VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

přeinstalování se dějou divné věci.

https://forum.viry.cz:443/viewtopic.php?t=138846

Stránka 1 z 1

přeinstalování se dějou divné věci.

Napsal: 29 čer 2014 16:31
od peckos
Zdravím,dnes jsem přeinstaloval systém (W 7 home premium) a hned po tom začaly problémy ,počítač je pomalejší ,nelze nainstalovat Security Essenitials s tím že nelze zapisovat do umístění(následuje dlouhá řada čísel) seká se Chrome a pod.
Přikládám log z RSIT a prosím ať se mi na to kouknete a poradíte zda se dá něco dělat .Díky Zdenda.


info.txt logfile of random's system information tool 1.10 2014-06-29 17:16:38

======MBR======

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

======Uninstall list======

AMD Drag and Drop Transcoding-->MsiExec.exe /X{7A536085-9D02-A10F-10A8-2B26393645C3}
ATI AVIVO64 Codecs-->MsiExec.exe /X{197985EE-73F2-B182-6AEB-21926621ED5D}
ATI Catalyst Install Manager-->msiexec /q/x{8340EE6D-7646-A566-495D-95D9681C02C3} REBOOT=ReallySuppress
Catalyst Control Center - Branding-->MsiExec.exe /I{5FD89EA1-99C2-40EE-BBF5-20F8991ED756}
DAEMON Tools Lite-->C:\Program Files (x86)\DAEMON Tools Lite\uninst.exe
Etron USB3.0 Host Controller-->"C:\Program Files (x86)\InstallShield Installation Information\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}\setup.exe" -runfromtemp -l0x0409 -removeonly
Etron USB3.0 Host Controller-->MsiExec.exe /I{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\setup.exe" --uninstall --multi-install --chrome --system-level --verbose-logging
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HydraVision-->MsiExec.exe /X{F6130A03-30EE-D4AD-63C8-E90F422C76C5}
Intel(R) Control Center-->C:\Program Files (x86)\Intel\Intel Control Center\uninstaller\SetupICC.exe -uninstall -force -confirm
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319-->MsiExec.exe /X{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}
Microsoft_VC80_ATL_x86_x64-->MsiExec.exe /I{925D058B-564A-443A-B4B2-7E90C6432E55}
Microsoft_VC80_CRT_x86_x64-->MsiExec.exe /I{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}
Microsoft_VC80_CRT_x86-->MsiExec.exe /I{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}
Microsoft_VC80_MFC_x86_x64-->MsiExec.exe /I{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}
Microsoft_VC80_MFC_x86-->MsiExec.exe /I{D1A19B02-817E-4296-A45B-07853FD74D57}
Microsoft_VC80_MFCLOC_x86_x64-->MsiExec.exe /I{1E9FC118-651D-4934-97BE-E53CAE5C7D45}
Microsoft_VC80_MFCLOC_x86-->MsiExec.exe /I{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}
Microsoft_VC90_ATL_x86_x64-->MsiExec.exe /I{8557397C-A42D-486F-97B3-A2CBC2372593}
Microsoft_VC90_ATL_x86-->MsiExec.exe /I{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}
Microsoft_VC90_CRT_x86_x64-->MsiExec.exe /I{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}
Microsoft_VC90_CRT_x86-->MsiExec.exe /I{08D2E121-7F6A-43EB-97FD-629B44903403}
Microsoft_VC90_MFC_x86_x64-->MsiExec.exe /I{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}
Microsoft_VC90_MFC_x86-->MsiExec.exe /I{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\Setup.Exe -runfromtemp -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly
WMV9/VC-1 Video Playback-->MsiExec.exe /X{356001A6-3033-7737-1E18-B396F721BCE3}

======System event log======

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Distributed Link Tracking Client byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Desktop Window Manager Session Manager byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Power byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Diagnostic Policy Service byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247F27-25
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 5
Source Name: Microsoft-Windows-WMI
Time Written: 20140629113915.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20140629113913.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 3
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20140629113909.456082-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247F27-25
Event Code: 1532
Message: Služba Profil uživatele byla zastavena.


Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101121035831.124372-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247F27-25
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 1
Source Name: Microsoft-Windows-EventSystem
Time Written: 20140629113909.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: 37L4247F27-25
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7

Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140629113857.880862-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247F27-25$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Typ přihlášení: 5

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x1fc
Název procesu: C:\Windows\System32\services.exe

Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140629113857.880862-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x30d6d
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140629113855.088457-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140629113853.637654-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140629113853.590854-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3

-----------------EOF-----------------

Re: přeinstalování se dějou divné věci.

Napsal: 29 čer 2014 16:55
od Rudy
Zdravím!
Potřebuji vidět obsah souboru log.txt. Toto je info.txt.

Re: přeinstalování se dějou divné věci.

Napsal: 30 čer 2014 10:43
od peckos
Zdravím omlouvám se za chybku a přikládám požadované:

Logfile of random's system information tool 1.10 (written by random/random)
Run by hugo at 2014-06-30 11:37:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 117 GB (78%) free of 150 GB
Total RAM: 8175 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:37:47, on 30.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\hugo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5306 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-56b90f28-be11-44b3-89e2-99cbb6875f45 -SystemEventPortName:HostProcess-cb54fe72-7b2d-4c3f-a122-a167c003ec4a -IoCancelEventPortName:HostProcess-7ba27466-b9de-46ed-806c-71e701aea2db -NonStateChangingEventPortName:HostProcess-fb40ae55-9e38-4ad2-af2b-dc9dd4f797a5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d20c992f-3b21-4994-aac0-192a2b25bfd2 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\Windows\servicing\TrustedInstaller.exe
"C:\Windows\system32\wuauclt.exe" /RunHandlerComServer
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
"C:\Windows\SoftwareDistribution\Download\Install\NDP451-KB2858725-x86-x64-ENU.exe" /q /norestart /SkipMSUInstall /chainingpackage NETFX45WURTM
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"taskhost.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1980.0.1301510184\1846637344" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,15 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68bf --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.820.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/group_53/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="1980.6.772304042\513966611" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/group_53/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="1980.7.2022779311\1364232351" /prefetch:673131151
"C:\Users\hugo\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-04 11772520]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-12 336384]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-06-30 10:23:17 ----D---- C:\ProgramData\SecTaskMan
2014-06-30 10:23:10 ----D---- C:\Program Files (x86)\Security Task Manager
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\cryptsvc.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\cryptnet.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\crypt32.dll
2014-06-30 06:36:21 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-06-30 06:36:21 ----A---- C:\Windows\system32\wer.dll
2014-06-30 06:36:18 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-06-30 06:36:18 ----A---- C:\Windows\system32\imagehlp.dll
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\netio.sys
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-30 06:36:05 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-06-30 06:36:03 ----A---- C:\Windows\system32\tzres.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml6.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml3.dll
2014-06-30 06:35:31 ----A---- C:\Windows\system32\drivers\afd.sys
2014-06-30 06:35:12 ----A---- C:\Windows\system32\win32k.sys
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-06-30 06:34:57 ----A---- C:\Windows\system32\credui.dll
2014-06-30 06:34:57 ----A---- C:\Windows\system32\authui.dll
2014-06-30 06:34:52 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\lpk.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\fontsub.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\dciman32.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\atmlib.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\atmfd.dll
2014-06-30 06:34:23 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-06-30 06:34:23 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-06-30 06:34:23 ----A---- C:\Windows\system32\mfc42u.dll
2014-06-30 06:34:22 ----A---- C:\Windows\system32\mfc42.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate.exe
2014-06-30 06:34:06 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-06-30 06:34:06 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-30 06:34:06 ----A---- C:\Windows\system32\msdrm.dll
2014-06-30 06:33:53 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-06-30 06:33:53 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-06-30 06:33:32 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-06-30 06:33:32 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-06-30 06:33:24 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdpwsx.dll
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-06-30 06:33:14 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-06-30 06:33:08 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-06-30 06:33:07 ----A---- C:\Windows\system32\rpcrt4.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\nlasvc.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\nlaapi.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\ncsi.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\netevent.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\netcorehc.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-06-30 06:32:17 ----A---- C:\Windows\system32\profsvc.dll
2014-06-30 06:32:08 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-06-30 06:32:08 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnsapi.dll
2014-06-29 23:47:51 ----D---- C:\Windows\SYSWOW64\Wat
2014-06-29 23:47:51 ----D---- C:\Windows\system32\Wat
2014-06-29 23:47:40 ----SD---- C:\Windows\system32\CompatTel
2014-06-29 22:51:26 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-06-29 22:47:14 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-06-29 22:47:14 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\url.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\wininet.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\wextract.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\webcheck.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\vbscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\urlmon.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\url.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\pngfilt.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\occache.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msrating.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msls31.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmler.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtml.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshta.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeedssync.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\licmgr10.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jsIntl.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript9diag.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript9.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\inseng.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\imgutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iexpress.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieui.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iesysprep.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iesetup.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iertutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iernonce.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iepeers.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieframe.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iedkcs32.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieapfltr.dat
2014-06-29 22:47:12 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\icardie.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\elshyph.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\XpsPrint.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\WMPhoto.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\UIAnimation.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\FntCache.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\dxgi.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\DWrite.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10warp.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10level9.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10_1.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d2d1.dll
2014-06-29 22:41:23 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-06-29 22:41:23 ----A---- C:\Windows\system32\d3d11.dll
2014-06-29 22:33:20 ----A---- C:\Windows\system32\Wdfres.dll
2014-06-29 22:33:20 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-06-29 22:29:12 ----A---- C:\Windows\system32\browserchoice.exe
2014-06-29 22:25:32 ----D---- C:\Program Files (x86)\FinalWire
2014-06-29 22:23:30 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-06-29 22:23:30 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-06-29 22:23:30 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-06-29 22:23:30 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFx.dll
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFHost.exe
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-06-29 22:20:26 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-06-29 22:20:26 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-06-29 22:20:26 ----A---- C:\Windows\system32\wmi.dll
2014-06-29 22:20:26 ----A---- C:\Windows\system32\wintrust.dll
2014-06-29 22:20:26 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-06-29 19:57:24 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-06-29 19:57:24 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-06-29 19:57:07 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-06-29 19:52:29 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-06-29 19:52:18 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-06-29 19:52:18 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-06-29 19:51:59 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\system32\WebClnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-06-29 19:51:59 ----A---- C:\Windows\system32\davclnt.dll
2014-06-29 19:51:55 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-06-29 19:51:55 ----A---- C:\Windows\system32\dpnet.dll
2014-06-29 19:51:50 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\winlogon.exe
2014-06-29 19:51:49 ----A---- C:\Windows\system32\wdigest.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\TSpkg.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\schannel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\objsel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\ncrypt.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\msv1_0.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\lsasrv.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\kerberos.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-29 19:51:49 ----A---- C:\Windows\system32\drivers\cng.sys
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\wincredprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\sspicli.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\smss.exe
2014-06-29 19:51:48 ----A---- C:\Windows\system32\secur32.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\lsass.exe
2014-06-29 19:51:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-29 19:51:48 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\dimsroam.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\csrsrv.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\credssp.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\cngprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\capiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\apisetschema.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\adprovider.dll
2014-06-29 19:51:25 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srv.sys
2014-06-29 19:50:03 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-06-29 19:50:00 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-06-29 19:50:00 ----A---- C:\Windows\system32\mswsock.dll
2014-06-29 19:49:51 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-06-29 19:49:51 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-06-29 19:49:51 ----A---- C:\Windows\system32\Wpc.dll
2014-06-29 19:49:51 ----A---- C:\Windows\system32\gameux.dll
2014-06-29 19:49:35 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-06-29 19:49:35 ----A---- C:\Windows\system32\psisdecd.dll
2014-06-29 19:49:32 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\tdh.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\ntdll.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\advapi32.dll
2014-06-29 19:47:37 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-06-29 19:47:34 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-06-29 19:47:34 ----A---- C:\Windows\system32\msi.dll
2014-06-29 19:47:09 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-06-29 19:47:09 ----A---- C:\Windows\system32\iologmsg.dll
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\storport.sys
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-06-29 19:47:04 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-06-29 19:47:04 ----A---- C:\Windows\system32\synceng.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\winresume.exe
2014-06-29 19:47:01 ----A---- C:\Windows\system32\winload.exe
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kdusb.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kdcom.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kd1394.dll
2014-06-29 19:46:59 ----A---- C:\Windows\system32\shell32.dll
2014-06-29 19:46:58 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-06-29 19:46:58 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-06-29 19:46:58 ----A---- C:\Windows\system32\shdocvw.dll
2014-06-29 19:46:40 ----A---- C:\Windows\system32\aepdu.dll
2014-06-29 19:46:40 ----A---- C:\Windows\system32\aeinv.dll
2014-06-29 19:46:06 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-06-29 19:46:06 ----A---- C:\Windows\system32\win32spl.dll
2014-06-29 19:46:01 ----A---- C:\Windows\system32\gdi32.dll
2014-06-29 19:46:00 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-06-29 19:45:57 ----A---- C:\Windows\system32\taskhost.exe
2014-06-29 19:45:54 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-06-29 19:45:54 ----A---- C:\Windows\system32\qedit.dll
2014-06-29 19:45:33 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-06-29 19:45:33 ----A---- C:\Windows\system32\cryptdlg.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-06-29 19:45:27 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-06-29 19:45:14 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-29 19:45:14 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-29 19:45:11 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-06-29 19:45:11 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\netapi32.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\browser.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\browcli.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64win.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64cpu.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\winsrv.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\ntvdm64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\kernel32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\conhost.exe
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-06-29 19:45:07 ----A---- C:\Windows\SYSWOW64\user.exe
2014-06-29 19:44:59 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-06-29 19:44:59 ----A---- C:\Windows\system32\prevhost.exe
2014-06-29 19:44:56 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-06-29 19:44:53 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-06-29 19:44:53 ----A---- C:\Windows\system32\srcore.dll
2014-06-29 19:44:50 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-06-29 19:44:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-06-29 19:44:46 ----A---- C:\Windows\system32\inetcomm.dll
2014-06-29 19:44:43 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-06-29 19:44:43 ----A---- C:\Windows\system32\msvcrt.dll
2014-06-29 19:44:39 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-06-29 19:44:33 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-06-29 19:44:33 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-06-29 19:44:33 ----A---- C:\Windows\system32\certutil.exe
2014-06-29 19:44:33 ----A---- C:\Windows\system32\certenc.dll
2014-06-29 19:44:22 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-06-29 19:44:22 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-06-29 19:44:22 ----A---- C:\Windows\system32\wscript.exe
2014-06-29 19:44:22 ----A---- C:\Windows\system32\scrrun.dll
2014-06-29 19:44:22 ----A---- C:\Windows\system32\cscript.exe
2014-06-29 19:44:21 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-06-29 19:44:13 ----A---- C:\Windows\system32\localspl.dll
2014-06-29 19:44:10 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-06-29 19:44:10 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-06-29 19:44:10 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-06-29 19:44:10 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-06-29 19:44:06 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-06-29 19:44:06 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-06-29 19:44:06 ----A---- C:\Windows\system32\oleaut32.dll
2014-06-29 19:44:06 ----A---- C:\Windows\system32\oleacc.dll
2014-06-29 19:44:03 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-06-29 19:44:03 ----A---- C:\Windows\system32\EncDec.dll
2014-06-29 19:43:59 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-06-29 19:43:59 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-06-29 19:43:59 ----A---- C:\Windows\system32\cdd.dll
2014-06-29 19:43:06 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-06-29 19:43:06 ----A---- C:\Windows\system32\cdosys.dll
2014-06-29 19:42:51 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-06-29 19:42:51 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-06-29 19:42:51 ----A---- C:\Windows\system32\nshwfp.dll
2014-06-29 19:42:51 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-06-29 19:42:51 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-06-29 19:42:49 ----A---- C:\Windows\system32\scavengeui.dll
2014-06-29 19:37:19 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-06-29 19:37:19 ----A---- C:\Windows\system32\packager.dll
2014-06-29 19:00:38 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-06-29 19:00:38 ----A---- C:\Windows\system32\rdpcore.dll
2014-06-29 19:00:38 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-06-29 18:56:49 ----A---- C:\Windows\system32\wups2.dll
2014-06-29 18:56:49 ----A---- C:\Windows\system32\wuauclt.exe
2014-06-29 18:56:48 ----A---- C:\Windows\system32\wucltux.dll
2014-06-29 18:56:48 ----A---- C:\Windows\system32\wuaueng.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wups.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wudriver.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wuapi.dll
2014-06-29 18:56:40 ----A---- C:\Windows\system32\wuwebv.dll
2014-06-29 18:56:40 ----A---- C:\Windows\system32\wuapp.exe
2014-06-29 17:16:31 ----D---- C:\rsit
2014-06-29 17:16:31 ----D---- C:\Program Files\trend micro
2014-06-29 17:12:02 ----SHD---- C:\$RECYCLE.BIN
2014-06-29 17:11:47 ----A---- C:\ComboFix.txt
2014-06-29 17:06:05 ----D---- C:\Windows\temp
2014-06-29 16:46:54 ----A---- C:\Windows\zip.exe
2014-06-29 16:46:54 ----A---- C:\Windows\SWSC.exe
2014-06-29 16:46:54 ----A---- C:\Windows\SWREG.exe
2014-06-29 16:46:54 ----A---- C:\Windows\sed.exe
2014-06-29 16:46:54 ----A---- C:\Windows\PEV.exe
2014-06-29 16:46:54 ----A---- C:\Windows\NIRCMD.exe
2014-06-29 16:46:54 ----A---- C:\Windows\MBR.exe
2014-06-29 16:46:54 ----A---- C:\Windows\grep.exe
2014-06-29 16:46:50 ----D---- C:\Qoobox
2014-06-29 16:46:42 ----D---- C:\Windows\erdnt
2014-06-29 16:20:34 ----D---- C:\Config.Msi
2014-06-29 15:48:18 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-06-29 15:44:41 ----D---- C:\Program Files (x86)\Adobe
2014-06-29 15:36:46 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2014-06-29 15:36:43 ----D---- C:\Users\hugo\AppData\Roaming\DAEMON Tools Lite
2014-06-29 15:36:41 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-06-29 15:35:59 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-06-29 15:24:41 ----N---- C:\bootsqm.dat
2014-06-29 15:02:49 ----D---- C:\Users\hugo\AppData\Roaming\Macromedia
2014-06-29 15:02:47 ----D---- C:\ProgramData\Adobe
2014-06-29 15:02:44 ----D---- C:\Users\hugo\AppData\Roaming\Adobe
2014-06-29 14:59:25 ----D---- C:\Program Files (x86)\QIP
2014-06-29 14:51:18 ----D---- C:\Users\hugo\AppData\Roaming\AVAST Software
2014-06-29 14:45:28 ----A---- C:\Windows\avastSS.scr
2014-06-29 14:45:18 ----D---- C:\Program Files\AVAST Software
2014-06-29 14:43:57 ----D---- C:\ProgramData\AVAST Software
2014-06-29 14:37:55 ----D---- C:\Windows\Panther
2014-06-29 14:10:41 ----D---- C:\Program Files (x86)\Google
2014-06-29 14:07:03 ----D---- C:\Users\hugo\AppData\Roaming\ATI
2014-06-29 14:07:03 ----D---- C:\ProgramData\ATI
2014-06-29 14:02:57 ----D---- C:\Program Files\Common Files\ATI Technologies
2014-06-29 14:02:52 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2014-06-29 14:02:46 ----A---- C:\Windows\SYSWOW64\atipblag.dat
2014-06-29 14:02:46 ----A---- C:\Windows\system32\coinst.dll
2014-06-29 14:02:46 ----A---- C:\Windows\system32\atipblag.dat
2014-06-29 14:02:46 ----A---- C:\Windows\system32\ATIDEMGX.dll
2014-06-29 14:02:21 ----D---- C:\Program Files (x86)\ATI Technologies
2014-06-29 14:02:05 ----D---- C:\Program Files\ATI
2014-06-29 14:01:08 ----D---- C:\Program Files\ATI Technologies
2014-06-29 13:57:31 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2014-06-29 13:57:31 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2014-06-29 13:57:29 ----A---- C:\Windows\SYSWOW64\log.txt
2014-06-29 13:57:14 ----A---- C:\Windows\system32\drivers\HECIx64.sys
2014-06-29 13:57:13 ----D---- C:\Users\hugo\AppData\Roaming\InstallShield
2014-06-29 13:56:40 ----D---- C:\Program Files (x86)\Etron Technology
2014-06-29 13:56:24 ----SHD---- C:\Windows\Installer
2014-06-29 13:53:33 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2014-06-29 13:53:32 ----A---- C:\Windows\system32\RTNUninst64.dll
2014-06-29 13:53:32 ----A---- C:\Windows\system32\RtNicProp64.dll
2014-06-29 13:52:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-06-29 13:52:52 ----D---- C:\Program Files\Realtek
2014-06-29 13:52:44 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSHP64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkApi64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RTCOM64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEED64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RCoInst64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-06-29 13:52:41 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBWrp64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBppld64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBPPCn64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBAPO64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-06-29 13:52:39 ----A---- C:\Windows\system32\FMAPO64.dll
2014-06-29 13:52:37 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-06-29 13:52:37 ----D---- C:\Program Files (x86)\Realtek
2014-06-29 13:52:37 ----A---- C:\Windows\system32\AERTAR64.dll
2014-06-29 13:52:37 ----A---- C:\Windows\system32\AERTAC64.dll
2014-06-29 13:52:32 ----HD---- C:\Program Files (x86)\Temp
2014-06-29 13:52:31 ----RA---- C:\Windows\RtlExUpd.dll
2014-06-29 13:51:53 ----RA---- C:\Windows\SYSWOW64\CSVer.dll
2014-06-29 13:51:53 ----D---- C:\Program Files (x86)\Intel
2014-06-29 13:51:41 ----D---- C:\Intel
2014-06-29 13:51:06 ----A---- C:\Windows\GSetup.ini
2014-06-29 13:47:51 ----D---- C:\Users\hugo\AppData\Roaming\Identities
2014-06-29 13:47:42 ----SD---- C:\Users\hugo\AppData\Roaming\Microsoft
2014-06-29 13:47:42 ----D---- C:\Users\hugo\AppData\Roaming\Media Center Programs
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Šablony
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Plocha
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Oblíbené položky
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Nabídka Start
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Dokumenty
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Data aplikací
2014-06-29 13:47:39 ----D---- C:\Recovery
2014-06-29 13:46:48 ----D---- C:\Windows\SoftwareDistribution
2014-06-29 13:39:12 ----D---- C:\Windows\Prefetch
2014-06-29 13:38:42 ----ASH---- C:\pagefile.sys
2014-06-29 13:38:41 ----SHD---- C:\System Volume Information
2014-06-29 13:38:41 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2014-06-30 10:52:30 ----D---- C:\Windows\Microsoft.NET
2014-06-30 10:52:23 ----RSD---- C:\Windows\assembly
2014-06-30 10:50:53 ----D---- C:\Windows\winsxs
2014-06-30 10:49:41 ----D---- C:\Windows\System32
2014-06-30 10:49:41 ----D---- C:\Windows\inf
2014-06-30 10:49:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-30 10:47:30 ----D---- C:\Windows\system32\config
2014-06-30 10:23:17 ----D---- C:\ProgramData
2014-06-30 10:23:10 ----RD---- C:\Program Files (x86)
2014-06-30 07:31:06 ----D---- C:\Windows\system32\DriverStore
2014-06-30 07:31:06 ----D---- C:\Windows\system32\drivers
2014-06-30 07:27:26 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-06-30 07:27:26 ----D---- C:\Windows\SysWOW64
2014-06-30 07:27:26 ----D---- C:\Windows\system32\cs-CZ
2014-06-30 07:27:23 ----RSD---- C:\Windows\Fonts
2014-06-30 07:27:23 ----D---- C:\Program Files\Windows Defender
2014-06-30 07:27:23 ----D---- C:\Program Files (x86)\Windows Defender
2014-06-30 07:27:21 ----D---- C:\Windows\SYSWOW64\migration
2014-06-30 07:27:21 ----D---- C:\Windows\system32\migration
2014-06-30 06:40:01 ----D---- C:\Windows\system32\catroot2
2014-06-30 06:40:01 ----D---- C:\Windows\system32\catroot
2014-06-30 06:30:21 ----D---- C:\Windows\system32\wdi
2014-06-29 23:47:54 ----D---- C:\Program Files\Internet Explorer
2014-06-29 23:47:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-06-29 23:47:53 ----D---- C:\Windows\SYSWOW64\en-US
2014-06-29 23:47:53 ----D---- C:\Windows\system32\en-US
2014-06-29 23:47:53 ----D---- C:\Windows\PolicyDefinitions
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\it-IT
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\es-ES
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\el-GR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\de-DE
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\da-DK
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-TW
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-HK
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-CN
2014-06-29 23:47:52 ----D---- C:\Windows\system32\tr-TR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\sv-SE
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ru-RU
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pt-PT
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pt-BR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pl-PL
2014-06-29 23:47:52 ----D---- C:\Windows\system32\nl-NL
2014-06-29 23:47:52 ----D---- C:\Windows\system32\nb-NO
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ko-KR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ja-JP
2014-06-29 23:47:52 ----D---- C:\Windows\system32\it-IT
2014-06-29 23:47:52 ----D---- C:\Windows\system32\hu-HU
2014-06-29 23:47:52 ----D---- C:\Windows\system32\fr-FR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\fi-FI
2014-06-29 23:47:52 ----D---- C:\Windows\system32\es-ES
2014-06-29 23:47:52 ----D---- C:\Windows\system32\el-GR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\de-DE
2014-06-29 23:47:51 ----D---- C:\Windows\system32\wbem
2014-06-29 23:47:51 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-06-29 23:47:51 ----D---- C:\Windows\system32\da-DK
2014-06-29 23:47:42 ----D---- C:\Windows\ehome
2014-06-29 23:47:42 ----D---- C:\Windows\AppPatch
2014-06-29 23:47:41 ----D---- C:\Windows\system32\Boot
2014-06-29 23:47:39 ----D---- C:\Program Files\Windows Journal
2014-06-29 23:11:49 ----RSD---- C:\Windows\Media
2014-06-29 23:11:49 ----D---- C:\Windows\Tasks
2014-06-29 23:11:49 ----D---- C:\Windows\SYSWOW64\wbem
2014-06-29 23:11:49 ----D---- C:\Windows\system32\wfp
2014-06-29 23:11:49 ----D---- C:\Windows\L2Schemas
2014-06-29 23:11:49 ----D---- C:\Program Files\Windows Mail
2014-06-29 23:11:49 ----D---- C:\Program Files\Common Files\System
2014-06-29 23:11:49 ----D---- C:\Program Files (x86)\Windows Mail
2014-06-29 23:11:45 ----D---- C:\Windows\system32\CodeIntegrity
2014-06-29 23:11:27 ----D---- C:\Windows\registration
2014-06-29 23:10:21 ----D---- C:\Windows\system32\LogFiles
2014-06-29 22:51:26 ----D---- C:\Windows\Logs
2014-06-29 22:41:04 ----D---- C:\Windows
2014-06-29 17:16:31 ----RD---- C:\Program Files
2014-06-29 17:07:37 ----A---- C:\Windows\system.ini
2014-06-29 17:03:51 ----D---- C:\Windows\SYSWOW64\drivers
2014-06-29 17:03:50 ----D---- C:\Program Files (x86)\Common Files
2014-06-29 16:29:25 ----D---- C:\Windows\system32\Tasks
2014-06-29 16:13:52 ----D---- C:\Program Files\Common Files
2014-06-29 16:02:13 ----SD---- C:\ProgramData\Microsoft
2014-06-29 14:02:19 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-06-29 13:53:22 ----D---- C:\Windows\system32\restore
2014-06-29 13:47:42 ----RD---- C:\Users
2014-06-29 13:47:39 ----D---- C:\Windows\system32\Recovery
2014-06-29 13:47:39 ----D---- C:\Program Files\Windows NT
2014-06-29 13:43:39 ----D---- C:\Windows\rescache
2014-06-29 13:43:34 ----D---- C:\Windows\debug
2014-06-29 13:41:10 ----D---- C:\Windows\system32\sysprep
2014-06-29 13:40:26 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-06-29 283064]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-13 9085952]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-13 299008]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-01-26 39808]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-01-26 64256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-04 2697448]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-24 412264]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-13 203776]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-29 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-29 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-29 111616]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-29 1255736]

-----------------EOF-----------------

Re: přeinstalování se dějou divné věci.

Napsal: 30 čer 2014 18:05
od Rudy
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 17:47
od peckos
Zdravím,tady je log u AdwCleaner

# AdwCleaner v3.214 - Report created 01/07/2014 at 18:41:57
# Updated 29/06/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : hugo - HUGO-PC
# Running from : C:\Users\hugo\Desktop\adwcleaner_3.214.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\hugo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [879 octets] - [01/07/2014 18:40:27]
AdwCleaner[S0].txt - [805 octets] - [01/07/2014 18:41:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [864 octets] ##########

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 17:52
od Rudy
Dejte nový log RSIT.

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 20:28
od peckos
Logfile of random's system information tool 1.10 (written by random/random)
Run by hugo at 2014-07-01 21:27:43
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 112 GB (75%) free of 150 GB
Total RAM: 8175 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:27:46, on 1.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\QIP\qip.exe
C:\Users\hugo\AppData\Local\Adobe\OOBE\PDApp\DECore\Setup.exe
E:\adobe CS 6\Adobe Photoshop CS6 Extended\SOFTWARE\payloads\Microsoft VC 2010 Redist (x86)\vcredist_x86.exe
C:\Program Files\trend micro\hugo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5270 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4a7d2cf8-0733-492b-85dc-dce87940c74a -SystemEventPortName:HostProcess-ab8f548a-8076-40c6-b58a-12ea4a5fb421 -IoCancelEventPortName:HostProcess-343bb333-674a-48ff-9125-ec3396aec8cb -NonStateChangingEventPortName:HostProcess-79d16f84-7e36-4ffb-9124-fd1990bb7908 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e8eca8fa-153b-4982-8537-bc38ed2c71bb -DeviceGroupId:WpdFsGroup
C:\Windows\system32\sppsvc.exe
atieclxx
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"

C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\QIP\qip.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Users\hugo\AppData\Local\Adobe\OOBE\PDApp\DECore\Setup.exe" --deploymentFile="C:\Users\hugo\AppData\Local\Temp\{FA5C58EC-DC47-44CA-8585-43C562937791}\deploy.xml" --userASUPath="C:\Users\hugo\AppData\Local\Adobe\OOBE\PDApp" --DEVersion=6.0
C:\Windows\system32\msiexec.exe /V
"E:\adobe CS 6\Adobe Photoshop CS6 Extended\SOFTWARE\payloads\Microsoft VC 2010 Redist (x86)\vcredist_x86.exe" /q /norestart
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\hugo\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-04 11772520]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-12 336384]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-07-01 19:33:37 ----D---- C:\Windows\PCHEALTH
2014-07-01 19:32:19 ----D---- C:\Program Files\Microsoft Office
2014-07-01 19:31:24 ----D---- C:\ProgramData\Microsoft Help
2014-07-01 19:31:24 ----D---- C:\Program Files (x86)\Microsoft Office
2014-07-01 19:30:59 ----RHD---- C:\MSOCache
2014-07-01 19:28:44 ----A---- C:\Users\hugo\AppData\Roaming\All CPU MeterV3_Settings.ini
2014-07-01 19:15:49 ----D---- C:\Users\hugo\AppData\Roaming\vlc
2014-07-01 19:14:12 ----D---- C:\Program Files (x86)\VideoLAN
2014-07-01 19:06:55 ----D---- C:\Users\hugo\AppData\Roaming\uTorrent
2014-07-01 19:00:05 ----D---- C:\Windows\system32\MRT
2014-07-01 19:00:02 ----A---- C:\Windows\system32\MRT.exe
2014-07-01 18:59:49 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-07-01 18:59:49 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-07-01 18:59:49 ----A---- C:\Windows\system32\wmploc.DLL
2014-07-01 18:59:48 ----A---- C:\Windows\system32\wmp.dll
2014-07-01 18:57:41 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-07-01 18:56:15 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-07-01 18:56:14 ----D---- C:\Windows\Migration
2014-07-01 18:54:47 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-01 18:54:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-01 18:54:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-01 18:54:45 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\wksprtPS.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\wksprt.exe
2014-07-01 18:54:44 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-07-01 18:54:44 ----A---- C:\Windows\system32\tsgqec.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\mstscax.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\mstsc.exe
2014-07-01 18:54:44 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-07-01 18:53:56 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-01 18:53:56 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-01 18:53:22 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-07-01 18:53:19 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-07-01 18:53:19 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2014-07-01 18:53:19 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-07-01 18:53:18 ----A---- C:\Windows\system32\rdpudd.dll
2014-07-01 18:53:18 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-07-01 18:53:18 ----A---- C:\Windows\system32\rdpcorets.dll
2014-07-01 18:50:05 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-07-01 18:50:05 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-07-01 18:49:57 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-07-01 18:49:57 ----A---- C:\Windows\system32\qdvd.dll
2014-07-01 18:40:37 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-07-01 18:40:25 ----D---- C:\AdwCleaner
2014-07-01 18:40:18 ----A---- C:\Windows\explorer.exe
2014-07-01 18:40:17 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-07-01 18:40:14 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-07-01 18:40:14 ----A---- C:\Windows\system32\WMPhoto.dll
2014-07-01 18:40:09 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-01 18:40:04 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-07-01 18:40:04 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-07-01 18:40:04 ----A---- C:\Windows\system32\d3d10warp.dll
2014-07-01 18:40:04 ----A---- C:\Windows\system32\d2d1.dll
2014-07-01 18:39:24 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-07-01 18:39:24 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-07-01 18:39:24 ----A---- C:\Windows\system32\fsutil.exe
2014-07-01 18:39:24 ----A---- C:\Windows\system32\esent.dll
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-07-01 18:39:23 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-07-01 18:39:23 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-07-01 18:39:17 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-07-01 18:39:17 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-07-01 18:39:13 ----A---- C:\Windows\system32\spoolsv.exe
2014-07-01 18:39:13 ----A---- C:\Windows\splwow64.exe
2014-07-01 18:21:31 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-07-01 18:21:27 ----D---- C:\Program Files\Microsoft Security Client
2014-06-30 10:23:17 ----D---- C:\ProgramData\SecTaskMan
2014-06-30 10:23:10 ----D---- C:\Program Files (x86)\Security Task Manager
2014-06-30 06:39:05 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-06-30 06:39:05 ----A---- C:\Windows\system32\poqexec.exe
2014-06-30 06:38:57 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-06-30 06:38:57 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-06-30 06:38:56 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-06-30 06:38:56 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-06-30 06:38:40 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-06-30 06:38:39 ----A---- C:\Windows\system32\shell32.dll
2014-06-30 06:38:29 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-06-30 06:38:27 ----A---- C:\Windows\system32\wintrust.dll
2014-06-30 06:38:23 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-06-30 06:38:23 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-06-30 06:38:22 ----A---- C:\Windows\system32\sbe.dll
2014-06-30 06:38:22 ----A---- C:\Windows\system32\CPFilters.dll
2014-06-30 06:38:07 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-06-30 06:38:07 ----A---- C:\Windows\system32\quartz.dll
2014-06-30 06:38:00 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-06-30 06:37:59 ----A---- C:\Windows\system32\ntshrui.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\tquery.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-06-30 06:37:51 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-06-30 06:37:51 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssvp.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssrch.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssphtb.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssph.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\msscntrs.dll
2014-06-30 06:37:40 ----A---- C:\Windows\system32\consent.exe
2014-06-30 06:37:40 ----A---- C:\Windows\system32\appinfo.dll
2014-06-30 06:37:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-06-30 06:37:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-06-30 06:37:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-06-30 06:37:27 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-06-30 06:37:26 ----A---- C:\Windows\system32\usp10.dll
2014-06-30 06:37:19 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-06-30 06:37:18 ----A---- C:\Windows\system32\webio.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\cryptsvc.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\cryptnet.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\crypt32.dll
2014-06-30 06:36:21 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-06-30 06:36:21 ----A---- C:\Windows\system32\wer.dll
2014-06-30 06:36:18 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-06-30 06:36:18 ----A---- C:\Windows\system32\imagehlp.dll
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\netio.sys
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-30 06:36:05 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-06-30 06:36:03 ----A---- C:\Windows\system32\tzres.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml6.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml3.dll
2014-06-30 06:35:31 ----A---- C:\Windows\system32\drivers\afd.sys
2014-06-30 06:35:12 ----A---- C:\Windows\system32\win32k.sys
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-06-30 06:34:57 ----A---- C:\Windows\system32\credui.dll
2014-06-30 06:34:57 ----A---- C:\Windows\system32\authui.dll
2014-06-30 06:34:52 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\lpk.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\fontsub.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\dciman32.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\atmlib.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\atmfd.dll
2014-06-30 06:34:23 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-06-30 06:34:23 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-06-30 06:34:23 ----A---- C:\Windows\system32\mfc42u.dll
2014-06-30 06:34:22 ----A---- C:\Windows\system32\mfc42.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate.exe
2014-06-30 06:34:06 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-06-30 06:34:06 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-30 06:34:06 ----A---- C:\Windows\system32\msdrm.dll
2014-06-30 06:33:53 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-06-30 06:33:53 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-06-30 06:33:32 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-06-30 06:33:32 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-06-30 06:33:24 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdpwsx.dll
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-06-30 06:33:14 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-06-30 06:33:08 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-06-30 06:33:07 ----A---- C:\Windows\system32\rpcrt4.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\nlasvc.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\nlaapi.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\ncsi.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\netevent.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\netcorehc.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-06-30 06:32:17 ----A---- C:\Windows\system32\profsvc.dll
2014-06-30 06:32:08 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-06-30 06:32:08 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnsapi.dll
2014-06-29 23:47:51 ----D---- C:\Windows\SYSWOW64\Wat
2014-06-29 23:47:51 ----D---- C:\Windows\system32\Wat
2014-06-29 23:47:40 ----SD---- C:\Windows\system32\CompatTel
2014-06-29 22:51:26 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-06-29 22:47:14 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\url.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\wininet.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\wextract.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\webcheck.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\vbscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\urlmon.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\url.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\pngfilt.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\occache.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msrating.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msls31.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmler.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtml.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshta.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeedssync.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\licmgr10.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jsIntl.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript9diag.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript9.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\inseng.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\imgutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iexpress.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieui.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iesysprep.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iesetup.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iertutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iernonce.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iepeers.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieframe.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iedkcs32.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieapfltr.dat
2014-06-29 22:47:12 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\icardie.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\elshyph.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\XpsPrint.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\UIAnimation.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\FntCache.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\dxgi.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\DWrite.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10level9.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10_1.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10.dll
2014-06-29 22:41:23 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-06-29 22:41:23 ----A---- C:\Windows\system32\d3d11.dll
2014-06-29 22:33:20 ----A---- C:\Windows\system32\Wdfres.dll
2014-06-29 22:33:20 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-06-29 22:29:12 ----A---- C:\Windows\system32\browserchoice.exe
2014-06-29 22:25:32 ----D---- C:\Program Files (x86)\FinalWire
2014-06-29 22:23:30 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-06-29 22:23:30 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-06-29 22:23:30 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-06-29 22:23:30 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFx.dll
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFHost.exe
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-06-29 22:20:26 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-06-29 22:20:26 ----A---- C:\Windows\system32\wmi.dll
2014-06-29 22:20:26 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-06-29 20:01:30 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-06-29 20:01:30 ----A---- C:\Windows\system32\xmllite.dll
2014-06-29 20:01:22 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-06-29 20:01:22 ----A---- C:\Windows\system32\msieftp.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbctrac.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbccu32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbccr32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbccp32.dll
2014-06-29 20:01:15 ----A---- C:\Windows\system32\wwansvc.dll
2014-06-29 20:01:15 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-06-29 20:01:10 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-06-29 20:01:10 ----A---- C:\Windows\system32\comctl32.dll
2014-06-29 19:57:24 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-06-29 19:57:24 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-06-29 19:57:07 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-06-29 19:52:29 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-06-29 19:52:18 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-06-29 19:52:18 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-06-29 19:51:59 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\system32\WebClnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-06-29 19:51:59 ----A---- C:\Windows\system32\davclnt.dll
2014-06-29 19:51:55 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-06-29 19:51:55 ----A---- C:\Windows\system32\dpnet.dll
2014-06-29 19:51:50 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\winlogon.exe
2014-06-29 19:51:49 ----A---- C:\Windows\system32\wdigest.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\TSpkg.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\schannel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\objsel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\ncrypt.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\msv1_0.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\lsasrv.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\kerberos.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-29 19:51:49 ----A---- C:\Windows\system32\drivers\cng.sys
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\wincredprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\sspicli.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\smss.exe
2014-06-29 19:51:48 ----A---- C:\Windows\system32\secur32.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\lsass.exe
2014-06-29 19:51:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-29 19:51:48 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\dimsroam.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\csrsrv.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\credssp.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\cngprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\capiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\apisetschema.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\adprovider.dll
2014-06-29 19:51:25 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srv.sys
2014-06-29 19:50:03 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-06-29 19:50:00 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-06-29 19:50:00 ----A---- C:\Windows\system32\mswsock.dll
2014-06-29 19:49:51 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-06-29 19:49:51 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-06-29 19:49:51 ----A---- C:\Windows\system32\Wpc.dll
2014-06-29 19:49:51 ----A---- C:\Windows\system32\gameux.dll
2014-06-29 19:49:35 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-06-29 19:49:35 ----A---- C:\Windows\system32\psisdecd.dll
2014-06-29 19:49:32 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\tdh.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\ntdll.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\advapi32.dll
2014-06-29 19:47:37 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-06-29 19:47:34 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-06-29 19:47:34 ----A---- C:\Windows\system32\msi.dll
2014-06-29 19:47:09 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-06-29 19:47:09 ----A---- C:\Windows\system32\iologmsg.dll
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\storport.sys
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-06-29 19:47:04 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-06-29 19:47:04 ----A---- C:\Windows\system32\synceng.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\winresume.exe
2014-06-29 19:47:01 ----A---- C:\Windows\system32\winload.exe
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kdusb.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kdcom.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kd1394.dll
2014-06-29 19:46:58 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-06-29 19:46:58 ----A---- C:\Windows\system32\shdocvw.dll
2014-06-29 19:46:40 ----A---- C:\Windows\system32\aepdu.dll
2014-06-29 19:46:40 ----A---- C:\Windows\system32\aeinv.dll
2014-06-29 19:46:06 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-06-29 19:46:06 ----A---- C:\Windows\system32\win32spl.dll
2014-06-29 19:46:01 ----A---- C:\Windows\system32\gdi32.dll
2014-06-29 19:46:00 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-06-29 19:45:57 ----A---- C:\Windows\system32\taskhost.exe
2014-06-29 19:45:54 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-06-29 19:45:54 ----A---- C:\Windows\system32\qedit.dll
2014-06-29 19:45:33 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-06-29 19:45:33 ----A---- C:\Windows\system32\cryptdlg.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-06-29 19:45:27 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-06-29 19:45:14 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-29 19:45:14 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-29 19:45:11 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-06-29 19:45:11 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\netapi32.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\browser.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\browcli.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64win.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64cpu.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\winsrv.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\ntvdm64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\kernel32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\conhost.exe
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-06-29 19:45:07 ----A---- C:\Windows\SYSWOW64\user.exe
2014-06-29 19:44:59 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-06-29 19:44:59 ----A---- C:\Windows\system32\prevhost.exe
2014-06-29 19:44:56 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-06-29 19:44:53 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-06-29 19:44:53 ----A---- C:\Windows\system32\srcore.dll
2014-06-29 19:44:50 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-06-29 19:44:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-06-29 19:44:46 ----A---- C:\Windows\system32\inetcomm.dll
2014-06-29 19:44:43 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-06-29 19:44:43 ----A---- C:\Windows\system32\msvcrt.dll
2014-06-29 19:44:39 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-06-29 19:44:33 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-06-29 19:44:33 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-06-29 19:44:33 ----A---- C:\Windows\system32\certutil.exe
2014-06-29 19:44:33 ----A---- C:\Windows\system32\certenc.dll
2014-06-29 19:44:22 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-06-29 19:44:22 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-06-29 19:44:22 ----A---- C:\Windows\system32\wscript.exe
2014-06-29 19:44:22 ----A---- C:\Windows\system32\scrrun.dll
2014-06-29 19:44:22 ----A---- C:\Windows\system32\cscript.exe
2014-06-29 19:44:21 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-06-29 19:44:13 ----A---- C:\Windows\system32\localspl.dll
2014-06-29 19:44:10 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-06-29 19:44:06 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-06-29 19:44:06 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-06-29 19:44:06 ----A---- C:\Windows\system32\oleaut32.dll
2014-06-29 19:44:06 ----A---- C:\Windows\system32\oleacc.dll
2014-06-29 19:44:03 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-06-29 19:44:03 ----A---- C:\Windows\system32\EncDec.dll
2014-06-29 19:43:59 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-06-29 19:43:59 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-06-29 19:43:59 ----A---- C:\Windows\system32\cdd.dll
2014-06-29 19:43:06 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-06-29 19:43:06 ----A---- C:\Windows\system32\cdosys.dll
2014-06-29 19:42:51 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-06-29 19:42:51 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-06-29 19:42:51 ----A---- C:\Windows\system32\nshwfp.dll
2014-06-29 19:42:51 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-06-29 19:42:51 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-06-29 19:42:49 ----A---- C:\Windows\system32\scavengeui.dll
2014-06-29 19:37:19 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-06-29 19:37:19 ----A---- C:\Windows\system32\packager.dll
2014-06-29 19:00:38 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-06-29 19:00:38 ----A---- C:\Windows\system32\rdpcore.dll
2014-06-29 19:00:38 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-06-29 18:56:49 ----A---- C:\Windows\system32\wups2.dll
2014-06-29 18:56:49 ----A---- C:\Windows\system32\wuauclt.exe
2014-06-29 18:56:48 ----A---- C:\Windows\system32\wucltux.dll
2014-06-29 18:56:48 ----A---- C:\Windows\system32\wuaueng.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wups.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wudriver.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wuapi.dll
2014-06-29 18:56:40 ----A---- C:\Windows\system32\wuwebv.dll
2014-06-29 18:56:40 ----A---- C:\Windows\system32\wuapp.exe
2014-06-29 17:16:31 ----D---- C:\rsit
2014-06-29 17:16:31 ----D---- C:\Program Files\trend micro
2014-06-29 17:12:02 ----SHD---- C:\$RECYCLE.BIN
2014-06-29 17:11:47 ----A---- C:\ComboFix.txt
2014-06-29 17:06:05 ----D---- C:\Windows\temp
2014-06-29 16:46:54 ----A---- C:\Windows\zip.exe
2014-06-29 16:46:54 ----A---- C:\Windows\SWSC.exe
2014-06-29 16:46:54 ----A---- C:\Windows\SWREG.exe
2014-06-29 16:46:54 ----A---- C:\Windows\sed.exe
2014-06-29 16:46:54 ----A---- C:\Windows\PEV.exe
2014-06-29 16:46:54 ----A---- C:\Windows\NIRCMD.exe
2014-06-29 16:46:54 ----A---- C:\Windows\MBR.exe
2014-06-29 16:46:54 ----A---- C:\Windows\grep.exe
2014-06-29 16:46:50 ----D---- C:\Qoobox
2014-06-29 16:46:42 ----D---- C:\Windows\erdnt
2014-06-29 16:20:34 ----D---- C:\Config.Msi
2014-06-29 15:48:18 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-06-29 15:44:41 ----D---- C:\Program Files (x86)\Adobe
2014-06-29 15:36:46 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2014-06-29 15:36:43 ----D---- C:\Users\hugo\AppData\Roaming\DAEMON Tools Lite
2014-06-29 15:36:41 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-06-29 15:35:59 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-06-29 15:02:49 ----D---- C:\Users\hugo\AppData\Roaming\Macromedia
2014-06-29 15:02:47 ----D---- C:\ProgramData\Adobe
2014-06-29 15:02:44 ----D---- C:\Users\hugo\AppData\Roaming\Adobe
2014-06-29 14:59:25 ----D---- C:\Program Files (x86)\QIP
2014-06-29 14:51:18 ----D---- C:\Users\hugo\AppData\Roaming\AVAST Software
2014-06-29 14:45:28 ----A---- C:\Windows\avastSS.scr
2014-06-29 14:45:18 ----D---- C:\Program Files\AVAST Software
2014-06-29 14:43:57 ----D---- C:\ProgramData\AVAST Software
2014-06-29 14:37:55 ----D---- C:\Windows\Panther
2014-06-29 14:10:41 ----D---- C:\Program Files (x86)\Google
2014-06-29 14:07:03 ----D---- C:\Users\hugo\AppData\Roaming\ATI
2014-06-29 14:07:03 ----D---- C:\ProgramData\ATI
2014-06-29 14:02:57 ----D---- C:\Program Files\Common Files\ATI Technologies
2014-06-29 14:02:52 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2014-06-29 14:02:46 ----A---- C:\Windows\SYSWOW64\atipblag.dat
2014-06-29 14:02:46 ----A---- C:\Windows\system32\coinst.dll
2014-06-29 14:02:46 ----A---- C:\Windows\system32\atipblag.dat
2014-06-29 14:02:46 ----A---- C:\Windows\system32\ATIDEMGX.dll
2014-06-29 14:02:21 ----D---- C:\Program Files (x86)\ATI Technologies
2014-06-29 14:02:05 ----D---- C:\Program Files\ATI
2014-06-29 14:01:08 ----D---- C:\Program Files\ATI Technologies
2014-06-29 13:57:31 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2014-06-29 13:57:31 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2014-06-29 13:57:29 ----A---- C:\Windows\SYSWOW64\log.txt
2014-06-29 13:57:13 ----D---- C:\Users\hugo\AppData\Roaming\InstallShield
2014-06-29 13:56:40 ----D---- C:\Program Files (x86)\Etron Technology
2014-06-29 13:56:24 ----SHD---- C:\Windows\Installer
2014-06-29 13:53:33 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2014-06-29 13:53:32 ----A---- C:\Windows\system32\RTNUninst64.dll
2014-06-29 13:53:32 ----A---- C:\Windows\system32\RtNicProp64.dll
2014-06-29 13:52:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-06-29 13:52:52 ----D---- C:\Program Files\Realtek
2014-06-29 13:52:44 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSHP64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkApi64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RTCOM64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEED64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RCoInst64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-06-29 13:52:41 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBWrp64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBppld64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBPPCn64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBAPO64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-06-29 13:52:39 ----A---- C:\Windows\system32\FMAPO64.dll
2014-06-29 13:52:37 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-06-29 13:52:37 ----D---- C:\Program Files (x86)\Realtek
2014-06-29 13:52:37 ----A---- C:\Windows\system32\AERTAR64.dll
2014-06-29 13:52:37 ----A---- C:\Windows\system32\AERTAC64.dll
2014-06-29 13:52:32 ----HD---- C:\Program Files (x86)\Temp
2014-06-29 13:52:31 ----RA---- C:\Windows\RtlExUpd.dll
2014-06-29 13:51:53 ----RA---- C:\Windows\SYSWOW64\CSVer.dll
2014-06-29 13:51:53 ----D---- C:\Program Files (x86)\Intel
2014-06-29 13:51:41 ----D---- C:\Intel
2014-06-29 13:51:06 ----A---- C:\Windows\GSetup.ini
2014-06-29 13:47:51 ----D---- C:\Users\hugo\AppData\Roaming\Identities
2014-06-29 13:47:42 ----SD---- C:\Users\hugo\AppData\Roaming\Microsoft
2014-06-29 13:47:42 ----D---- C:\Users\hugo\AppData\Roaming\Media Center Programs
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Šablony
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Plocha
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Oblíbené položky
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Nabídka Start
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Dokumenty
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Data aplikací
2014-06-29 13:46:48 ----D---- C:\Windows\SoftwareDistribution
2014-06-29 13:39:12 ----D---- C:\Windows\Prefetch
2014-06-29 13:38:42 ----ASH---- C:\pagefile.sys
2014-06-29 13:38:41 ----SHD---- C:\System Volume Information
2014-06-29 13:38:41 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2014-07-01 20:36:04 ----D---- C:\Windows\System32
2014-07-01 20:36:04 ----D---- C:\Windows\inf
2014-07-01 20:36:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-01 20:25:43 ----D---- C:\Windows\system32\config
2014-07-01 20:08:02 ----D---- C:\Windows\rescache
2014-07-01 19:56:54 ----D---- C:\Windows\Microsoft.NET
2014-07-01 19:56:53 ----RSD---- C:\Windows\assembly
2014-07-01 19:34:17 ----D---- C:\Windows\winsxs
2014-07-01 19:33:53 ----D---- C:\Windows\SysWOW64
2014-07-01 19:33:41 ----D---- C:\Program Files (x86)\Common Files
2014-07-01 19:33:39 ----RSD---- C:\Windows\Fonts
2014-07-01 19:33:37 ----SD---- C:\ProgramData\Microsoft
2014-07-01 19:33:37 ----D---- C:\Windows
2014-07-01 19:33:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-07-01 19:32:19 ----RD---- C:\Program Files
2014-07-01 19:32:02 ----D---- C:\Windows\ShellNew
2014-07-01 19:31:24 ----RD---- C:\Program Files (x86)
2014-07-01 19:31:24 ----D---- C:\ProgramData
2014-07-01 19:01:09 ----D---- C:\Program Files\Windows Media Player
2014-07-01 19:01:09 ----D---- C:\Program Files (x86)\Windows Media Player
2014-07-01 19:01:08 ----D---- C:\Windows\SYSWOW64\wbem
2014-07-01 19:01:08 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-01 19:01:08 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-07-01 19:01:08 ----D---- C:\Windows\system32\wbem
2014-07-01 19:01:08 ----D---- C:\Windows\system32\en-US
2014-07-01 19:01:08 ----D---- C:\Windows\system32\DriverStore
2014-07-01 19:01:08 ----D---- C:\Windows\system32\drivers\en-US
2014-07-01 19:01:08 ----D---- C:\Windows\system32\drivers
2014-07-01 19:01:08 ----D---- C:\Windows\system32\cs-CZ
2014-07-01 19:01:08 ----D---- C:\Windows\PolicyDefinitions
2014-07-01 19:00:04 ----D---- C:\Windows\debug
2014-07-01 18:59:55 ----D---- C:\Windows\system32\catroot
2014-07-01 18:54:51 ----D---- C:\Windows\system32\catroot2
2014-07-01 18:17:45 ----D---- C:\Program Files\Common Files\System
2014-07-01 18:17:44 ----D---- C:\Windows\ehome
2014-07-01 18:17:44 ----D---- C:\Windows\AppPatch
2014-06-30 07:27:23 ----D---- C:\Program Files\Windows Defender
2014-06-30 07:27:23 ----D---- C:\Program Files (x86)\Windows Defender
2014-06-30 07:27:21 ----D---- C:\Windows\SYSWOW64\migration
2014-06-30 07:27:21 ----D---- C:\Windows\system32\migration
2014-06-30 06:30:21 ----D---- C:\Windows\system32\wdi
2014-06-29 23:47:54 ----D---- C:\Program Files\Internet Explorer
2014-06-29 23:47:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\it-IT
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\es-ES
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\el-GR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\de-DE
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\da-DK
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-TW
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-HK
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-CN
2014-06-29 23:47:52 ----D---- C:\Windows\system32\tr-TR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\sv-SE
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ru-RU
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pt-PT
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pt-BR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pl-PL
2014-06-29 23:47:52 ----D---- C:\Windows\system32\nl-NL
2014-06-29 23:47:52 ----D---- C:\Windows\system32\nb-NO
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ko-KR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ja-JP
2014-06-29 23:47:52 ----D---- C:\Windows\system32\it-IT
2014-06-29 23:47:52 ----D---- C:\Windows\system32\hu-HU
2014-06-29 23:47:52 ----D---- C:\Windows\system32\fr-FR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\fi-FI
2014-06-29 23:47:52 ----D---- C:\Windows\system32\es-ES
2014-06-29 23:47:52 ----D---- C:\Windows\system32\el-GR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\de-DE
2014-06-29 23:47:51 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-06-29 23:47:51 ----D---- C:\Windows\system32\da-DK
2014-06-29 23:47:41 ----D---- C:\Windows\system32\Boot
2014-06-29 23:47:39 ----D---- C:\Program Files\Windows Journal
2014-06-29 23:11:49 ----RSD---- C:\Windows\Media
2014-06-29 23:11:49 ----D---- C:\Windows\Tasks
2014-06-29 23:11:49 ----D---- C:\Windows\system32\wfp
2014-06-29 23:11:49 ----D---- C:\Windows\L2Schemas
2014-06-29 23:11:49 ----D---- C:\Program Files\Windows Mail
2014-06-29 23:11:49 ----D---- C:\Program Files (x86)\Windows Mail
2014-06-29 23:11:45 ----D---- C:\Windows\system32\CodeIntegrity
2014-06-29 23:11:27 ----D---- C:\Windows\registration
2014-06-29 23:10:21 ----D---- C:\Windows\system32\LogFiles
2014-06-29 22:51:26 ----D---- C:\Windows\Logs
2014-06-29 17:07:37 ----A---- C:\Windows\system.ini
2014-06-29 17:03:51 ----D---- C:\Windows\SYSWOW64\drivers
2014-06-29 16:29:25 ----D---- C:\Windows\system32\Tasks
2014-06-29 16:13:52 ----D---- C:\Program Files\Common Files
2014-06-29 13:53:22 ----D---- C:\Windows\system32\restore
2014-06-29 13:47:42 ----RD---- C:\Users
2014-06-29 13:47:39 ----D---- C:\Windows\system32\Recovery
2014-06-29 13:47:39 ----D---- C:\Program Files\Windows NT
2014-06-29 13:41:10 ----D---- C:\Windows\system32\sysprep
2014-06-29 13:40:26 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-06-29 283064]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-13 9085952]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-13 299008]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-01-26 39808]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-01-26 64256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-04 2697448]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-24 412264]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-13 203776]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-29 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-29 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-29 111616]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-29 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 20:58
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 21:26
od peckos
Logfile of random's system information tool 1.10 (written by random/random)
Run by hugo at 2014-07-01 22:25:15
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 110 GB (74%) free of 150 GB
Total RAM: 8175 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:25:19, on 1.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\hugo.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5621 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f56a97e4-6feb-4ba3-bfb9-51dd565fdacd -SystemEventPortName:HostProcess-40e1be8c-dfb4-4c40-8961-9f27159286ce -IoCancelEventPortName:HostProcess-5b3a8624-9734-4b94-903a-f3f2aa5e5fb0 -NonStateChangingEventPortName:HostProcess-9e42c5d2-1012-493e-88da-ef40f93535e0 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ac7800b1-e080-4ccf-8260-d8cbd917bf5b -DeviceGroupId:WpdFsGroup
"taskhost.exe"
taskeng.exe {744F4B2F-2A2D-489E-9625-0FF6A1968864}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\07012014_220728.log
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3160.0.815089119\2113291646" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,15 --disable-accelerated-video-decode --gpu-vendor-id=0x1002 --gpu-device-id=0x68bf --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.820.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group1 pct:10a stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_53/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-accelerated-video-decode --enable-software-compositing --channel="3160.3.1018845743\850061598" /prefetch:673131151
"C:\Users\hugo\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-04 11772520]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-12 336384]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-07-01 22:07:28 ----D---- C:\_OTM
2014-07-01 21:53:27 ----D---- C:\Program Files\Adobe
2014-07-01 21:52:08 ----D---- C:\Program Files\Common Files\Adobe
2014-07-01 21:51:33 ----D---- C:\Program Files (x86)\Adobe Media Player
2014-07-01 21:50:35 ----D---- C:\Windows\SYSWOW64\Macromed
2014-07-01 19:33:37 ----D---- C:\Windows\PCHEALTH
2014-07-01 19:32:19 ----D---- C:\Program Files\Microsoft Office
2014-07-01 19:31:24 ----D---- C:\ProgramData\Microsoft Help
2014-07-01 19:31:24 ----D---- C:\Program Files (x86)\Microsoft Office
2014-07-01 19:30:59 ----RHD---- C:\MSOCache
2014-07-01 19:28:44 ----A---- C:\Users\hugo\AppData\Roaming\All CPU MeterV3_Settings.ini
2014-07-01 19:15:49 ----D---- C:\Users\hugo\AppData\Roaming\vlc
2014-07-01 19:14:12 ----D---- C:\Program Files (x86)\VideoLAN
2014-07-01 19:06:55 ----D---- C:\Users\hugo\AppData\Roaming\uTorrent
2014-07-01 19:00:05 ----D---- C:\Windows\system32\MRT
2014-07-01 19:00:02 ----A---- C:\Windows\system32\MRT.exe
2014-07-01 18:59:49 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-07-01 18:59:49 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-07-01 18:59:49 ----A---- C:\Windows\system32\wmploc.DLL
2014-07-01 18:59:48 ----A---- C:\Windows\system32\wmp.dll
2014-07-01 18:57:41 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-07-01 18:56:15 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-07-01 18:56:14 ----D---- C:\Windows\Migration
2014-07-01 18:54:47 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-07-01 18:54:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-01 18:54:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-01 18:54:45 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-07-01 18:54:44 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\wksprtPS.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\wksprt.exe
2014-07-01 18:54:44 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-07-01 18:54:44 ----A---- C:\Windows\system32\tsgqec.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\mstscax.dll
2014-07-01 18:54:44 ----A---- C:\Windows\system32\mstsc.exe
2014-07-01 18:54:44 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-07-01 18:53:56 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-01 18:53:56 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-07-01 18:53:22 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-07-01 18:53:19 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-07-01 18:53:19 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2014-07-01 18:53:19 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-07-01 18:53:18 ----A---- C:\Windows\system32\rdpudd.dll
2014-07-01 18:53:18 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-07-01 18:53:18 ----A---- C:\Windows\system32\rdpcorets.dll
2014-07-01 18:50:05 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-07-01 18:50:05 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-07-01 18:49:57 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-07-01 18:49:57 ----A---- C:\Windows\system32\qdvd.dll
2014-07-01 18:40:37 ----A---- C:\Windows\SYSWOW64\sqlite3.dll
2014-07-01 18:40:25 ----D---- C:\AdwCleaner
2014-07-01 18:40:18 ----A---- C:\Windows\explorer.exe
2014-07-01 18:40:17 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-07-01 18:40:14 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-07-01 18:40:14 ----A---- C:\Windows\system32\WMPhoto.dll
2014-07-01 18:40:09 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-01 18:40:04 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-07-01 18:40:04 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-07-01 18:40:04 ----A---- C:\Windows\system32\d3d10warp.dll
2014-07-01 18:40:04 ----A---- C:\Windows\system32\d2d1.dll
2014-07-01 18:39:24 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-07-01 18:39:24 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-07-01 18:39:24 ----A---- C:\Windows\system32\fsutil.exe
2014-07-01 18:39:24 ----A---- C:\Windows\system32\esent.dll
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-07-01 18:39:24 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-07-01 18:39:23 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-07-01 18:39:23 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-07-01 18:39:17 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-07-01 18:39:17 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-07-01 18:39:13 ----A---- C:\Windows\system32\spoolsv.exe
2014-07-01 18:39:13 ----A---- C:\Windows\splwow64.exe
2014-07-01 18:21:31 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-07-01 18:21:27 ----D---- C:\Program Files\Microsoft Security Client
2014-06-30 10:23:17 ----D---- C:\ProgramData\SecTaskMan
2014-06-30 10:23:10 ----D---- C:\Program Files (x86)\Security Task Manager
2014-06-30 06:39:05 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-06-30 06:39:05 ----A---- C:\Windows\system32\poqexec.exe
2014-06-30 06:38:57 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-06-30 06:38:57 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-06-30 06:38:56 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-06-30 06:38:56 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-06-30 06:38:40 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-06-30 06:38:39 ----A---- C:\Windows\system32\shell32.dll
2014-06-30 06:38:29 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-06-30 06:38:27 ----A---- C:\Windows\system32\wintrust.dll
2014-06-30 06:38:23 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-06-30 06:38:23 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-06-30 06:38:22 ----A---- C:\Windows\system32\sbe.dll
2014-06-30 06:38:22 ----A---- C:\Windows\system32\CPFilters.dll
2014-06-30 06:38:07 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-06-30 06:38:07 ----A---- C:\Windows\system32\quartz.dll
2014-06-30 06:38:00 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-06-30 06:37:59 ----A---- C:\Windows\system32\ntshrui.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-06-30 06:37:52 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\tquery.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-06-30 06:37:51 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-06-30 06:37:51 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssvp.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssrch.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssphtb.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\mssph.dll
2014-06-30 06:37:51 ----A---- C:\Windows\system32\msscntrs.dll
2014-06-30 06:37:40 ----A---- C:\Windows\system32\consent.exe
2014-06-30 06:37:40 ----A---- C:\Windows\system32\appinfo.dll
2014-06-30 06:37:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-06-30 06:37:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-06-30 06:37:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-06-30 06:37:27 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-06-30 06:37:26 ----A---- C:\Windows\system32\usp10.dll
2014-06-30 06:37:19 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-06-30 06:37:18 ----A---- C:\Windows\system32\webio.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-06-30 06:36:30 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\cryptsvc.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\cryptnet.dll
2014-06-30 06:36:26 ----A---- C:\Windows\system32\crypt32.dll
2014-06-30 06:36:21 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-06-30 06:36:21 ----A---- C:\Windows\system32\wer.dll
2014-06-30 06:36:18 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-06-30 06:36:18 ----A---- C:\Windows\system32\imagehlp.dll
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\netio.sys
2014-06-30 06:36:13 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-30 06:36:05 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-06-30 06:36:03 ----A---- C:\Windows\system32\tzres.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml6.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-30 06:35:54 ----A---- C:\Windows\system32\msxml3.dll
2014-06-30 06:35:31 ----A---- C:\Windows\system32\drivers\afd.sys
2014-06-30 06:35:12 ----A---- C:\Windows\system32\win32k.sys
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-06-30 06:34:58 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-06-30 06:34:57 ----A---- C:\Windows\system32\credui.dll
2014-06-30 06:34:57 ----A---- C:\Windows\system32\authui.dll
2014-06-30 06:34:52 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-06-30 06:34:39 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\lpk.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\fontsub.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\dciman32.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\atmlib.dll
2014-06-30 06:34:38 ----A---- C:\Windows\system32\atmfd.dll
2014-06-30 06:34:23 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-06-30 06:34:23 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-06-30 06:34:23 ----A---- C:\Windows\system32\mfc42u.dll
2014-06-30 06:34:22 ----A---- C:\Windows\system32\mfc42.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-06-30 06:34:07 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc_isv.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\secproc.dll
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-06-30 06:34:07 ----A---- C:\Windows\system32\RMActivate.exe
2014-06-30 06:34:06 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-06-30 06:34:06 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-30 06:34:06 ----A---- C:\Windows\system32\msdrm.dll
2014-06-30 06:33:53 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-06-30 06:33:53 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-06-30 06:33:32 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-06-30 06:33:32 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-06-30 06:33:24 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdpwsx.dll
2014-06-30 06:33:18 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-06-30 06:33:14 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-06-30 06:33:08 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-06-30 06:33:07 ----A---- C:\Windows\system32\rpcrt4.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-06-30 06:32:36 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\nlasvc.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\nlaapi.dll
2014-06-30 06:32:30 ----A---- C:\Windows\system32\ncsi.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\netevent.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\netcorehc.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-06-30 06:32:29 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-06-30 06:32:17 ----A---- C:\Windows\system32\profsvc.dll
2014-06-30 06:32:08 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-06-30 06:32:08 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-06-30 06:32:06 ----A---- C:\Windows\system32\dnsapi.dll
2014-06-29 23:47:51 ----D---- C:\Windows\SYSWOW64\Wat
2014-06-29 23:47:51 ----D---- C:\Windows\system32\Wat
2014-06-29 23:47:40 ----SD---- C:\Windows\system32\CompatTel
2014-06-29 22:51:26 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-06-29 22:47:14 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\url.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-06-29 22:47:12 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\wininet.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\wextract.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\webcheck.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\vbscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\urlmon.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\url.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\pngfilt.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\occache.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msrating.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msls31.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmler.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshtml.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\mshta.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeedssync.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\licmgr10.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jsIntl.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript9diag.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript9.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\jscript.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\inseng.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\imgutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iexpress.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieui.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iesysprep.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iesetup.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iertutil.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iernonce.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iepeers.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieframe.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\iedkcs32.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ieapfltr.dat
2014-06-29 22:47:12 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-29 22:47:12 ----A---- C:\Windows\system32\icardie.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\elshyph.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-29 22:47:12 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-06-29 22:42:27 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-06-29 22:42:27 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\XpsPrint.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\UIAnimation.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\FntCache.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\dxgi.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\DWrite.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10level9.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10_1.dll
2014-06-29 22:42:27 ----A---- C:\Windows\system32\d3d10.dll
2014-06-29 22:41:23 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-06-29 22:41:23 ----A---- C:\Windows\system32\d3d11.dll
2014-06-29 22:33:20 ----A---- C:\Windows\system32\Wdfres.dll
2014-06-29 22:33:20 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-06-29 22:29:12 ----A---- C:\Windows\system32\browserchoice.exe
2014-06-29 22:25:32 ----D---- C:\Program Files (x86)\FinalWire
2014-06-29 22:23:30 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-06-29 22:23:30 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-06-29 22:23:30 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-06-29 22:23:30 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFx.dll
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFHost.exe
2014-06-29 22:23:29 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-06-29 22:20:26 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-06-29 22:20:26 ----A---- C:\Windows\system32\wmi.dll
2014-06-29 22:20:26 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-06-29 20:01:30 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-06-29 20:01:30 ----A---- C:\Windows\system32\xmllite.dll
2014-06-29 20:01:22 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-06-29 20:01:22 ----A---- C:\Windows\system32\msieftp.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbctrac.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbccu32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbccr32.dll
2014-06-29 20:01:19 ----A---- C:\Windows\system32\odbccp32.dll
2014-06-29 20:01:15 ----A---- C:\Windows\system32\wwansvc.dll
2014-06-29 20:01:15 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-06-29 20:01:10 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-06-29 20:01:10 ----A---- C:\Windows\system32\comctl32.dll
2014-06-29 19:57:24 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-06-29 19:57:24 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-06-29 19:57:07 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-06-29 19:52:29 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-06-29 19:52:18 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-06-29 19:52:18 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-06-29 19:51:59 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\system32\WebClnt.dll
2014-06-29 19:51:59 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-06-29 19:51:59 ----A---- C:\Windows\system32\davclnt.dll
2014-06-29 19:51:55 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-06-29 19:51:55 ----A---- C:\Windows\system32\dpnet.dll
2014-06-29 19:51:50 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-06-29 19:51:49 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\winlogon.exe
2014-06-29 19:51:49 ----A---- C:\Windows\system32\wdigest.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\TSpkg.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\schannel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\objsel.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\ncrypt.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\msv1_0.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\lsasrv.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\kerberos.dll
2014-06-29 19:51:49 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-29 19:51:49 ----A---- C:\Windows\system32\drivers\cng.sys
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-06-29 19:51:48 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\wincredprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\sspicli.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\smss.exe
2014-06-29 19:51:48 ----A---- C:\Windows\system32\secur32.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\lsass.exe
2014-06-29 19:51:48 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-29 19:51:48 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\dimsroam.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\csrsrv.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\credssp.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\cngprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\capiprovider.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\apisetschema.dll
2014-06-29 19:51:48 ----A---- C:\Windows\system32\adprovider.dll
2014-06-29 19:51:25 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-06-29 19:50:11 ----A---- C:\Windows\system32\drivers\srv.sys
2014-06-29 19:50:03 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-06-29 19:50:00 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-06-29 19:50:00 ----A---- C:\Windows\system32\mswsock.dll
2014-06-29 19:49:51 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-06-29 19:49:51 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-06-29 19:49:51 ----A---- C:\Windows\system32\Wpc.dll
2014-06-29 19:49:51 ----A---- C:\Windows\system32\gameux.dll
2014-06-29 19:49:35 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-06-29 19:49:35 ----A---- C:\Windows\system32\psisdecd.dll
2014-06-29 19:49:32 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-06-29 19:47:55 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\tdh.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\ntdll.dll
2014-06-29 19:47:55 ----A---- C:\Windows\system32\advapi32.dll
2014-06-29 19:47:37 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-06-29 19:47:34 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-06-29 19:47:34 ----A---- C:\Windows\system32\msi.dll
2014-06-29 19:47:09 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-06-29 19:47:09 ----A---- C:\Windows\system32\iologmsg.dll
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\storport.sys
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-06-29 19:47:09 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-06-29 19:47:04 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-06-29 19:47:04 ----A---- C:\Windows\system32\synceng.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\winresume.exe
2014-06-29 19:47:01 ----A---- C:\Windows\system32\winload.exe
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kdusb.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kdcom.dll
2014-06-29 19:47:01 ----A---- C:\Windows\system32\kd1394.dll
2014-06-29 19:46:58 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-06-29 19:46:58 ----A---- C:\Windows\system32\shdocvw.dll
2014-06-29 19:46:40 ----A---- C:\Windows\system32\aepdu.dll
2014-06-29 19:46:40 ----A---- C:\Windows\system32\aeinv.dll
2014-06-29 19:46:06 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-06-29 19:46:06 ----A---- C:\Windows\system32\win32spl.dll
2014-06-29 19:46:01 ----A---- C:\Windows\system32\gdi32.dll
2014-06-29 19:46:00 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-06-29 19:45:57 ----A---- C:\Windows\system32\taskhost.exe
2014-06-29 19:45:54 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-06-29 19:45:54 ----A---- C:\Windows\system32\qedit.dll
2014-06-29 19:45:33 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-06-29 19:45:33 ----A---- C:\Windows\system32\cryptdlg.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-06-29 19:45:27 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-06-29 19:45:27 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-06-29 19:45:14 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-29 19:45:14 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-29 19:45:11 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-06-29 19:45:11 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\netapi32.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\browser.dll
2014-06-29 19:45:11 ----A---- C:\Windows\system32\browcli.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-06-29 19:45:08 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64win.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64cpu.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\wow64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\winsrv.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\ntvdm64.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\kernel32.dll
2014-06-29 19:45:08 ----A---- C:\Windows\system32\conhost.exe
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-06-29 19:45:07 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-06-29 19:45:07 ----A---- C:\Windows\SYSWOW64\user.exe
2014-06-29 19:44:59 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-06-29 19:44:59 ----A---- C:\Windows\system32\prevhost.exe
2014-06-29 19:44:56 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-06-29 19:44:53 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-06-29 19:44:53 ----A---- C:\Windows\system32\srcore.dll
2014-06-29 19:44:50 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-06-29 19:44:46 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-06-29 19:44:46 ----A---- C:\Windows\system32\inetcomm.dll
2014-06-29 19:44:43 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-06-29 19:44:43 ----A---- C:\Windows\system32\msvcrt.dll
2014-06-29 19:44:39 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-06-29 19:44:33 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-06-29 19:44:33 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-06-29 19:44:33 ----A---- C:\Windows\system32\certutil.exe
2014-06-29 19:44:33 ----A---- C:\Windows\system32\certenc.dll
2014-06-29 19:44:22 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-06-29 19:44:22 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-06-29 19:44:22 ----A---- C:\Windows\system32\wscript.exe
2014-06-29 19:44:22 ----A---- C:\Windows\system32\scrrun.dll
2014-06-29 19:44:22 ----A---- C:\Windows\system32\cscript.exe
2014-06-29 19:44:21 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-06-29 19:44:13 ----A---- C:\Windows\system32\localspl.dll
2014-06-29 19:44:10 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-06-29 19:44:06 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-06-29 19:44:06 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-06-29 19:44:06 ----A---- C:\Windows\system32\oleaut32.dll
2014-06-29 19:44:06 ----A---- C:\Windows\system32\oleacc.dll
2014-06-29 19:44:03 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-06-29 19:44:03 ----A---- C:\Windows\system32\EncDec.dll
2014-06-29 19:43:59 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-06-29 19:43:59 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-06-29 19:43:59 ----A---- C:\Windows\system32\cdd.dll
2014-06-29 19:43:06 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-06-29 19:43:06 ----A---- C:\Windows\system32\cdosys.dll
2014-06-29 19:42:51 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-06-29 19:42:51 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-06-29 19:42:51 ----A---- C:\Windows\system32\nshwfp.dll
2014-06-29 19:42:51 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-06-29 19:42:51 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-06-29 19:42:49 ----A---- C:\Windows\system32\scavengeui.dll
2014-06-29 19:37:19 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-06-29 19:37:19 ----A---- C:\Windows\system32\packager.dll
2014-06-29 19:00:38 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-06-29 19:00:38 ----A---- C:\Windows\system32\rdpcore.dll
2014-06-29 19:00:38 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-06-29 18:56:49 ----A---- C:\Windows\system32\wups2.dll
2014-06-29 18:56:49 ----A---- C:\Windows\system32\wuauclt.exe
2014-06-29 18:56:48 ----A---- C:\Windows\system32\wucltux.dll
2014-06-29 18:56:48 ----A---- C:\Windows\system32\wuaueng.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wups.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wudriver.dll
2014-06-29 18:56:45 ----A---- C:\Windows\system32\wuapi.dll
2014-06-29 18:56:40 ----A---- C:\Windows\system32\wuwebv.dll
2014-06-29 18:56:40 ----A---- C:\Windows\system32\wuapp.exe
2014-06-29 17:16:31 ----D---- C:\rsit
2014-06-29 17:16:31 ----D---- C:\Program Files\trend micro
2014-06-29 17:12:02 ----SHD---- C:\$RECYCLE.BIN
2014-06-29 17:11:47 ----A---- C:\ComboFix.txt
2014-06-29 17:06:05 ----D---- C:\Windows\temp
2014-06-29 16:46:54 ----A---- C:\Windows\zip.exe
2014-06-29 16:46:54 ----A---- C:\Windows\SWSC.exe
2014-06-29 16:46:54 ----A---- C:\Windows\SWREG.exe
2014-06-29 16:46:54 ----A---- C:\Windows\sed.exe
2014-06-29 16:46:54 ----A---- C:\Windows\PEV.exe
2014-06-29 16:46:54 ----A---- C:\Windows\NIRCMD.exe
2014-06-29 16:46:54 ----A---- C:\Windows\MBR.exe
2014-06-29 16:46:54 ----A---- C:\Windows\grep.exe
2014-06-29 16:46:50 ----D---- C:\Qoobox
2014-06-29 16:46:42 ----D---- C:\Windows\erdnt
2014-06-29 16:20:34 ----D---- C:\Config.Msi
2014-06-29 15:48:18 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-06-29 15:44:41 ----D---- C:\Program Files (x86)\Adobe
2014-06-29 15:36:46 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2014-06-29 15:36:43 ----D---- C:\Users\hugo\AppData\Roaming\DAEMON Tools Lite
2014-06-29 15:36:41 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2014-06-29 15:35:59 ----D---- C:\ProgramData\DAEMON Tools Lite
2014-06-29 15:02:49 ----D---- C:\Users\hugo\AppData\Roaming\Macromedia
2014-06-29 15:02:47 ----D---- C:\ProgramData\Adobe
2014-06-29 15:02:44 ----D---- C:\Users\hugo\AppData\Roaming\Adobe
2014-06-29 14:59:25 ----D---- C:\Program Files (x86)\QIP
2014-06-29 14:51:18 ----D---- C:\Users\hugo\AppData\Roaming\AVAST Software
2014-06-29 14:45:28 ----A---- C:\Windows\avastSS.scr
2014-06-29 14:45:18 ----D---- C:\Program Files\AVAST Software
2014-06-29 14:43:57 ----D---- C:\ProgramData\AVAST Software
2014-06-29 14:37:55 ----D---- C:\Windows\Panther
2014-06-29 14:10:41 ----D---- C:\Program Files (x86)\Google
2014-06-29 14:07:03 ----D---- C:\Users\hugo\AppData\Roaming\ATI
2014-06-29 14:07:03 ----D---- C:\ProgramData\ATI
2014-06-29 14:02:57 ----D---- C:\Program Files\Common Files\ATI Technologies
2014-06-29 14:02:52 ----A---- C:\Windows\system32\drivers\AtihdW76.sys
2014-06-29 14:02:46 ----A---- C:\Windows\SYSWOW64\atipblag.dat
2014-06-29 14:02:46 ----A---- C:\Windows\system32\coinst.dll
2014-06-29 14:02:46 ----A---- C:\Windows\system32\atipblag.dat
2014-06-29 14:02:46 ----A---- C:\Windows\system32\ATIDEMGX.dll
2014-06-29 14:02:21 ----D---- C:\Program Files (x86)\ATI Technologies
2014-06-29 14:02:05 ----D---- C:\Program Files\ATI
2014-06-29 14:01:08 ----D---- C:\Program Files\ATI Technologies
2014-06-29 13:57:31 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2014-06-29 13:57:31 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2014-06-29 13:57:29 ----A---- C:\Windows\SYSWOW64\log.txt
2014-06-29 13:57:13 ----D---- C:\Users\hugo\AppData\Roaming\InstallShield
2014-06-29 13:56:40 ----D---- C:\Program Files (x86)\Etron Technology
2014-06-29 13:56:24 ----SHD---- C:\Windows\Installer
2014-06-29 13:53:33 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2014-06-29 13:53:32 ----A---- C:\Windows\system32\RTNUninst64.dll
2014-06-29 13:53:32 ----A---- C:\Windows\system32\RtNicProp64.dll
2014-06-29 13:52:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-06-29 13:52:52 ----D---- C:\Program Files\Realtek
2014-06-29 13:52:44 ----A---- C:\Windows\system32\WavesGUILib.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\SRSHP64.dll
2014-06-29 13:52:44 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkAPO64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RtkApi64.dll
2014-06-29 13:52:43 ----A---- C:\Windows\system32\RTCOM64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RTEED64A.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\RCoInst64.dll
2014-06-29 13:52:42 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-06-29 13:52:41 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBWrp64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBppld64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBPPCn64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MBAPO64.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2014-06-29 13:52:41 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-06-29 13:52:39 ----A---- C:\Windows\system32\FMAPO64.dll
2014-06-29 13:52:37 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-06-29 13:52:37 ----D---- C:\Program Files (x86)\Realtek
2014-06-29 13:52:37 ----A---- C:\Windows\system32\AERTAR64.dll
2014-06-29 13:52:37 ----A---- C:\Windows\system32\AERTAC64.dll
2014-06-29 13:52:32 ----HD---- C:\Program Files (x86)\Temp
2014-06-29 13:52:31 ----RA---- C:\Windows\RtlExUpd.dll
2014-06-29 13:51:53 ----RA---- C:\Windows\SYSWOW64\CSVer.dll
2014-06-29 13:51:53 ----D---- C:\Program Files (x86)\Intel
2014-06-29 13:51:41 ----D---- C:\Intel
2014-06-29 13:51:06 ----A---- C:\Windows\GSetup.ini
2014-06-29 13:47:51 ----D---- C:\Users\hugo\AppData\Roaming\Identities
2014-06-29 13:47:42 ----SD---- C:\Users\hugo\AppData\Roaming\Microsoft
2014-06-29 13:47:42 ----D---- C:\Users\hugo\AppData\Roaming\Media Center Programs
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Šablony
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Plocha
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Oblíbené položky
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Nabídka Start
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Dokumenty
2014-06-29 13:47:39 ----SHD---- C:\ProgramData\Data aplikací
2014-06-29 13:46:48 ----D---- C:\Windows\SoftwareDistribution
2014-06-29 13:39:12 ----D---- C:\Windows\Prefetch
2014-06-29 13:38:42 ----ASH---- C:\pagefile.sys
2014-06-29 13:38:41 ----SHD---- C:\System Volume Information
2014-06-29 13:38:41 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2014-07-01 22:07:28 ----D---- C:\Windows\Tasks
2014-07-01 21:59:40 ----D---- C:\Windows\system32\config
2014-07-01 21:53:27 ----RD---- C:\Program Files
2014-07-01 21:52:49 ----RSD---- C:\Windows\Fonts
2014-07-01 21:52:08 ----D---- C:\Program Files\Common Files
2014-07-01 21:51:33 ----RD---- C:\Program Files (x86)
2014-07-01 21:50:35 ----D---- C:\Windows\SysWOW64
2014-07-01 21:50:16 ----D---- C:\Program Files (x86)\Common Files
2014-07-01 21:49:32 ----D---- C:\Windows\winsxs
2014-07-01 20:36:04 ----D---- C:\Windows\System32
2014-07-01 20:36:04 ----D---- C:\Windows\inf
2014-07-01 20:36:04 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-01 20:08:02 ----D---- C:\Windows\rescache
2014-07-01 19:56:54 ----D---- C:\Windows\Microsoft.NET
2014-07-01 19:56:53 ----RSD---- C:\Windows\assembly
2014-07-01 19:33:37 ----SD---- C:\ProgramData\Microsoft
2014-07-01 19:33:37 ----D---- C:\Windows
2014-07-01 19:33:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-07-01 19:32:02 ----D---- C:\Windows\ShellNew
2014-07-01 19:31:24 ----D---- C:\ProgramData
2014-07-01 19:01:09 ----D---- C:\Program Files\Windows Media Player
2014-07-01 19:01:09 ----D---- C:\Program Files (x86)\Windows Media Player
2014-07-01 19:01:08 ----D---- C:\Windows\SYSWOW64\wbem
2014-07-01 19:01:08 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-01 19:01:08 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-07-01 19:01:08 ----D---- C:\Windows\system32\wbem
2014-07-01 19:01:08 ----D---- C:\Windows\system32\en-US
2014-07-01 19:01:08 ----D---- C:\Windows\system32\DriverStore
2014-07-01 19:01:08 ----D---- C:\Windows\system32\drivers\en-US
2014-07-01 19:01:08 ----D---- C:\Windows\system32\drivers
2014-07-01 19:01:08 ----D---- C:\Windows\system32\cs-CZ
2014-07-01 19:01:08 ----D---- C:\Windows\PolicyDefinitions
2014-07-01 19:00:04 ----D---- C:\Windows\debug
2014-07-01 18:59:55 ----D---- C:\Windows\system32\catroot
2014-07-01 18:54:51 ----D---- C:\Windows\system32\catroot2
2014-07-01 18:17:45 ----D---- C:\Program Files\Common Files\System
2014-07-01 18:17:44 ----D---- C:\Windows\ehome
2014-07-01 18:17:44 ----D---- C:\Windows\AppPatch
2014-06-30 07:27:23 ----D---- C:\Program Files\Windows Defender
2014-06-30 07:27:23 ----D---- C:\Program Files (x86)\Windows Defender
2014-06-30 07:27:21 ----D---- C:\Windows\SYSWOW64\migration
2014-06-30 07:27:21 ----D---- C:\Windows\system32\migration
2014-06-30 06:30:21 ----D---- C:\Windows\system32\wdi
2014-06-29 23:47:54 ----D---- C:\Program Files\Internet Explorer
2014-06-29 23:47:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\it-IT
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\es-ES
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\el-GR
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\de-DE
2014-06-29 23:47:52 ----D---- C:\Windows\SYSWOW64\da-DK
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-TW
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-HK
2014-06-29 23:47:52 ----D---- C:\Windows\system32\zh-CN
2014-06-29 23:47:52 ----D---- C:\Windows\system32\tr-TR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\sv-SE
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ru-RU
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pt-PT
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pt-BR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\pl-PL
2014-06-29 23:47:52 ----D---- C:\Windows\system32\nl-NL
2014-06-29 23:47:52 ----D---- C:\Windows\system32\nb-NO
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ko-KR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\ja-JP
2014-06-29 23:47:52 ----D---- C:\Windows\system32\it-IT
2014-06-29 23:47:52 ----D---- C:\Windows\system32\hu-HU
2014-06-29 23:47:52 ----D---- C:\Windows\system32\fr-FR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\fi-FI
2014-06-29 23:47:52 ----D---- C:\Windows\system32\es-ES
2014-06-29 23:47:52 ----D---- C:\Windows\system32\el-GR
2014-06-29 23:47:52 ----D---- C:\Windows\system32\de-DE
2014-06-29 23:47:51 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-06-29 23:47:51 ----D---- C:\Windows\system32\da-DK
2014-06-29 23:47:41 ----D---- C:\Windows\system32\Boot
2014-06-29 23:47:39 ----D---- C:\Program Files\Windows Journal
2014-06-29 23:11:49 ----RSD---- C:\Windows\Media
2014-06-29 23:11:49 ----D---- C:\Windows\system32\wfp
2014-06-29 23:11:49 ----D---- C:\Windows\L2Schemas
2014-06-29 23:11:49 ----D---- C:\Program Files\Windows Mail
2014-06-29 23:11:49 ----D---- C:\Program Files (x86)\Windows Mail
2014-06-29 23:11:45 ----D---- C:\Windows\system32\CodeIntegrity
2014-06-29 23:11:27 ----D---- C:\Windows\registration
2014-06-29 23:10:21 ----D---- C:\Windows\system32\LogFiles
2014-06-29 22:51:26 ----D---- C:\Windows\Logs
2014-06-29 17:07:37 ----A---- C:\Windows\system.ini
2014-06-29 17:03:51 ----D---- C:\Windows\SYSWOW64\drivers
2014-06-29 16:29:25 ----D---- C:\Windows\system32\Tasks
2014-06-29 13:53:22 ----D---- C:\Windows\system32\restore
2014-06-29 13:47:42 ----RD---- C:\Users
2014-06-29 13:47:39 ----D---- C:\Windows\system32\Recovery
2014-06-29 13:47:39 ----D---- C:\Program Files\Windows NT
2014-06-29 13:41:10 ----D---- C:\Windows\system32\sysprep
2014-06-29 13:40:26 ----D---- C:\Windows\system32\drivers\UMDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-06-29 283064]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-13 9085952]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-13 299008]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-01-26 39808]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-01-26 64256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-04 2697448]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-24 412264]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-13 203776]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-29 116648]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-29 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-29 111616]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-06-29 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 21:37
od Rudy
Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 22:10
od peckos
Změna je zatím z toho co dokážu posoudit v tom že proces csrss.exe si bere míň výkonu než předtím a počítač se vypíná podstatně rychleji další změny budu schopen posoudit až po delším používání ,mockrát díky za pomoc a kdyby se problémy opakovaly tak se ozvu DÍK.Zdeněk.

Re: přeinstalování se dějou divné věci.

Napsal: 01 črc 2014 23:35
od peckos
Tak bohužel problémy trvají .počítač je zpomalený ,načítání složek v průzkumníku trvá dlouho programy zamrzají včetně obyčejného prohlížeče fotek ikony některých souború se nezobrazí vůbec a csrss.exe už zase vylezlo na 2224 i když normální hodnota je asi 1760

Re: přeinstalování se dějou divné věci.

Napsal: 02 črc 2014 17:46
od Rudy
Dejte log ComboFix:
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Re: přeinstalování se dějou divné věci.

Napsal: 02 črc 2014 20:37
od peckos
Zdravím,tak ani po aplikaci combofix se téměř nic nezměnilo,ve správci souborů u csrss.exe se po kliknutí na :otevřít umístění souboru"nestane nic a v Process Exploreru jsem tenhle proces našel dvakrát jednou je u něj toto:
cs csrss.exe csrss.exe 448 2 216 K 4 472 K Client Server Runtime Process Microsoft Corporation
conhost.exe conhost.exe 2536 1 152 K 3 052 K Console Window Host Microsoft Corporation

a podruhé :csrss.exe csrss.exe 544 3 628 K 8 304 K Client Server Runtime Process Microsoft Corporation a jak jsem si našel na netu tak to může být rootkit jenže když jsem zkusil použít Rootkit Revealer stažený od microsoftu tak se ani nespustí ,tady přikládám log z combofixu

ComboFix 14-06-30.01 - hugo 02.07.2014 21:22:29.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8175.6538 [GMT 2:00]
Spuštěný z: c:\users\hugo\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-06-02 do 2014-07-02 )))))))))))))))))))))))))))))))
.
.
2014-07-02 19:24 . 2014-07-02 19:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-07-02 19:24 . 2014-07-02 19:24 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2014-07-02 19:02 . 2014-06-05 01:54 10779000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{07087567-DF64-4D3E-96A4-88CD614704DA}\mpengine.dll
2014-07-02 08:48 . 2014-07-02 08:49 -------- d-----w- c:\program files\Adobe
2014-07-02 08:45 . 2014-07-02 08:45 -------- d-----w- c:\windows\SysWow64\Macromed
2014-07-02 08:44 . 2014-07-02 08:49 -------- d-----w- c:\program files\Common Files\Adobe
2014-07-01 17:33 . 2014-07-01 17:33 -------- d-----w- c:\windows\PCHEALTH
2014-07-01 17:32 . 2014-07-01 17:32 -------- d-----w- c:\program files\Microsoft Office
2014-07-01 17:31 . 2014-07-01 17:34 -------- d-----w- c:\programdata\Microsoft Help
2014-07-01 17:30 . 2014-07-01 17:30 -------- d-----r- C:\MSOCache
2014-07-01 17:14 . 2014-07-01 17:14 -------- d-----w- c:\program files (x86)\VideoLAN
2014-07-01 17:00 . 2014-07-01 17:00 -------- d-----w- c:\windows\system32\MRT
2014-07-01 16:59 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-07-01 16:59 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-07-01 16:59 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-07-01 16:59 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-07-01 16:59 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-07-01 16:56 . 2014-07-01 17:33 -------- d-----w- c:\program files (x86)\Microsoft.NET
2014-07-01 16:56 . 2014-07-01 16:56 -------- d-----w- c:\windows\Migration
2014-07-01 16:53 . 2014-07-01 16:53 -------- d-----w- c:\program files\Microsoft Silverlight
2014-07-01 16:53 . 2014-07-01 16:53 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2014-07-01 16:53 . 2012-08-23 13:24 15360 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-01 16:53 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2014-07-01 16:53 . 2012-08-23 14:08 30208 ----a-w- c:\windows\system32\drivers\TsUsbGD.sys
2014-07-01 16:53 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2014-07-01 16:53 . 2012-08-23 14:13 243200 ----a-w- c:\windows\system32\rdpudd.dll
2014-07-01 16:53 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2014-07-01 16:53 . 2012-08-23 09:51 3174912 ----a-w- c:\windows\system32\rdpcorets.dll
2014-07-01 16:50 . 2013-09-25 02:23 1030144 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-07-01 16:50 . 2013-09-25 01:57 792576 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-07-01 16:49 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll
2014-07-01 16:49 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-07-01 16:40 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-07-01 16:40 . 2014-07-01 16:42 -------- d-----w- C:\AdwCleaner
2014-07-01 16:40 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
2014-07-01 16:40 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
2014-07-01 16:40 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2014-07-01 16:40 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2014-07-01 16:40 . 2014-05-30 09:11 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-07-01 16:40 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-07-01 16:40 . 2013-12-24 22:48 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-07-01 16:40 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-07-01 16:40 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-07-01 16:32 . 2014-07-01 16:32 1031560 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{296A7B46-51BB-4796-9313-9EC802B518FD}\gapaengine.dll
2014-07-01 16:21 . 2014-07-01 16:21 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-07-01 16:21 . 2014-07-01 16:21 -------- d-----w- c:\program files\Microsoft Security Client
2014-06-30 08:23 . 2014-06-30 08:31 -------- d-----w- c:\programdata\SecTaskMan
2014-06-30 08:23 . 2014-06-30 08:23 -------- d-----w- c:\program files (x86)\Security Task Manager
2014-06-30 04:39 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2014-06-30 04:39 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2014-06-30 04:39 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2014-06-30 04:39 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2014-06-30 04:37 . 2012-01-04 10:44 509952 ----a-w- c:\windows\system32\ntshrui.dll
2014-06-30 04:36 . 2013-10-05 19:57 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll
2014-06-30 04:35 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2014-06-30 04:34 . 2013-10-04 01:58 152576 ----a-w- c:\windows\SysWow64\SmartcardCredentialProvider.dll
2014-06-30 04:33 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2014-06-30 04:33 . 2012-07-04 20:26 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2014-06-30 04:33 . 2013-07-25 09:25 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL
2014-06-30 04:33 . 2013-07-25 08:57 1620992 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2014-06-30 04:33 . 2013-02-12 04:12 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys
2014-06-30 04:33 . 2012-04-26 05:41 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2014-06-30 04:33 . 2012-04-26 05:41 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2014-06-30 04:33 . 2012-04-26 05:34 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2014-06-30 04:33 . 2013-06-25 22:55 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-06-30 04:33 . 2013-07-09 04:52 663552 ----a-w- c:\windows\SysWow64\rpcrt4.dll
2014-06-30 04:33 . 2013-07-09 05:51 1217024 ----a-w- c:\windows\system32\rpcrt4.dll
2014-06-29 21:47 . 2014-06-29 21:47 -------- d-----w- c:\windows\SysWow64\Wat
2014-06-29 21:47 . 2014-06-29 21:47 -------- d-----w- c:\windows\system32\Wat
2014-06-29 21:47 . 2014-06-29 21:47 -------- d-s---w- c:\windows\system32\CompatTel
2014-06-29 20:51 . 2013-10-14 16:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-06-29 20:42 . 2014-06-29 20:42 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-06-29 20:41 . 2014-06-29 20:41 1887232 ----a-w- c:\windows\system32\d3d11.dll
2014-06-29 20:41 . 2014-06-29 20:41 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2014-06-29 20:33 . 2012-07-26 07:40 2560 ----a-w- c:\windows\system32\drivers\cs-CZ\wdf01000.sys.mui
2014-06-29 20:33 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-06-29 20:33 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2014-06-29 20:29 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2014-06-29 20:25 . 2014-06-29 20:25 -------- d-----w- c:\program files (x86)\FinalWire
2014-06-29 20:23 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2014-06-29 20:23 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2014-06-29 20:23 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2014-06-29 20:23 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2014-06-29 20:23 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2014-06-29 20:23 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2014-06-29 20:23 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2014-06-29 20:20 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2014-06-29 20:20 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2014-06-29 20:20 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2014-06-29 20:17 . 2014-06-17 00:57 10779000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{099C3F33-3520-4FDB-9B1E-6064744BADFE}\mpengine.dll
2014-06-29 17:57 . 2013-10-04 02:16 116736 ----a-w- c:\windows\system32\drivers\drmk.sys
2014-06-29 17:57 . 2013-10-04 01:36 230400 ----a-w- c:\windows\system32\drivers\portcls.sys
2014-06-29 17:57 . 2013-08-05 02:25 155584 ----a-w- c:\windows\system32\drivers\ataport.sys
2014-06-29 17:52 . 2013-07-12 10:41 100864 ----a-w- c:\windows\system32\drivers\usbcir.sys
2014-06-29 17:52 . 2013-07-03 04:05 76800 ----a-w- c:\windows\system32\drivers\hidclass.sys
2014-06-29 17:52 . 2013-07-03 04:05 32896 ----a-w- c:\windows\system32\drivers\hidparse.sys
2014-06-29 17:50 . 2011-04-29 03:06 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2014-06-29 17:50 . 2011-04-29 03:05 410112 ----a-w- c:\windows\system32\drivers\srv2.sys
2014-06-29 17:50 . 2011-04-29 03:05 168448 ----a-w- c:\windows\system32\drivers\srvnet.sys
2014-06-29 17:50 . 2013-06-15 04:32 39936 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2014-06-29 17:50 . 2013-09-08 02:27 327168 ----a-w- c:\windows\system32\mswsock.dll
2014-06-29 17:50 . 2013-09-08 02:03 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
2014-06-29 17:47 . 2013-08-29 02:16 1732032 ----a-w- c:\windows\system32\ntdll.dll
2014-06-29 17:46 . 2013-07-26 02:24 197120 ----a-w- c:\windows\system32\shdocvw.dll
2014-06-29 17:46 . 2014-06-08 09:13 506368 ----a-w- c:\windows\system32\aepdu.dll
2014-06-29 17:46 . 2014-06-08 09:08 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-06-29 17:46 . 2013-04-26 05:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2014-06-29 17:46 . 2013-04-26 04:55 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2014-06-29 17:46 . 2013-10-03 02:23 404480 ----a-w- c:\windows\system32\gdi32.dll
2014-06-29 17:46 . 2013-10-03 02:00 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-06-29 17:44 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2014-06-29 17:43 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-06-29 17:42 . 2013-10-12 02:30 830464 ----a-w- c:\windows\system32\nshwfp.dll
2014-06-29 17:42 . 2013-10-12 02:29 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2014-06-29 17:42 . 2013-10-12 02:29 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2014-06-29 17:42 . 2013-10-12 02:03 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2014-06-29 17:42 . 2013-10-12 02:01 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
2014-06-29 17:42 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2014-06-29 17:37 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2014-06-29 17:37 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2014-06-29 17:00 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2014-06-29 17:00 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2014-06-29 17:00 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2014-06-29 16:56 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe
2014-06-29 16:56 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-06-29 20:47 . 2014-06-29 20:47 243200 ----a-w- c:\windows\system32\webcheck.dll
2014-06-29 20:47 . 2014-06-29 20:47 208384 ----a-w- c:\windows\SysWow64\webcheck.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2014-03-04 3696912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-12 336384]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - PROCEXP141
*Deregistered* - PROCEXP141
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-29 12:13 1091912 ----a-w- c:\program files (x86)\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-01-04 11772520]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-03-11 1271072]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-07-02 21:25:49
ComboFix-quarantined-files.txt 2014-07-02 19:25
ComboFix2.txt 2014-07-02 18:31
.
Před spuštěním: Volných bajtů: 112 040 505 344
Po spuštění: Volných bajtů: 111 746 945 024
.
- - End Of File - - 6FB6A8DD7B8D908B65813AC78C9A6BDE
A36C5E4F47E84449FF07ED3517B43A31

Re: přeinstalování se dějou divné věci.

Napsal: 02 črc 2014 21:27
od Rudy
Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz