 ----A---- C:\Windows\system32\wscsvc.dll
2014-06-14 21:46:15 ----A---- C:\Windows\system32\cryptsvc.dll
2014-06-14 21:46:15 ----A---- C:\Windows\system32\cryptnet.dll
2014-06-14 21:46:15 ----A---- C:\Windows\system32\crypt32.dll
2014-06-14 21:45:24 ----A---- C:\Windows\system32\odbc32.dll
2014-06-14 21:45:19 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-06-14 21:45:17 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-06-14 21:45:02 ----A---- C:\Windows\system32\win32k.sys
2014-06-14 21:44:59 ----A---- C:\Windows\system32\odbcjt32.dll
2014-06-14 21:44:59 ----A---- C:\Windows\system32\odbccp32.dll
2014-06-14 21:44:58 ----A---- C:\Windows\system32\odbccu32.dll
2014-06-14 21:44:58 ----A---- C:\Windows\system32\odbccr32.dll
2014-06-14 21:44:57 ----A---- C:\Windows\system32\odbctrac.dll
2014-06-14 21:44:54 ----A---- C:\Windows\system32\kerberos.dll
2014-06-14 21:44:51 ----A---- C:\Windows\system32\drivers\volsnap.sys
2014-06-14 21:44:48 ----A---- C:\Windows\system32\mfc40u.dll
2014-06-14 21:44:48 ----A---- C:\Windows\system32\mfc40.dll
2014-06-14 21:44:44 ----A---- C:\Windows\system32\d3d10warp.dll
2014-06-14 21:44:44 ----A---- C:\Windows\system32\d2d1.dll
2014-06-14 21:44:43 ----A---- C:\Windows\system32\DWrite.dll
2014-06-14 21:44:43 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-06-14 21:44:43 ----A---- C:\Windows\system32\d3d10_1.dll
2014-06-14 21:44:35 ----A---- C:\Windows\system32\taskschd.dll
2014-06-14 21:44:35 ----A---- C:\Windows\system32\schedsvc.dll
2014-06-14 21:44:34 ----A---- C:\Windows\system32\wmicmiplugin.dll
2014-06-14 21:44:34 ----A---- C:\Windows\system32\taskeng.exe
2014-06-14 21:44:34 ----A---- C:\Windows\system32\taskcomp.dll
2014-06-14 21:44:34 ----A---- C:\Windows\system32\schtasks.exe
2014-06-14 21:44:29 ----A---- C:\Windows\system32\profsvc.dll
2014-06-14 21:44:26 ----A---- C:\Windows\system32\prevhost.exe
2014-06-14 21:44:23 ----A---- C:\Windows\explorer.exe
2014-06-14 21:44:22 ----A---- C:\Windows\system32\winlogon.exe
2014-06-14 21:44:18 ----A---- C:\Windows\system32\msxml6.dll
2014-06-14 21:44:14 ----A---- C:\Windows\system32\drivers\afd.sys
2014-06-14 21:44:11 ----A---- C:\Windows\system32\ntdll.dll
2014-06-14 21:44:05 ----A---- C:\Windows\system32\ole32.dll
2014-06-14 21:44:03 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-06-14 21:44:03 ----A---- C:\Windows\system32\dnsapi.dll
2014-06-14 21:44:02 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-06-14 21:44:00 ----A---- C:\Windows\system32\srvsvc.dll
2014-06-14 21:43:54 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-06-14 21:43:41 ----A---- C:\Windows\system32\ntkrnlpa.exe
2014-06-14 21:43:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-14 21:43:39 ----A---- C:\Windows\system32\smss.exe
2014-06-14 21:43:39 ----A---- C:\Windows\system32\csrsrv.dll
2014-06-14 21:43:34 ----A---- C:\Windows\system32\consent.exe
2014-06-14 21:43:32 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-06-14 21:43:26 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-06-14 21:43:22 ----A---- C:\Windows\system32\usp10.dll
2014-06-14 21:43:18 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-06-14 21:43:11 ----A---- C:\Windows\system32\poqexec.exe
2014-06-14 21:43:06 ----A---- C:\Windows\system32\msvcrt.dll
2014-06-14 21:43:02 ----A---- C:\Windows\system32\comctl32.dll
2014-06-14 21:42:58 ----A---- C:\Windows\system32\synceng.dll
2014-06-14 21:42:55 ----A---- C:\Windows\system32\dpnet.dll
2014-06-14 21:42:48 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-06-14 21:42:42 ----A---- C:\Windows\system32\wintrust.dll
2014-06-14 21:42:37 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-06-14 21:42:37 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-06-14 21:42:36 ----A---- C:\Windows\system32\rdpwsx.dll
2014-06-14 21:42:30 ----A---- C:\Windows\system32\asycfilt.dll
2014-06-14 21:42:24 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-06-14 21:42:24 ----A---- C:\Windows\system32\drivers\srv.sys
2014-06-14 21:42:23 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-06-14 21:42:16 ----A---- C:\Windows\system32\msi.dll
2014-06-14 21:42:12 ----A---- C:\Windows\system32\srcore.dll
2014-06-14 21:42:05 ----A---- C:\Windows\system32\apphelp.dll
2014-06-14 21:42:01 ----A---- C:\Windows\system32\drivers\dfsc.sys
2014-06-14 21:41:58 ----A---- C:\Windows\system32\ir32_32.dll
2014-06-14 21:41:58 ----A---- C:\Windows\system32\iccvid.dll
2014-06-14 21:41:55 ----A---- C:\Windows\system32\EncDec.dll
2014-06-14 21:41:52 ----A---- C:\Windows\system32\oleaut32.dll
2014-06-14 21:41:52 ----A---- C:\Windows\system32\oleacc.dll
2014-06-14 21:41:47 ----A---- C:\Windows\system32\win32spl.dll
2014-06-14 21:41:17 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-06-14 21:41:14 ----A---- C:\Windows\system32\d3d10level9.dll
2014-06-14 21:41:09 ----A---- C:\Windows\system32\xmllite.dll
2014-06-14 21:41:03 ----A---- C:\Windows\system32\msvidc32.dll
2014-06-14 21:41:03 ----A---- C:\Windows\system32\mciavi32.dll
2014-06-14 21:41:03 ----A---- C:\Windows\system32\avifil32.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\tsbyuv.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\msyuv.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\msrle32.dll
2014-06-14 21:41:02 ----A---- C:\Windows\system32\iyuv_32.dll
2014-06-14 21:25:59 ----N---- C:\Windows\system32\MpSigStub.exe
2014-06-14 21:25:55 ----D---- C:\Users\cross\AppData\Roaming\DropboxMaster
2014-06-14 21:23:29 ----D---- C:\Users\cross\AppData\Roaming\Dropbox
2014-06-14 21:21:52 ----D---- C:\Users\cross\AppData\Roaming\AVAST Software
2014-06-14 21:20:56 ----A---- C:\Windows\system32\drivers\aswstm.sys
2014-06-14 21:20:55 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-06-14 21:20:54 ----A---- C:\Windows\system32\drivers\aswsp.sys
2014-06-14 21:20:54 ----A---- C:\Windows\system32\drivers\aswsnx.sys
2014-06-14 21:20:52 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-06-14 21:20:52 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-06-14 21:20:48 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-06-14 21:20:44 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-06-14 21:20:38 ----A---- C:\Windows\system32\aswBoot.exe
2014-06-14 21:20:29 ----A---- C:\Windows\avastSS.scr
2014-06-14 21:19:30 ----D---- C:\Program Files\AVAST Software
2014-06-14 21:14:45 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-06-14 21:14:45 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-06-14 21:14:45 ----A---- C:\Windows\system32\cdd.dll
2014-06-14 21:11:48 ----D---- C:\ProgramData\AVAST Software
2014-06-14 21:09:00 ----SHD---- C:\Windows\Installer
2014-06-14 21:04:19 ----D---- C:\Program Files\Google
2014-06-14 21:02:40 ----A---- C:\Windows\system32\rdpcore.dll
2014-06-14 21:02:40 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-06-14 21:02:31 ----A---- C:\Windows\system32\cabview.dll
2014-06-14 21:02:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-14 20:58:56 ----A---- C:\Windows\system32\wups2.dll
2014-06-14 20:58:55 ----A---- C:\Windows\system32\wucltux.dll
2014-06-14 20:58:55 ----A---- C:\Windows\system32\wuaueng.dll
2014-06-14 20:58:55 ----A---- C:\Windows\system32\wuauclt.exe
2014-06-14 20:58:43 ----A---- C:\Windows\system32\wups.dll
2014-06-14 20:58:43 ----A---- C:\Windows\system32\wudriver.dll
2014-06-14 20:58:43 ----A---- C:\Windows\system32\wuapi.dll
2014-06-14 20:58:32 ----A---- C:\Windows\system32\wuwebv.dll
2014-06-14 20:58:32 ----A---- C:\Windows\system32\wuapp.exe
2014-06-14 20:58:14 ----D---- C:\Users\cross\AppData\Roaming\Identities
2014-06-14 20:57:59 ----SD---- C:\Users\cross\AppData\Roaming\Microsoft
2014-06-14 20:57:59 ----D---- C:\Users\cross\AppData\Roaming\Media Center Programs
2014-06-14 20:57:44 ----SHD---- C:\Recovery
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Šablony
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Plocha
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Oblíbené položky
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Nabídka Start
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Dokumenty
2014-06-14 20:57:44 ----SHD---- C:\ProgramData\Data aplikací
2014-06-14 20:51:51 ----D---- C:\Windows\SoftwareDistribution
2014-06-14 20:49:06 ----D---- C:\Windows\Prefetch
2014-06-14 20:48:41 ----ASH---- C:\hiberfil.sys
2014-06-14 20:40:27 ----RASH---- C:\BOOTSECT.BAK
2014-06-14 20:40:21 ----SHD---- C:\Boot
2014-06-14 18:05:06 ----ASH---- C:\pagefile.sys

======List of files/folders modified in the last 1 month======

2014-06-15 12:03:27 ----D---- C:\Windows\system32\drivers
2014-06-15 11:44:14 ----D---- C:\Windows\Temp
2014-06-15 11:29:54 ----HD---- C:\ProgramData
2014-06-15 10:34:00 ----D---- C:\Windows\Microsoft.NET
2014-06-15 10:33:21 ----RSD---- C:\Windows\assembly
2014-06-15 02:35:30 ----RHD---- C:\MSOCache
2014-06-15 02:35:30 ----D---- C:\Intel
2014-06-15 02:35:30 ----AD---- C:\I386
2014-06-15 01:29:52 ----D---- C:\Windows\system32\wdi
2014-06-15 01:29:48 ----D---- C:\Windows\system32\LogFiles
2014-06-15 00:06:26 ----D---- C:\Windows\System32
2014-06-15 00:06:26 ----D---- C:\Windows\inf
2014-06-14 23:59:54 ----RD---- C:\Program Files
2014-06-14 23:55:27 ----D---- C:\Windows\system32\config
2014-06-14 23:36:51 ----D---- C:\Windows\winsxs
2014-06-14 23:34:46 ----RSD---- C:\Windows\Fonts
2014-06-14 23:31:35 ----D---- C:\Program Files\Common Files
2014-06-14 23:18:49 ----D---- C:\Windows\system32\cs-CZ
2014-06-14 23:15:48 ----D---- C:\Windows\system32\en-US
2014-06-14 23:14:17 ----SHD---- C:\System Volume Information
2014-06-14 23:08:34 ----D---- C:\Windows\system32\DriverStore
2014-06-14 23:07:17 ----D---- C:\Windows\system32\catroot
2014-06-14 23:06:33 ----D---- C:\Windows\system32\catroot2
2014-06-14 23:04:00 ----D---- C:\Program Files\Common Files\System
2014-06-14 22:51:19 ----D---- C:\Windows\AppPatch
2014-06-14 22:51:19 ----D---- C:\Windows
2014-06-14 22:51:19 ----D---- C:\Program Files\Windows Mail
2014-06-14 22:51:17 ----D---- C:\Windows\ehome
2014-06-14 22:51:10 ----D---- C:\Program Files\Windows Journal
2014-06-14 22:51:08 ----D---- C:\Windows\system32\Boot
2014-06-14 22:51:06 ----D---- C:\Program Files\Windows Media Player
2014-06-14 22:50:58 ----D---- C:\Windows\system32\wbem
2014-06-14 22:50:58 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-06-14 22:50:53 ----D---- C:\Program Files\Internet Explorer
2014-06-14 22:50:51 ----D---- C:\Windows\system32\migration
2014-06-14 22:50:51 ----D---- C:\Windows\PolicyDefinitions
2014-06-14 22:42:28 ----D---- C:\Windows\LiveKernelReports
2014-06-14 22:08:56 ----D---- C:\Windows\debug
2014-06-14 22:08:17 ----SD---- C:\ProgramData\Microsoft
2014-06-14 22:08:10 ----D---- C:\Windows\system32\drivers\UMDF
2014-06-14 22:05:16 ----D---- C:\Windows\Logs
2014-06-14 21:56:15 ----D---- C:\Windows\system32\WinBioPlugIns
2014-06-14 21:47:49 ----RASH---- C:\Boot.ini.saved
2014-06-14 21:21:16 ----D---- C:\Windows\system32\Tasks
2014-06-14 21:04:46 ----D---- C:\Windows\system32\CodeIntegrity
2014-06-14 21:04:22 ----D---- C:\Windows\Tasks
2014-06-14 20:58:12 ----SHD---- C:\$Recycle.Bin
2014-06-14 20:58:05 ----D---- C:\Windows\system32\restore
2014-06-14 20:57:57 ----RD---- C:\Users
2014-06-14 20:57:44 ----D---- C:\Program Files\Windows NT
2014-06-14 20:56:38 ----D---- C:\Windows\rescache
2014-06-14 20:52:16 ----D---- C:\Windows\system32\sysprep

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-06-14 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-06-14 180632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-06-14 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-06-14 777488]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-06-14 411680]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-06-14 243128]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-06-14 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-06-14 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-06-14 68312]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2009-09-07 48128]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2009-09-15 44544]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2009-09-15 38400]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-21 1218048]
R3 ATSwpWDF;AuthenTec TruePrint WBF Driver; C:\Windows\system32\DRIVERS\ATSwpWDF.sys [2012-10-18 971752]
R3 e1yexpress;Ovladač gigabitových síťových připojení Intel(R); C:\Windows\system32\DRIVERS\e1y6032.sys [2009-07-14 214016]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 84992]
R3 TPM;Čip TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2014-06-15 40776]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-06-14 50344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-14 116648]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-06-14 655624]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-14 116648]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-14 1343400]

-----------------EOF-----------------

Jeste jeden sken a budem mazat.

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

OTL.txt část 1.

OTL logfile created on: 15.6.2014 13:35:33 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\cross\Desktop
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,87 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 50,01% Memory free
5,73 Gb Paging File | 3,88 Gb Available in Paging File | 67,60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 118,11 Gb Total Space | 94,40 Gb Free Space | 79,92% Space Free | Partition Type: NTFS
Drive E: | 114,77 Gb Total Space | 114,53 Gb Free Space | 99,80% Space Free | Partition Type: NTFS
Drive F: | 931,51 Gb Total Space | 375,63 Gb Free Space | 40,32% Space Free | Partition Type: NTFS
Drive G: | 1,33 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: CROSS-NTB | User Name: cross | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.06.15 13:34:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\cross\Desktop\OTL.exe
PRC - [2014.06.14 21:21:39 | 003,890,208 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2014.06.14 21:20:26 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014.06.05 15:58:39 | 000,860,488 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2014.05.20 02:45:22 | 033,322,312 | ---- | M] (Dropbox, Inc.) -- C:\Users\cross\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.07.14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe

========== Modules (No Company Name) ==========

MOD - [2014.06.15 12:02:39 | 000,043,008 | ---- | M] () -- c:\Users\cross\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgrs3la.dll
MOD - [2014.06.14 21:20:28 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014.06.05 15:58:38 | 000,414,536 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppgooglenaclpluginchrome.dll
MOD - [2014.06.05 15:58:37 | 014,612,296 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll
MOD - [2014.06.05 15:58:36 | 004,217,672 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll
MOD - [2014.06.05 15:58:32 | 000,716,616 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
MOD - [2014.06.05 15:58:31 | 000,126,280 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\35.0.1916.153\libegl.dll
MOD - [2014.06.05 15:58:30 | 001,732,424 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
MOD - [2014.01.03 03:09:26 | 003,610,624 | ---- | M] () -- C:\Users\cross\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2013.08.23 21:01:44 | 025,100,288 | ---- | M] () -- C:\Users\cross\AppData\Roaming\Dropbox\bin\libcef.dll

========== Services (SafeList) ==========

SRV - [2014.06.14 23:31:35 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2014.06.14 22:59:23 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2014.06.14 21:20:26 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

========== Driver Services (SafeList) ==========

DRV - [2014.06.15 00:04:02 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2014.06.14 22:31:21 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2014.06.14 21:21:29 | 000,777,488 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsnx.sys -- (aswSnx)
DRV - [2014.06.14 21:21:29 | 000,411,680 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsp.sys -- (aswSP)
DRV - [2014.06.14 21:21:29 | 000,068,312 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswstm.sys -- (aswStm)
DRV - [2014.06.14 21:20:29 | 000,180,632 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014.06.14 21:20:29 | 000,081,768 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2014.06.14 21:20:29 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014.06.14 21:20:29 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014.06.14 21:20:29 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2012.10.18 11:12:06 | 000,971,752 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATSwpWDF.sys -- (ATSwpWDF)
DRV - [2009.09.21 17:58:28 | 001,218,048 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009.09.15 04:30:08 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2009.09.15 03:36:18 | 000,044,544 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2009.09.07 09:00:28 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2009.07.14 01:12:52 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2009.07.14 00:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009.07.14 00:02:52 | 000,214,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1y6032.sys -- (e1yexpress)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2987975231-3256749547-2903991068-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2987975231-3256749547-2903991068-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-2987975231-3256749547-2903991068-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.seznam.cz/
CHR - plugin: Error reading preferences file
CHR - Extension: Magic Actions for YouTubeâ„˘ = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif\6.7.8_0\
CHR - Extension: Awesome Screenshot: Capture & Annotate = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.7.3_0\
CHR - Extension: Dokumenty Google = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.6_0\
CHR - Extension: Disk Google = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: VyhledĂˇvĂˇnĂ Google = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: AdBlock = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.1_0\
CHR - Extension: Hola Better Internet = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio\1.3.519_0\
CHR - Extension: Chromium Scrapbook = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\gokffdfnlmampchciemmflgbckijpmlb\0.15.4_0\
CHR - Extension: Last.fm Scrobbler = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhinaapppaileiechjoiifaancjggfjm\1.37_0\
CHR - Extension: Kontrola e-mailu Google = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: PenÄ›Ĺľenka Google = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Click&Clean App = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.5_0\
CHR - Extension: Gmail = C:\Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKU\S-1-5-21-2987975231-3256749547-2903991068-1001..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\cross\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AA82D3B7-6DE2-4468-B509-50BEC02EC107}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008.08.07 14:24:02 | 000,000,083 | R--- | M] () - G:\AUTORUN.INF -- [ UDF ]
O32 - AutoRun File - [2008.08.21 19:02:58 | 000,000,000 | R--D | M] - G:\Autoplay -- [ UDF ]
O32 - AutoRun File - [2008.08.05 23:23:05 | 000,189,808 | R--- | M] (Adobe Systems Incorporated) - G:\Autoplay.exe -- [ UDF ]
O33 - MountPoints2\{1cdc8bc7-f3f7-11e3-9839-001c7e3a25b5}\Shell - "" = AutoRun
O33 - MountPoints2\{1cdc8bc7-f3f7-11e3-9839-001c7e3a25b5}\Shell\AutoRun\command - "" = G:\Autoplay.exe -- [2008.08.05 23:23:05 | 000,189,808 | R--- | M] (Adobe Systems Incorporated)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014.06.15 13:34:48 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Diagnostics
[2014.06.15 13:34:20 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\cross\Desktop\OTL.exe
[2014.06.15 11:29:54 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2014.06.15 00:03:39 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014.06.15 00:00:15 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\Malwarebytes
[2014.06.14 23:59:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014.06.14 23:59:54 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2014.06.14 23:59:41 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Programs
[2014.06.14 23:58:49 | 010,284,816 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\cross\Desktop\mbam-setup-1.75.0.1300.exe
[2014.06.14 23:49:05 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
[2014.06.14 23:48:35 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.06.14 23:38:17 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.06.14 23:38:17 | 000,000,000 | ---D | C] -- C:\rsit
[2014.06.14 23:35:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2014.06.14 23:33:13 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2014.06.14 23:32:46 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2014.06.14 23:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2014.06.14 23:15:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2014.06.14 23:07:06 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2014.06.14 23:07:05 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2014.06.14 22:59:27 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2014.06.14 22:46:11 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2014.06.14 22:46:11 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2014.06.14 22:46:11 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2014.06.14 22:44:08 | 000,000,000 | ---D | C] -- C:\Users\cross\Desktop\Microsoft-office-2013--cestina--activator-plna-verze-vse-100-funkcni...-by-elmaros
[2014.06.14 22:33:00 | 000,000,000 | ---D | C] -- C:\Program Files\Seznam.cz
[2014.06.14 22:32:10 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\Seznam.cz
[2014.06.14 22:31:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2014.06.14 22:31:21 | 000,243,128 | ---- | C] (Disc Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
[2014.06.14 22:31:16 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\DAEMON Tools Lite
[2014.06.14 22:31:13 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2014.06.14 22:30:16 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2014.06.14 22:10:56 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2014.06.14 22:10:56 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
[2014.06.14 22:08:57 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT
[2014.06.14 22:07:39 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2014.06.14 22:07:37 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2014.06.14 22:07:36 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2014.06.14 22:07:20 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Adobe
[2014.06.14 22:07:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2014.06.14 22:04:09 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2014.06.14 22:04:09 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014.06.14 22:04:09 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2014.06.14 22:04:09 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014.06.14 22:04:09 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014.06.14 22:04:09 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014.06.14 22:04:09 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014.06.14 22:04:09 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014.06.14 22:04:09 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2014.06.14 22:04:09 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2014.06.14 22:04:09 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2014.06.14 22:04:09 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014.06.14 22:04:09 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2014.06.14 22:04:09 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014.06.14 22:04:09 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014.06.14 22:04:09 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014.06.14 22:04:09 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014.06.14 22:04:09 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2014.06.14 22:04:09 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2014.06.14 22:04:09 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014.06.14 22:04:09 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2014.06.14 22:04:08 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014.06.14 22:04:08 | 001,810,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014.06.14 22:04:08 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014.06.14 22:04:08 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014.06.14 22:04:08 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014.06.14 22:04:08 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2014.06.14 22:04:08 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2014.06.14 22:04:08 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2014.06.14 22:04:08 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2014.06.14 22:04:08 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014.06.14 22:04:08 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2014.06.14 22:04:08 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2014.06.14 22:04:08 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2014.06.14 22:04:08 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2014.06.14 22:04:08 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2014.06.14 22:04:08 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2014.06.14 22:02:18 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2014.06.14 22:00:58 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\Adobe
[2014.06.14 21:56:57 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2014.06.14 21:56:32 | 000,000,000 | ---D | C] -- C:\Users\cross\Documents\The KMPlayer
[2014.06.14 21:56:15 | 000,000,000 | ---D | C] -- C:\Program Files\AuthenTec
[2014.06.14 21:54:31 | 000,000,000 | ---D | C] -- C:\Program Files\The KMPlayer
[2014.06.14 21:52:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2014.06.14 21:52:30 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2014.06.14 21:51:30 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
[2014.06.14 21:51:30 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2014.06.14 21:51:30 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2014.06.14 21:51:30 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
[2014.06.14 21:51:30 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2014.06.14 21:51:30 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
[2014.06.14 21:51:30 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
[2014.06.14 21:51:30 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
[2014.06.14 21:51:29 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2014.06.14 21:51:29 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2014.06.14 21:51:29 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2014.06.14 21:51:29 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
[2014.06.14 21:51:27 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
[2014.06.14 21:51:27 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
[2014.06.14 21:51:27 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
[2014.06.14 21:51:27 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2014.06.14 21:51:16 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2014.06.14 21:51:15 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2014.06.14 21:51:15 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2014.06.14 21:51:15 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2014.06.14 21:51:14 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2014.06.14 21:50:45 | 000,187,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2014.06.14 21:50:43 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2014.06.14 21:50:42 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2014.06.14 21:50:40 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2014.06.14 21:50:35 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2014.06.14 21:50:31 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2014.06.14 21:50:31 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2014.06.14 21:50:30 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2014.06.14 21:50:29 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2014.06.14 21:50:29 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2014.06.14 21:50:29 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2014.06.14 21:50:29 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2014.06.14 21:50:28 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2014.06.14 21:50:28 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2014.06.14 21:50:28 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2014.06.14 21:50:27 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2014.06.14 21:50:27 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2014.06.14 21:50:27 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2014.06.14 21:50:27 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2014.06.14 21:50:27 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2014.06.14 21:50:22 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2014.06.14 21:50:21 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2014.06.14 21:50:20 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2014.06.14 21:50:19 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2014.06.14 21:50:18 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2014.06.14 21:50:02 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2014.06.14 21:50:01 | 000,507,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2014.06.14 21:50:01 | 000,442,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2014.06.14 21:49:57 | 001,401,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2014.06.14 21:49:56 | 001,553,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2014.06.14 21:49:55 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2014.06.14 21:49:55 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2014.06.14 21:49:55 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2014.06.14 21:49:55 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2014.06.14 21:49:26 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2014.06.14 21:49:26 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2014.06.14 21:48:19 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2014.06.14 21:48:19 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2014.06.14 21:48:14 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2014.06.14 21:48:04 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2014.06.14 21:47:55 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2014.06.14 21:47:51 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2014.06.14 21:47:51 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2014.06.14 21:47:51 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.06.14 21:47:49 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2014.06.14 21:47:49 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2014.06.14 21:47:49 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2014.06.14 21:47:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2014.06.14 21:47:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2014.06.14 21:47:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2014.06.14 21:47:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2014.06.14 21:47:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2014.06.14 21:47:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2014.06.14 21:47:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2014.06.14 21:47:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2014.06.14 21:47:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2014.06.14 21:47:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2014.06.14 21:47:47 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2014.06.14 21:47:47 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2014.06.14 21:47:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2014.06.14 21:47:46 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2014.06.14 21:47:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2014.06.14 21:47:46 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2014.06.14 21:47:21 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2014.06.14 21:47:20 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2014.06.14 21:47:20 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2014.06.14 21:46:25 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2014.06.14 21:46:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2014.06.14 21:45:17 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2014.06.14 21:45:02 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014.06.14 21:44:59 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2014.06.14 21:44:59 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2014.06.14 21:44:58 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2014.06.14 21:44:58 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2014.06.14 21:44:57 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2014.06.14 21:44:48 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2014.06.14 21:44:48 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2014.06.14 21:44:44 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2014.06.14 21:44:44 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2014.06.14 21:44:43 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2014.06.14 21:44:43 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2014.06.14 21:44:43 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2014.06.14 21:44:35 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2014.06.14 21:44:34 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2014.06.14 21:44:34 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2014.06.14 21:44:34 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2014.06.14 21:44:26 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2014.06.14 21:44:23 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2014.06.14 21:44:02 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2014.06.14 21:43:54 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2014.06.14 21:43:41 | 003,958,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2014.06.14 21:43:40 | 003,902,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2014.06.14 21:43:39 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2014.06.14 21:43:34 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2014.06.14 21:43:18 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2014.06.14 21:43:11 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2014.06.14 21:42:58 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2014.06.14 21:42:55 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2014.06.14 21:42:37 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2014.06.14 21:42:37 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
[2014.06.14 21:42:36 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2014.06.14 21:42:30 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2014.06.14 21:42:12 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2014.06.14 21:41:58 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll
[2014.06.14 21:41:58 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2014.06.14 21:41:55 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2014.06.14 21:41:17 | 000,026,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2014.06.14 21:41:14 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2014.06.14 21:41:03 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2014.06.14 21:26:50 | 000,000,000 | R--D | C] -- C:\Users\cross\Dropbox
[2014.06.14 21:25:59 | 000,231,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2014.06.14 21:25:55 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\DropboxMaster
[2014.06.14 21:25:21 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2014.06.14 21:23:29 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\Dropbox
[2014.06.14 21:21:52 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\AVAST Software
[2014.06.14 21:21:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
[2014.06.14 21:20:56 | 000,068,312 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswstm.sys
[2014.06.14 21:20:54 | 000,777,488 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys
[2014.06.14 21:20:54 | 000,776,976 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys.1402773689096
[2014.06.14 21:20:54 | 000,411,680 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2014.06.14 21:20:54 | 000,411,552 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys.1402773689096
[2014.06.14 21:20:52 | 000,067,824 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2014.06.14 21:20:44 | 000,081,768 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2014.06.14 21:20:38 | 000,271,264 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2014.06.14 21:20:29 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2014.06.14 21:19:30 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2014.06.14 21:14:45 | 000,219,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2014.06.14 21:14:45 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2014.06.14 21:11:48 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2014.06.14 21:09:00 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2014.06.14 21:04:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014.06.14 21:04:19 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2014.06.14 21:04:17 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Google
[2014.06.14 21:04:04 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Deployment
[2014.06.14 21:04:04 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Apps
[2014.06.14 21:02:40 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2014.06.14 20:58:56 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2014.06.14 20:58:55 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2014.06.14 20:58:45 | 000,000,000 | R--D | C] -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014.06.14 20:58:45 | 000,000,000 | R--D | C] -- C:\Users\cross\Searches
[2014.06.14 20:58:45 | 000,000,000 | R--D | C] -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014.06.14 20:58:43 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2014.06.14 20:58:43 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2014.06.14 20:58:43 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2014.06.14 20:58:32 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2014.06.14 20:58:32 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2014.06.14 20:58:14 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\Identities
[2014.06.14 20:58:12 | 000,000,000 | R--D | C] -- C:\Users\cross\Contacts
[2014.06.14 20:58:02 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\VirtualStore
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\AppData\Local\Temporary Internet Files
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Šablony
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Soubory cookie
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\SendTo
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Poslední
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Okolní tiskárny
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Okolní síť
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Documents\Obrázky
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Nabídka Start
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Local Settings
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Documents\Hudba
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\AppData\Local\History
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Documents\Filmy
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Dokumenty
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\Data aplikací
[2014.06.14 20:58:00 | 000,000,000 | -HSD | C] -- C:\Users\cross\AppData\Local\Data aplikací
[2014.06.14 20:57:59 | 000,000,000 | --SD | C] -- C:\Users\cross\AppData\Roaming\Microsoft
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Videos
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Saved Games
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Pictures
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Music
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Links
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Favorites
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Downloads
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Documents
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\Desktop
[2014.06.14 20:57:59 | 000,000,000 | R--D | C] -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014.06.14 20:57:59 | 000,000,000 | -H-D | C] -- C:\Users\cross\AppData
[2014.06.14 20:57:59 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Temp
[2014.06.14 20:57:59 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Local\Microsoft
[2014.06.14 20:57:59 | 000,000,000 | ---D | C] -- C:\Users\cross\AppData\Roaming\Media Center Programs
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Šablony
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\Recovery
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Plocha
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Obrázky
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Oblíbené položky
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Nabídka Start
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Hudba
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Filmy
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2014.06.14 20:57:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Data aplikací
[2014.06.14 20:51:51 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2014.06.14 20:49:06 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2014.06.14 20:40:21 | 000,000,000 | -HSD | C] -- C:\Boot

========== Files - Modified Within 30 Days ==========

[2014.06.15 13:37:58 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.06.15 13:34:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\cross\Desktop\OTL.exe
[2014.06.15 13:15:01 | 000,012,432 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.06.15 13:15:01 | 000,012,432 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.06.15 13:09:00 | 000,000,938 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.06.15 12:06:24 | 000,631,292 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2014.06.15 12:06:24 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014.06.15 12:06:24 | 000,121,914 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2014.06.15 12:06:24 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014.06.15 12:02:22 | 000,000,934 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014.06.15 12:01:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.06.15 12:01:38 | 2309,877,760 | -HS- | M] () -- C:\hiberfil.sys
[2014.06.15 00:04:02 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2014.06.14 23:59:13 | 010,284,816 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\cross\Desktop\mbam-setup-1.75.0.1300.exe
[2014.06.14 23:51:37 | 002,195,768 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014.06.14 23:47:58 | 001,333,465 | ---- | M] () -- C:\Users\cross\Desktop\adwcleaner_3.212.exe
[2014.06.14 23:37:56 | 001,107,968 | ---- | M] () -- C:\Users\cross\Desktop\RSIT.exe
[2014.06.14 23:06:23 | 000,001,222 | ---- | M] () -- C:\Users\cross\Desktop\SpeedUpMyComputer.lnk
[2014.06.14 22:31:21 | 000,243,128 | ---- | M] (Disc Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
[2014.06.14 22:08:17 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014.06.14 22:04:09 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2014.06.14 22:04:09 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014.06.14 22:04:09 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2014.06.14 22:04:09 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014.06.14 22:04:09 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014.06.14 22:04:09 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014.06.14 22:04:09 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014.06.14 22:04:09 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014.06.14 22:04:09 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014.06.14 22:04:09 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2014.06.14 22:04:09 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2014.06.14 22:04:09 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2014.06.14 22:04:09 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014.06.14 22:04:09 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2014.06.14 22:04:09 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014.06.14 22:04:09 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014.06.14 22:04:09 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014.06.14 22:04:09 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2014.06.14 22:04:09 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014.06.14 22:04:09 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2014.06.14 22:04:09 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2014.06.14 22:04:09 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014.06.14 22:04:09 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2014.06.14 22:04:08 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014.06.14 22:04:08 | 001,810,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014.06.14 22:04:08 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014.06.14 22:04:08 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014.06.14 22:04:08 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2014.06.14 22:04:08 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2014.06.14 22:04:08 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2014.06.14 22:04:08 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2014.06.14 22:04:08 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014.06.14 22:04:08 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2014.06.14 22:04:08 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2014.06.14 22:04:08 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2014.06.14 22:04:08 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2014.06.14 22:04:08 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2014.06.14 22:04:08 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2014.06.14 21:56:20 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
[2014.06.14 21:47:51 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2014.06.14 21:47:49 | 000,000,370 | RHS- | M] () -- C:\Boot.ini.saved
[2014.06.14 21:30:34 | 000,001,050 | ---- | M] () -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014.06.14 21:30:12 | 000,001,018 | ---- | M] () -- C:\Users\cross\Desktop\Dropbox.lnk
[2014.06.14 21:21:45 | 000,002,123 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014.06.14 21:21:29 | 000,777,488 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys
[2014.06.14 21:21:29 | 000,411,680 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2014.06.14 21:21:29 | 000,068,312 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswstm.sys
[2014.06.14 21:20:29 | 000,776,976 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys.1402773689096
[2014.06.14 21:20:29 | 000,411,552 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys.1402773689096
[2014.06.14 21:20:29 | 000,271,264 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2014.06.14 21:20:29 | 000,180,632 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014.06.14 21:20:29 | 000,081,768 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2014.06.14 21:20:29 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2014.06.14 21:20:29 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2014.06.14 21:20:29 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014.06.14 21:20:29 | 000,024,184 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014.06.14 21:04:57 | 000,002,205 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014.06.14 20:52:43 | 000,067,884 | ---- | M] () -- C:\Windows\System32\license.rtf
[2014.06.14 18:07:41 | 000,000,226 | -H-- | M] () -- C:\Boot.BAK

========== Files Created - No Company Name ==========

[2014.06.15 13:37:58 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.06.14 23:47:51 | 001,333,465 | ---- | C] () -- C:\Users\cross\Desktop\adwcleaner_3.212.exe
[2014.06.14 23:37:47 | 001,107,968 | ---- | C] () -- C:\Users\cross\Desktop\RSIT.exe
[2014.06.14 23:36:47 | 000,001,095 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS4.lnk
[2014.06.14 23:35:59 | 000,001,057 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS4.lnk
[2014.06.14 23:32:50 | 000,001,365 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS4.lnk
[2014.06.14 23:06:23 | 000,001,222 | ---- | C] () -- C:\Users\cross\Desktop\SpeedUpMyComputer.lnk
[2014.06.14 22:43:20 | 1424,146,432 | ---- | C] () -- C:\Users\cross\Desktop\Photoshop CS4 Ext CZ.iso
[2014.06.14 22:10:59 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2014.06.14 22:08:17 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014.06.14 22:07:36 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2014.06.14 22:04:09 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2014.06.14 21:56:20 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ATSwpWDF_01009.Wdf
[2014.06.14 21:47:49 | 000,000,226 | -H-- | C] () -- C:\Boot.BAK
[2014.06.14 21:26:50 | 000,001,018 | ---- | C] () -- C:\Users\cross\Desktop\Dropbox.lnk
[2014.06.14 21:26:39 | 000,001,050 | ---- | C] () -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014.06.14 21:21:45 | 000,002,123 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014.06.14 21:20:55 | 000,180,632 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014.06.14 21:20:52 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2014.06.14 21:20:48 | 000,024,184 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014.06.14 21:04:57 | 000,002,205 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014.06.14 21:04:22 | 000,000,938 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.06.14 21:04:21 | 000,000,934 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014.06.14 20:58:46 | 000,001,417 | ---- | C] () -- C:\Users\cross\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014.06.14 20:52:32 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2014.06.14 20:52:32 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2014.06.14 20:48:41 | 2309,877,760 | -HS- | C] () -- C:\hiberfil.sys
[2014.06.14 20:40:27 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2014.06.14 20:40:22 | 000,383,562 | RHS- | C] () -- C:\bootmgr

========== ZeroAccess Check ==========

[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2014.06.14 21:21:52 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\AVAST Software
[2014.06.14 22:33:06 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\DAEMON Tools Lite
[2014.06.15 12:03:35 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Dropbox
[2014.06.15 12:03:24 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\DropboxMaster
[2014.06.14 22:34:23 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Seznam.cz

========== Purity Check ==========

========== Custom Scans ==========

< >
[2009.07.14 06:53:46 | 000,002,448 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009.07.14 06:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2014.06.14 21:04:21 | 000,000,934 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.06.14 21:04:22 | 000,000,938 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

< MD5 for: AGP440.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\I386\sp3.cab:AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\I386\sp3.cab:atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\System32\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2008.04.14 14:00:00 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\I386\AUTOCHK.EXE

< MD5 for: CDROM.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\I386\sp3.cab:cdrom.sys
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\drivers\cdrom.sys
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_db87d184bc84f910\cdrom.sys
[2009.07.14 01:11:26 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BA6E70AA0E6091BC39DE29477D866A77 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_5f7fb206051affbb\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012.06.02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2012.06.02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2012.06.02 06:41:59 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=EA8C26ECF1656D9647EF044F115EC6DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_76a05147150ffad1\cryptsvc.dll
[2012.06.02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\System32\cryptsvc.dll
[2012.06.02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_760be2a9fbfa79d1\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: HAL.DLL >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\I386\sp3.cab:hal.dll
[2009.07.14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\System32\hal.dll
[2009.07.14 03:20:28 | 000,194,640 | ---- | M] (Microsoft Corporation) MD5=9A557EAE64ABAB3BA67A9BB035D24CB9 -- C:\Windows\winsxs\x86_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_aaff48c7bafdccc6\hal.dll

< MD5 for: CHANGER.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\I386\sp3.cab:Changer.sys

< MD5 for: IASTORV.SYS >
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009.07.14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2008.04.14 14:00:00 | 020,102,206 | ---- | M] () .cab file -- C:\I386\sp3.cab:isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\drivers\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\isapnp.sys
[2009.07.14 03:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) MD5=1F32BB6B38F62F7DF1A7AB7292638A35 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\isapnp.sys

< MD5 for: LSASS.EXE >
[2011.11.17 09:09:25 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=05F38CB7CAB3CE8E9A1812D517DA93EF -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_a69c8e86d7476262\lsass.exe
[2011.11.17 07:29:50 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=81951F51E318AECC2D68559E47485CC4 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_a84828d7bb1480d7\lsass.exe
[2011.11.17 07:29:50 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=81951F51E318AECC2D68559E47485CC4 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_a828bb43bb2beb28\lsass.exe
[2012.06.02 06:40:31 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=A6034689ACF9D14973F8384AD5A5451E -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_a6eb42a4d70be51e\lsass.exe
[2011.11.17 07:36:26 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=C2243FF9E9AAD0C30E8B1A0914DA15B6 -- C:\Windows\System32\lsass.exe
[2011.11.17 07:36:26 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=C2243FF9E9AAD0C30E8B1A0914DA15B6 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_a66c9bbdbde5f8fa\lsass.exe
[2011.11.17 07:36:26 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=C2243FF9E9AAD0C30E8B1A0914DA15B6 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_a656d407bdf6641e\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_a620e0e5be1ecda7\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_a61fe281be1fb177\lsass.exe
[2009.07.14 03:14:23 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=F42309C4191C506B71DB5D1126D26318 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_a69eaf60d7456d32\lsass.exe
[2012.06.02 06:51:22 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=FA7B950E4CA6AA260C4EABA19E03644D -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_a8d76e24d42eb666\lsass.exe
[2011.11.17 07:24:04 | 000,022,528 | ---- | M] (Microsoft Corporation) MD5=FBCB2DFA40862DAA7B1534C9538208A5 -- C:\Windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_a8a284cad4562b09\lsass.exe

< MD5 for: NDIS.SYS >
[2009.07.14 03:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\System32\drivers\ndis.sys
[2009.07.14 03:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_a79d81ea7d62a289\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

< MD5 for: NVRAID.SYS >
[2009.07.14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\drivers\nvraid.sys
[2009.07.14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvraid.sys
[2009.07.14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009.07.14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll

< MD5 for: SMSS.EXE >
[2013.03.19 04:43:41 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=0294CC751D7FAEB13621EEFB8A749429 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_ae7bdfb790cddbcf\smss.exe
[2009.07.14 03:14:39 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=16742790895960690237A5143CEDEC8B -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_ac10fe207a85352b\smss.exe
[2013.03.19 04:51:05 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=37F4765554F2CD34AAAB616F696E5539 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.21490_none_ac8ab2c593af8bd4\smss.exe
[2013.03.19 04:50:03 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=B24BF638652522BB5E14AB7993FD4A5D -- C:\Windows\System32\smss.exe
[2013.03.19 04:50:03 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=B24BF638652522BB5E14AB7993FD4A5D -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.17273_none_ac19b4ca7a7f0306\smss.exe
[2013.03.19 04:49:16 | 000,069,632 | ---- | M] (Microsoft Corporation) MD5=DE91DCC7BC55E940979097E98F743205 -- C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_ae40f33e7774c473\smss.exe
[2008.04.14 14:00:00 | 000,481,792 | ---- | M] (Microsoft Corporation) MD5=F209B5C79A87A9521DC0BD88B039EEE3 -- C:\I386\SYSTEM32\SMSS.EXE

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:56:06 | 001,286,016 | ---- | M] (Microsoft Corporation) MD5=0158D5E9982E9D6A90DFC802F618E130 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_b347f075c77b9c9d\tcpip.sys
[2011.04.25 06:31:30 | 001,290,624 | ---- | M] (Microsoft Corporation) MD5=24326784DF8F3D5F5BBB9F878CE33C14 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_b52f4dc5c4a121e0\tcpip.sys
[2009.07.14 03:19:10 | 001,285,712 | ---- | M] (Microsoft Corporation) MD5=2CC3D75488ABD3EC628BBB9A4FC84EFC -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_b2f46875c7b9d667\tcpip.sys
[2013.01.03 07:01:49 | 001,303,912 | ---- | M] (Microsoft Corporation) MD5=34AE5CC0C7417AB701C2AA8A7BC75417 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_b3c99dece09ecc3b\tcpip.sys
[2013.01.04 06:56:23 | 001,308,504 | ---- | M] (Microsoft Corporation) MD5=4A95845C5F33A4DDEB6AEF6367FB6520 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_b5becc06ddb98192\tcpip.sys
[2011.04.25 08:31:09 | 001,301,376 | ---- | M] (Microsoft Corporation) MD5=6D4728CFF2724FF3A4654971D61D0F1C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_b5ad1a5addc7c444\tcpip.sys
[2013.01.03 07:05:20 | 001,293,672 | ---- | M] (Microsoft Corporation) MD5=7C0507D2391AF5933600CBCED799F277 -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_b502eb9fc4c2a304\tcpip.sys
[2011.04.25 06:44:18 | 001,298,816 | ---- | M] (Microsoft Corporation) MD5=8861B9A06BA99C6E1D62D0C86DFAB86C -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_b39a7d5ae0c2aec5\tcpip.sys
[2013.01.04 06:55:21 | 001,287,528 | ---- | M] (Microsoft Corporation) MD5=BBCEAEFF1FD72A026F827CBB2F4AA8AD -- C:\Windows\System32\drivers\tcpip.sys
[2013.01.04 06:55:21 | 001,287,528 | ---- | M] (Microsoft Corporation) MD5=BBCEAEFF1FD72A026F827CBB2F4AA8AD -- C:\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_b34bcf71c7782cb0\tcpip.sys

< MD5 for: USERINIT.EXE >
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009.10.28 08:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 07:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2009.07.14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< MD5 for: WS2_32.DLL >
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\System32\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[16 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2014.06.15 11:30:35 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Adobe
[2014.06.14 21:21:52 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\AVAST Software
[2014.06.14 22:33:06 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\DAEMON Tools Lite
[2014.06.15 12:03:35 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Dropbox
[2014.06.15 12:03:24 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\DropboxMaster
[2014.06.14 20:58:14 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Identities
[2014.06.15 00:00:15 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Malwarebytes
[2009.07.14 11:19:24 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Media Center Programs
[2014.06.14 21:12:56 | 000,000,000 | --SD | M] -- C:\Users\cross\AppData\Roaming\Microsoft
[2014.06.14 22:34:23 | 000,000,000 | ---D | M] -- C:\Users\cross\AppData\Roaming\Seznam.cz

< %APPDATA%\*.exe /s >
[2014.05.20 02:45:22 | 033,322,312 | ---- | M] (Dropbox, Inc.) -- C:\Users\cross\AppData\Roaming\Dropbox\bin\Dropbox.exe
[2014.05.20 02:47:16 | 000,244,368 | ---- | M] (Dropbox, Inc.) -- C:\Users\cross\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
[2014.05.20 02:45:26 | 000,143,648 | ---- | M] (Dropbox, Inc.) -- C:\Users\cross\AppData\Roaming\Dropbox\bin\DropboxUpdateHelper.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

OTL.exe část 2.

< %systemroot%\system32\drivers\*.sys /3 >
[2014.06.14 21:20:29 | 000,024,184 | ---- | M] () -- C:\Windows\system32\drivers\aswHwid.sys
[2014.06.14 21:20:29 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\system32\drivers\aswMonFlt.sys
[2014.06.14 21:20:29 | 000,081,768 | ---- | M] (AVAST Software) -- C:\Windows\system32\drivers\aswRdr2.sys
[2014.06.14 21:20:29 | 000,049,944 | ---- | M] () -- C:\Windows\system32\drivers\aswRvrt.sys
[2014.06.14 21:21:29 | 000,777,488 | ---- | M] (AVAST Software) -- C:\Windows\system32\drivers\aswsnx.sys
[2014.06.14 21:21:29 | 000,411,680 | ---- | M] (AVAST Software) -- C:\Windows\system32\drivers\aswsp.sys
[2014.06.14 21:21:29 | 000,068,312 | ---- | M] (AVAST Software) -- C:\Windows\system32\drivers\aswstm.sys
[2014.06.14 21:20:29 | 000,180,632 | ---- | M] () -- C:\Windows\system32\drivers\aswVmm.sys
[2014.06.14 22:31:21 | 000,243,128 | ---- | M] (Disc Soft Ltd) -- C:\Windows\system32\drivers\dtsoftbus01.sys
[2014.06.15 00:04:02 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\system32\drivers\mbamswissarmy.sys

< %systemroot%\system32\*.* /3 >
[2014.06.15 14:04:08 | 000,012,432 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.06.15 14:04:08 | 000,012,432 | -H-- | M] () -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.06.14 22:04:08 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\admparse.dll
[2014.06.14 21:20:29 | 000,271,264 | ---- | M] (AVAST Software) -- C:\Windows\system32\aswBoot.exe
[2014.06.14 22:04:09 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtmsft.dll
[2014.06.14 22:04:09 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\dxtrans.dll
[2014.06.14 23:51:37 | 002,195,768 | ---- | M] () -- C:\Windows\system32\FNTCACHE.DAT
[2014.06.14 22:04:09 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\html.iec
[2014.06.14 22:04:09 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\icardie.dll
[2014.06.14 22:04:09 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ie4uinit.exe
[2014.06.14 22:04:09 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\IEAdvpack.dll
[2014.06.14 22:04:09 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieakeng.dll
[2014.06.14 22:04:08 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieaksie.dll
[2014.06.14 22:04:08 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieakui.dll
[2014.06.14 22:04:09 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieapfltr.dat
[2014.06.14 22:04:09 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieapfltr.dll
[2014.06.14 22:04:09 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iedkcs32.dll
[2014.06.14 22:04:09 | 009,711,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieframe.dll
[2014.06.14 22:04:08 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iepeers.dll
[2014.06.14 22:04:09 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iernonce.dll
[2014.06.14 22:04:09 | 001,796,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iertutil.dll
[2014.06.14 22:04:09 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iesetup.dll
[2014.06.14 22:04:09 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iesysprep.dll
[2014.06.14 22:04:09 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieui.dll
[2014.06.14 22:04:09 | 000,072,822 | ---- | M] () -- C:\Windows\system32\ieuinit.inf
[2014.06.14 22:04:08 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ieUnatt.exe
[2014.06.14 22:04:08 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\iexpress.exe
[2014.06.14 22:04:08 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\imgutil.dll
[2014.06.14 22:04:08 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\inetcpl.cpl
[2014.06.14 22:04:08 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\inseng.dll
[2014.06.14 22:04:08 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jscript.dll
[2014.06.14 22:04:08 | 001,810,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jscript9.dll
[2014.06.14 22:04:09 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\jsproxy.dll
[2014.06.14 20:52:43 | 000,067,884 | ---- | M] () -- C:\Windows\system32\license.rtf
[2014.06.14 22:04:08 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\licmgr10.dll
[2014.06.14 22:04:08 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeeds.dll
[2014.06.14 22:04:09 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeedsbs.dll
[2014.06.14 22:04:09 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msfeedssync.exe
[2014.06.14 22:04:08 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshta.exe
[2014.06.14 22:04:08 | 012,356,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtml.dll
[2014.06.14 22:04:08 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtml.tlb
[2014.06.14 22:04:08 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmled.dll
[2014.06.14 22:04:09 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\mshtmler.dll
[2014.06.14 22:04:09 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msls31.dll
[2014.06.14 22:04:09 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\msrating.dll
[2014.06.14 22:04:08 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\occache.dll
[2014.06.15 12:06:24 | 000,121,914 | ---- | M] () -- C:\Windows\system32\perfc005.dat
[2014.06.15 12:06:24 | 000,106,388 | ---- | M] () -- C:\Windows\system32\perfc009.dat
[2014.06.15 12:06:24 | 000,631,292 | ---- | M] () -- C:\Windows\system32\perfh005.dat
[2014.06.15 12:06:24 | 000,616,008 | ---- | M] () -- C:\Windows\system32\perfh009.dat
[2014.06.15 12:06:24 | 001,470,062 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
[2014.06.14 22:04:08 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\pngfilt.dll
[2014.06.14 22:04:09 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\RegisterIEPKEYs.exe
[2014.06.14 22:04:09 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\SetIEInstalledDate.exe
[2014.06.14 22:04:09 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\tdc.ocx
[2014.06.14 22:04:09 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\url.dll
[2014.06.14 22:04:09 | 001,106,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\urlmon.dll
[2014.06.14 22:04:08 | 000,421,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\vbscript.dll
[2014.06.14 22:04:08 | 000,203,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\webcheck.dll
[2014.06.14 22:04:08 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wextract.exe
[2014.06.14 22:04:09 | 001,129,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\wininet.dll

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"DAEMON Tools Lite" = "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun -- [2014.03.04 11:19:52 | 003,696,912 | ---- | M] (Disc Soft Ltd)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
"" =

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.06.15 13:37:58 | 000,000,512 | ---- | M] () MD5=4C77ABD1771D9368BDCB5347A5AD33D3 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2008.04.14 14:00:00 | 000,017,421 | ---- | M] () -- \I386\DMLOADER.DL_
[2008.04.14 14:00:00 | 000,115,367 | ---- | M] () -- \I386\OSLOADER.EX_
[2008.04.14 14:00:00 | 000,133,029 | ---- | M] () -- \I386\OSLOADER.NT_
[2008.08.28 19:34:20 | 004,965,736 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\Photodownloader.exe
[2008.08.28 16:42:12 | 000,011,161 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\bitmaps\main_window\C_LoadError.png
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\da_dk\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\de_de\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\en_us\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\es_es\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fi_fi\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\fr_fr\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\it_it\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ja_jp\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\ko_kr\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\nl_nl\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\no_no\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\pt_br\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\sv_se\Photodownloader.ini
[2008.08.28 16:42:14 | 000,000,308 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_cn\Photodownloader.ini
[2008.08.28 16:42:16 | 000,000,011 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\apd\shared_assets\locales\zh_tw\Photodownloader.ini
[2014.06.14 21:20:25 | 000,072,480 | ---- | M] () -- \Program Files\AVAST Software\Avast\aswWrcIELoader32.exe
[2008.02.25 08:05:22 | 000,856,064 | ---- | M] () -- \Program Files\The KMPlayer\ImLoader.dll
[2014.05.29 15:57:22 | 000,000,696 | ---- | M] () -- \Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\alelhddbbhepgpmgidjdcjakblofbmce\3.7.3_0\images\loader.gif
[2014.06.06 09:18:28 | 000,009,418 | ---- | M] () -- \Users\cross\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.1_0\img\gifloader.gif
[2014.06.14 22:32:46 | 000,031,516 | ---- | M] () -- \Users\cross\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APF39YFG\cz.seznam.software.libfoxloader-3.1.2-win32[1].zip
[2014.06.14 21:21:41 | 000,010,118 | ---- | M] () -- \Windows\Prefetch\ASWWRCIELOADER32.EXE-F211C07F.pf
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\ad7b8cfdb711865249ce6247b8e8e8d1\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\ad7b8cfdb711865249ce6247b8e8e8d1\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\ad7b8cfdb711865249ce6247b8e8e8d1\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\ad7b8cfdb711865249ce6247b8e8e8d1\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2009.07.14 06:54:01 | 000,003,532 | ---- | M] () -- \Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem\Calibration Loader
[2009.07.14 10:43:57 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 10:43:57 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winload.exe.mui_3bc5b827
[2009.07.14 10:43:57 | 000,030,272 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86_winresume.exe.mui_ff8b5358
[2014.06.14 22:24:38 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed.manifest
[2014.06.14 22:24:38 | 000,507,568 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed_winload.exe_75835076
[2014.06.14 22:24:38 | 000,442,920 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed_winresume.exe_85cd1215
[2009.07.14 04:17:38 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 04:17:38 | 000,017,472 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23_spldr.sys_98bd87a0
[2009.07.14 10:42:11 | 000,002,883 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_3318c4cd5e5d0f86.manifest
[2009.07.14 03:47:46 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_5afd1055cdfa75b9.manifest
[2009.08.19 09:38:48 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16411_none_5b44c087cdc549ed.manifest
[2009.08.19 09:21:21 | 000,004,225 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20509_none_5be12f8ee6d3987e.manifest
[2009.07.14 03:52:31 | 000,002,894 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_6b097e5cb26f7a23.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:56:23 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:45:15 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >
[2008.08.14 07:56:12 | 000,003,942 | ---- | M] () -- \Program Files\Common Files\Adobe\CS4ServiceManager\plugins\com.adobe.csi.core.logging_1.0.0\com\adobe\csi\core\logging\Activator.class
[2014.06.14 22:43:55 | 000,000,729 | ---- | M] () -- \Users\cross\AppData\Roaming\Microsoft\Windows\Recent\Microsoft-office-2013--cestina--activator-plna-verze-vse-100-funkcni...-by-elmaros (2).lnk
[2014.06.14 22:43:55 | 000,000,729 | ---- | M] () -- \Users\cross\AppData\Roaming\Microsoft\Windows\Recent\Microsoft-office-2013--cestina--activator-plna-verze-vse-100-funkcni...-by-elmaros.lnk

< *serial* /s >
[2008.04.14 14:00:00 | 000,024,957 | ---- | M] () -- \I386\DPSERIAL.DL_
[2008.04.14 14:00:00 | 000,030,259 | ---- | M] () -- \I386\SERIAL.SY_
[2008.04.14 14:00:00 | 000,006,549 | ---- | M] () -- \I386\SERIALUI.DL_
[2008.08.28 16:40:42 | 000,001,673 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\LMResources\BadSerialNumberAlert.exv
[2008.08.28 16:40:42 | 000,001,561 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\LMResources\CantChangeSerialNumberAlert.exv
[2008.08.28 16:40:42 | 000,001,639 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\LMResources\InValidUpGradeSerialNumberAlert.exv
[2008.08.28 16:40:42 | 000,000,849 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\LMResources\ReserializeAlert.exv
[2008.08.28 16:40:42 | 000,027,443 | ---- | M] () -- \Program Files\Adobe\Adobe Bridge CS4\LMResources\SerializationWF.exv
[2008.09.19 04:10:54 | 000,001,673 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop CS4\lmresources\BadSerialNumberAlert.exv
[2008.09.19 04:10:54 | 000,001,561 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop CS4\lmresources\CantChangeSerialNumberAlert.exv
[2008.09.19 04:10:54 | 000,001,639 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop CS4\lmresources\InValidUpGradeSerialNumberAlert.exv
[2008.09.19 04:10:54 | 000,000,849 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop CS4\lmresources\ReserializeAlert.exv
[2008.09.19 04:10:54 | 000,027,443 | ---- | M] () -- \Program Files\Adobe\Adobe Photoshop CS4\lmresources\SerializationWF.exv
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:23 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2014.06.14 23:18:36 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\428143857fa1c250d50ec55132dd8a2f\System.Runtime.Serialization.ni.dll
[2014.06.14 22:56:49 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\cdef4bcee04bde1065dbdd259cd9915a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.06.14 23:11:33 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\eb60d17f642ddd80e019687c1e02ba17\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.06.15 01:23:40 | 000,310,272 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0ff3383438d688a0118d0fa19ed1dc4\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2014.06.15 01:23:32 | 002,625,024 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\e9f8a45b1063d6c6a62718c88a5623d1\System.Runtime.Serialization.ni.dll
[2014.06.14 23:19:01 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2014.06.14 23:16:29 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2014.06.14 23:19:01 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2014.06.14 23:16:27 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 10:43:15 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.10.06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 001,026,936 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 02:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 02:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2012.10.06 21:18:58 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ar-sa_da88077b472a2e15.manifest
[2012.10.06 21:18:54 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_da-dk_624b45bba15a625c.manifest
[2012.10.06 20:00:23 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_de-de_6290266ba1262012.manifest
[2012.10.06 21:15:07 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_el-gr_8f75741bbf791474.manifest
[2012.10.06 19:14:05 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_en-us_8f6cbf57bf7f3b35.manifest
[2012.10.06 21:07:45 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_es-es_8f71a269bf7ae778.manifest
[2012.10.06 21:14:45 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_fi-fi_bd3e9597dd22b01e.manifest
[2012.10.06 19:14:15 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_fr-fr_bce648e5dd638fa6.manifest
[2012.10.06 21:14:57 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_he-il_17efd446191e56a8.manifest
[2012.10.06 21:30:27 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_hu-hu_179e87b41958ea6a.manifest
[2012.10.06 21:25:47 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_it-it_45132e3037419298.manifest
[2012.10.06 20:35:01 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ja-jp_72963f3c55221ed5.manifest
[2012.10.06 20:12:30 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ko-kr_9ff97a4a731596ef.manifest
[2012.10.06 21:12:48 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_nb-no_284d6adaccd89213.manifest
[2012.10.06 21:29:33 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_nl-nl_2877dd82ccb73ba6.manifest
[2012.10.06 21:22:24 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pl-pl_834d8b370896f692.manifest
[2012.10.06 21:10:16 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pt-br_8314936b08c090ce.manifest
[2012.10.06 21:25:38 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pt-pt_82ff0e2708d0a0d2.manifest
[2012.10.06 21:16:58 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ru-ru_ddcaec3944b79106.manifest
[2012.10.06 21:25:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_sv-se_0be3c21d6224c8c3.manifest
[2012.10.06 21:25:25 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_tr-tr_38be08d38081ac1a.manifest
[2012.10.06 20:15:09 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_zh-cn_496023123409b133.manifest
[2012.10.06 20:14:48 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_zh-tw_48fef40c34527c43.manifest
[2012.10.06 21:41:18 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ar-sa_c3ba49cf60d1a80d.manifest
[2012.10.06 21:38:30 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_da-dk_4b7d880fbb01dc54.manifest
[2012.10.06 19:18:21 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_de-de_4bc268bfbacd9a0a.manifest
[2012.10.06 21:43:32 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_el-gr_78a7b66fd9208e6c.manifest
[2012.10.06 19:18:21 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_en-us_789f01abd926b52d.manifest
[2012.10.06 21:12:07 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_es-es_78a3e4bdd9226170.manifest
[2012.10.06 21:37:02 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_fi-fi_a670d7ebf6ca2a16.manifest
[2012.10.06 20:01:06 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_fr-fr_a6188b39f70b099e.manifest
[2012.10.06 21:45:31 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_he-il_0122169a32c5d0a0.manifest
[2012.10.06 21:28:01 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_hu-hu_00d0ca0833006462.manifest
[2012.10.06 21:28:10 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_it-it_2e45708450e90c90.manifest
[2012.10.06 20:29:11 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ja-jp_5bc881906ec998cd.manifest
[2012.10.06 20:45:47 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ko-kr_892bbc9e8cbd10e7.manifest
[2012.10.06 21:39:17 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_nb-no_117fad2ee6800c0b.manifest
[2012.10.06 21:33:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_nl-nl_11aa1fd6e65eb59e.manifest
[2012.10.06 21:29:08 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pl-pl_6c7fcd8b223e708a.manifest
[2012.10.06 21:07:04 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pt-br_6c46d5bf22680ac6.manifest
[2012.10.06 21:31:01 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pt-pt_6c31507b22781aca.manifest
[2012.10.06 21:43:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ru-ru_c6fd2e8d5e5f0afe.manifest
[2012.10.06 21:30:02 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_sv-se_f51604717bcc42bb.manifest
[2012.10.06 21:29:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_tr-tr_21f04b279a292612.manifest
[2012.10.06 20:18:33 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_zh-cn_329265664db12b2b.manifest
[2012.10.06 20:33:58 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f03310dd3937166e5a168b7e9f2065f1\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_zh-tw_323136604df9f63b.manifest
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll
[2009.07.14 10:43:17 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\drivers\serial.sys
[2009.07.14 10:43:30 | 000,009,728 | ---- | M] () -- \Windows\System32\drivers\cs-CZ\serial.sys.mui
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89\smserial.sys
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14\grserial.sys
[2009.07.14 04:18:03 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 04:18:03 | 000,015,952 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486_kdcom.dll_db5e7744
[2009.07.14 10:43:55 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 04:18:51 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2012.10.06 20:07:20 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009.manifest
[2012.10.06 20:58:54 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01.manifest
[2009.07.14 10:42:43 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2012.10.06 21:19:17 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023.manifest
[2012.10.06 21:26:57 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2012.10.06 20:11:48 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c.manifest
[2012.10.06 21:03:01 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34.manifest
[2009.07.14 03:49:26 | 000,002,762 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_118be3420dfe8486.manifest
[2009.07.14 03:45:27 | 000,000,866 | ---- | M] () -- \Windows\winsxs\Manifests\x86_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_2c93290b67c98d09.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2012.10.06 20:09:38 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e.manifest
[2012.10.06 21:00:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 10:43:23 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2012.10.06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01\System.Runtime.Serialization.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34\System.Runtime.Serialization.dll
[2009.07.14 00:13:45 | 001,068,032 | ---- | M] () -- \Windows\winsxs\x86_mdmmotsm.inf_31bf3856ad364e35_6.1.7600.16385_none_7a97936f8a972896\smserial.sys
[2009.07.14 10:43:15 | 000,011,776 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c002c1170ca9a88f\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.14 10:43:17 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.07.14 10:43:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2009.07.14 10:43:30 | 000,009,728 | ---- | M] () -- \Windows\winsxs\x86_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_c48c78a9ad8ff996\serial.sys.mui
[2009.07.14 01:45:33 | 000,083,456 | ---- | M] () -- \Windows\winsxs\x86_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_f86e06d519b1d9a4\serial.sys
[2009.07.14 00:09:18 | 000,031,232 | ---- | M] () -- \Windows\winsxs\x86_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_7280378295916274\grserial.sys
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576\System.Runtime.Serialization.dll

< *w7lxe* /s >

< End of report >

Extras.txt

OTL Extras logfile created on: 15.6.2014 13:35:33 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\cross\Desktop
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

2,87 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 50,01% Memory free
5,73 Gb Paging File | 3,88 Gb Available in Paging File | 67,60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 118,11 Gb Total Space | 94,40 Gb Free Space | 79,92% Space Free | Partition Type: NTFS
Drive E: | 114,77 Gb Total Space | 114,53 Gb Free Space | 99,80% Space Free | Partition Type: NTFS
Drive F: | 931,51 Gb Total Space | 375,63 Gb Free Space | 40,32% Space Free | Partition Type: NTFS
Drive G: | 1,33 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: CROSS-NTB | User Name: cross | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2987975231-3256749547-2903991068-1001\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00576E20-2703-4BC5-B08A-D011A330BA6A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0976CF3E-EFE7-4179-846B-C272A8926565}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{100AA7BD-8E4C-4C62-B06F-587EEF0CE053}" = lport=139 | protocol=6 | dir=in | app=system |
"{10F76C7B-6B97-4E4E-A68D-057A487CA951}" = rport=139 | protocol=6 | dir=out | app=system |
"{12DC3522-17F8-4315-B099-F740120A92D0}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{1CF1CEAD-338C-4937-A25F-F565C4AF1C3C}" = lport=138 | protocol=17 | dir=in | app=system |
"{240D34A5-713B-41E3-9276-2DFF6219C673}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{2D1373EB-FB14-4081-872E-D890152B3F17}" = rport=445 | protocol=6 | dir=out | app=system |
"{2E3A7FCD-70F1-4B14-95D5-1BECDE1E048D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{2FDF7A7B-B8EA-4981-8949-5B6A28655B83}" = lport=137 | protocol=17 | dir=in | app=system |
"{515E4D5A-2B92-47DC-8926-F2D7853E5830}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{56A6B96B-7526-4864-AF35-FDF2BD12CF8F}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5A243018-4CFB-4586-A126-0ED76C8A8C6D}" = lport=445 | protocol=6 | dir=in | app=system |
"{66A1C556-5B3C-4249-A0EE-B7E582A4D5C1}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6E85E778-D67C-4C55-A6A9-E943C95A9DB3}" = rport=137 | protocol=17 | dir=out | app=system |
"{85FA6BAE-1C6F-4010-9194-2473C337F68B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{A3895643-EC6D-48A3-9CC6-D2D40A068DFA}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{AC9998B3-4CB4-4D5F-A42F-39E47BA9E88C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CC4F8C03-E599-49E7-8114-98374EC45EF3}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CCD56515-3F7C-4542-9220-06F936625CC9}" = rport=138 | protocol=17 | dir=out | app=system |
"{EB743E5E-5518-4AC1-A027-D45B2CCA80B7}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{F8C9B616-5671-49B0-B6DF-5FADDBA0BAD6}" = rport=10243 | protocol=6 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0D2FBAB7-6F1F-4AFD-8C57-7A89E15B6C8B}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0F0FEB33-1D8B-4E17-B042-5CEE7AC8BC0E}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{273DBDDE-98B6-40A5-85A1-B67E11EC71A7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2D8C9B48-7F37-43BC-A161-64DC084B737E}" = protocol=6 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{38D5A88C-6B78-4E5F-A2BD-ED489EE8D5C0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{40C0E3E5-EAA6-406C-9942-CB9F6548F97C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{5C669707-BB4D-4D72-9790-BEBF2B02D72E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5F9796F8-6F7B-4620-975A-ADE340A2DE44}" = protocol=6 | dir=out | app=system |
"{6D24A260-3376-467A-B8DD-29AB8AC6EF24}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6ED4E403-186E-4B9D-8E23-5FBADE86CEE1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6F20B23A-0686-4064-94C9-17F1B0DD0E01}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{988874C1-9CDC-4EA7-AF38-A46809B28C12}" = protocol=17 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{9BE375DE-69B2-4988-B3BA-FEA82A7708F3}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{9D90C457-2B48-4DEB-BEAD-B45AFBF7F704}" = protocol=17 | dir=in | app=c:\users\cross\appdata\roaming\dropbox\bin\dropbox.exe |
"{AB2E840D-2415-417F-AA92-A6AC253E2678}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ACEB3BD0-42A0-43CF-95C3-9489A131A153}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C87D0573-7C29-4A54-8E88-06CB456E5A26}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{E851002E-6AC6-481E-B8E7-2B3C85C07D03}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{E97CED1A-2ACD-4C88-9D27-22C5AE0AC9A3}" = protocol=6 | dir=in | app=c:\users\cross\appdata\roaming\dropbox\bin\dropbox.exe |
"{F7526FFB-ACB7-42E6-8254-C636BB663A9F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Avast" = avast! Free Antivirus
"DAEMON Tools Lite" = DAEMON Tools Lite
"Google Chrome" = Google Chrome
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2987975231-3256749547-2903991068-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 14.6.2014 15:19:12 | Computer Name = cross-NTB | Source = VSS | ID = 8194
Description =

Error - 14.6.2014 16:37:27 | Computer Name = cross-NTB | Source = MsiInstaller | ID = 11935
Description =

Error - 14.6.2014 19:32:49 | Computer Name = cross-NTB | Source = EventSystem | ID = 4621
Description =

[ System Events ]
Error - 14.6.2014 16:47:56 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x800706ba): Aktualizace zabezpečení systému Windows 7 (KB2503665).

Error - 14.6.2014 16:48:17 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x800706ba): Aktualizace zabezpečení systému Windows 7 (KB2536275).

Error - 14.6.2014 16:48:17 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x800706ba): Aktualizace systému Windows 7 (KB2786400).

Error - 14.6.2014 16:48:17 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x800706ba): Aktualizace zabezpečení systému Windows 7 (KB2840149).

Error - 14.6.2014 16:48:17 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x800706ba): Aktualizace zabezpečení systému Windows 7 (KB2753842).

Error - 14.6.2014 16:48:17 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x800706ba): Ricoh Company - Storage - Ricoh SD/MMC Host Controller.

Error - 14.6.2014 16:48:17 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x800706ba): Aktualizace zabezpečení systému Windows 7 (KB979687).

Error - 14.6.2014 16:54:43 | Computer Name = cross-NTB | Source = Service Control Manager | ID = 7023
Description = Služba Instalační služba modulů systému Windows byla ukončena s následující
chybou: %%16405

Error - 14.6.2014 16:58:10 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x80242016): Aktualizace pro seznam Kompatibilní zobrazení aplikace
Internet Explorer 8 pro systém Windows 7 (KB2598845).

Error - 14.6.2014 16:58:10 | Computer Name = cross-NTB | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Instalace se nezdařila: Instalování následující aktualizace se nezdařilo
z důvodu chyby (0x80242016): Aktualizace systému Windows 7 (KB2703157).

< End of report >

Co ten crack na office?

Pokud nepouzivate, odinstalujte Seznam Software

Vypnete trvale Windows Defender

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
gupdate
gupdatem

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Program Files\SmartTweak

:otl
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-2987975231-3256749547-2903991068-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2014.06.14 23:06:23 | 000,001,222 | ---- | M] () -- C:\Users\cross\Desktop\SpeedUpMyComputer.lnk
[3 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[16 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeCS4ServiceManager"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=-

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

Ohledně office se nebudu nijak vymlouvat ...

Seznam software jsem odinstalovával už včera a v Program Files mám jen prázdnou složku Seznam.cz. Takže i přesto to někde v PC zůstalo? :-\

U toho Windows Defenderu stačí v nastavení odkliknout "Automaticky prohledat tento PC"? Jinou volbu se mi nalézt nepodařilo.

Log:
All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: cross
->Temp folder emptied: 19352998 bytes
->Temporary Internet Files folder emptied: 38148832 bytes
->Google Chrome cache emptied: 358432523 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 8962662 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 405,00 mb

[EMPTYFLASH]

User: All Users

User: cross

User: Default

User: Default User

User: Public

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
File\Folder C:\Program Files\SmartTweak not found.
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-2987975231-3256749547-2903991068-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Users\cross\Desktop\SpeedUpMyComputer.lnk moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5D1D.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5E64.tmp folder deleted successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8545.tmp folder deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS4ServiceManager deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 06152014_150554

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

VIRY.CZ

Odinstalace jednoho programu nainstaluje druhý

Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý

Re: Odinstalace jednoho programu nainstaluje druhý