VIRY.CZ

Zdravím Vás..

prosím o kontrolu logu u HP Pavilion s Win 7 - proces inet32e.exe se spustí, jakmile je nečinnost několik vteřin a vytěžuje CPU na 100%, při pohybu myší se ukončí..
Předpokládám, že jde o nějakou havěť..

Logfile of random's system information tool 1.10 (written by random/random)
Run by Hruboňovi at 2014-08-12 18:22:57
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 34 GB (34%) free of 100 GB
Total RAM: 4063 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:23:00, on 12.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Windows\SysWOW64\WScript.exe
C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wupdt32.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Xerox Companion Suite\MFFSUM.exe
C:\Program Files (x86)\Xerox Companion Suite\MFPrintServer.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Xerox Companion Suite\MFServices.exe
C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\inet32e.exe
C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\winnetsvce.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Program Files\trend micro\Hruboňovi.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: DigitalPersona Personal Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [mncccmxlSrv] C:\Windows\system32\mncccmxl.vbe
O4 - HKLM\..\Run: [MSStp] C:\Windows\system32\msstp.vbe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [MFFSum_Pro_LL2] "C:\Program Files (x86)\Xerox Companion Suite\MFFSUM.exe"
O4 - HKLM\..\Run: [MFPrintServer_Pro_LL2] "C:\Program Files (x86)\Xerox Companion Suite\MFPrintServer.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKCU\..\Run: [BlackWay] C:\Program Files (x86)\Windows 7 Activator\Windows 7 Activator.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: wupdt32.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Prevést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Prevést cíl vazby do existujícího PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Prevést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Pridat do stávajícího PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~4\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Session Launcher Service (FUSServices) - Unknown owner - C:\Windows\SysWOW64\FUSServices.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11579 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
C:\Windows\system32\AUDIODG.EXE 0x2fc
C:\Windows\system32\svchost.exe -k GPSvcGroup
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
C:\Windows\SysWOW64\FUSServices.exe
C:\Windows\Explorer.EXE
taskeng.exe {E3D704D2-D450-4215-B5B2-40738DBCA013}
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe"
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Windows\System32\WScript.exe" "C:\Windows\System32\mncccmxl.vbe"
"C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wupdt32.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Program Files (x86)\Xerox Companion Suite\MFFSUM.exe"
"C:\Program Files (x86)\Xerox Companion Suite\MFPrintServer.exe"
"C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe"
"C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe"
-n
"LF2GRPOW.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\inet32e.exe" -a scrypt -o stratum+tcp://eu.clevermining.com:3333 -u 1J5AXyXar52mwiAWaWam481zaAjTjbci12 -p any
\??\C:\Windows\system32\conhost.exe "-17263673111454216937268915888193255356-66457659015939170674681118401856423496
"C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\winnetsvce.exe" --scrypt -o stratum+tcp://eu.clevermining.com:3333 -u 1J5AXyXar52mwiAWaWam481zaAjTjbci12 -p any -T
\??\C:\Windows\system32\conhost.exe "13143252339344871-12167352521937509016-496639961-727407066-97263952119382234
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-638237248-3080054114-1947788734-10001_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-638237248-3080054114-1947788734-10001 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
"C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"c:\program files (x86)\teamviewer\version9\TeamViewer_Desktop.exe" --IPCport 5939
"C:\Program Files\Microsoft Office\Office15\MsoSync.exe"
"C:\Users\Hruboňovi\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-05-21 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~4\Office15\URLREDIR.DLL [2014-01-23 881880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~4\Office15\GROOVEEX.DLL [2014-06-10 2335960]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-05-21 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{395610AE-C624-4f58-B89E-23733EA00F9A}]
DigitalPersona Personal Extension - C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll [2009-04-17 1256512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-05 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MIF5BA~1\Office15\URLREDIR.DLL [2014-01-22 707800]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL [2014-06-10 1730264]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-05 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-03-23 487424]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BlackWay"=C:\Program Files (x86)\Windows 7 Activator\Windows 7 Activator.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DpAgent]
C:\Program Files (x86)\DigitalPersona\Bin\dpagent.exe [2009-04-17 842816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncaepcrSrv]
C:\Windows\inf\mncaepcr.vbe [2014-01-19 1342]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-27 85160]
"mncccmxlSrv"=C:\Windows\system32\mncccmxl.vbe []
"MSStp"=C:\Windows\system32\msstp.vbe []
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2014-06-24 4101576]
"MFFSum_Pro_LL2"=C:\Program Files (x86)\Xerox Companion Suite\MFFSUM.exe [2010-02-11 24576]
"MFPrintServer_Pro_LL2"=C:\Program Files (x86)\Xerox Companion Suite\MFPrintServer.exe [2010-02-11 73728]
"Adobe Acrobat Speed Launcher"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
""= []
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
wupdt32.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

Druhá část..

======List of files/folders created in the last 1 month======

2014-08-12 18:22:57 ----D---- C:\rsit
2014-08-12 18:22:57 ----D---- C:\Program Files\trend micro
2014-08-10 11:30:32 ----D---- C:\ProgramData\FLEXnet
2014-08-10 11:29:20 ----RA---- C:\Windows\system32\AdobePDFUI.dll
2014-08-10 11:24:43 ----D---- C:\ProgramData\Adobe
2014-08-10 11:24:43 ----D---- C:\Program Files (x86)\Adobe
2014-08-07 19:55:41 ----D---- C:\Program Files (x86)\MSXML 4.0
2014-08-06 18:14:16 ----A---- C:\Windows\system32\drivers\XMLDIUSB.sys
2014-08-06 18:13:43 ----A---- C:\Windows\system32\LF2GRPOW.EXE
2014-08-06 18:13:42 ----A---- C:\Windows\system32\LF2GRPJL.DLL
2014-08-06 18:13:41 ----A---- C:\Windows\system32\LF2GRCOI.DLL
2014-08-06 18:13:34 ----A---- C:\Windows\system32\wialffv2scn.dll
2014-08-06 18:13:34 ----A---- C:\Windows\system32\lanamn.exe
2014-08-06 18:12:49 ----A---- C:\Windows\system32\FUSServices.exe
2014-08-06 18:12:18 ----D---- C:\ProgramData\Companion Suite Pro LL2
2014-08-06 18:12:06 ----A---- C:\Windows\system32\CSPLL2P.dll
2014-08-06 18:11:53 ----D---- C:\Program Files (x86)\Xerox Companion Suite
2014-08-06 18:08:25 ----A---- C:\Windows\xUninstall.bat
2014-08-06 18:06:57 ----A---- C:\Windows\system32\JmCrIcon.dll
2014-08-06 18:06:56 ----D---- C:\Windows\JMCR_DIR
2014-08-06 18:06:20 ----D---- C:\swsetup
2014-08-06 11:00:15 ----A---- C:\Windows\system32\sdnclean64.exe
2014-08-06 11:00:14 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-08-06 11:00:06 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-08-06 10:56:10 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-08-06 10:56:10 ----A---- C:\Windows\system32\mstscax.dll
2014-08-06 10:55:52 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-08-06 10:55:52 ----A---- C:\Windows\system32\d3d10warp.dll
2014-08-06 10:55:51 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-08-06 10:55:51 ----A---- C:\Windows\system32\d2d1.dll
2014-08-06 10:55:10 ----A---- C:\Windows\explorer.exe
2014-08-06 10:55:09 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-08-06 10:55:08 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-08-06 10:55:08 ----A---- C:\Windows\system32\WMPhoto.dll
2014-08-06 10:55:07 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-06 10:54:55 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-08-06 10:54:54 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-08-06 10:54:22 ----A---- C:\Windows\system32\spoolsv.exe
2014-08-06 10:54:22 ----A---- C:\Windows\splwow64.exe
2014-08-06 07:21:35 ----D---- C:\Program Files\McAfee Security Scan
2014-08-06 07:15:44 ----D---- C:\ProgramData\McAfee Security Scan
2014-08-06 07:15:42 ----D---- C:\ProgramData\McAfee
2014-08-06 07:15:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-08-06 07:15:25 ----D---- C:\Windows\SYSWOW64\Macromed
2014-08-06 07:15:20 ----D---- C:\Windows\system32\Macromed
2014-08-06 07:13:02 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-08-06 07:13:02 ----A---- C:\Windows\system32\rdpcorets.dll
2014-08-06 07:06:35 ----D---- C:\Users\Hruboňovi\AppData\Roaming\Adobe
2014-08-06 03:16:04 ----A---- C:\Windows\system32\wmploc.DLL
2014-08-06 03:16:03 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-08-06 03:16:03 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-08-06 03:16:01 ----A---- C:\Windows\system32\wmp.dll
2014-08-06 03:06:19 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-08-06 03:03:30 ----D---- C:\Windows\Migration
2014-08-06 02:52:31 ----A---- C:\Windows\system32\IEUDINIT.EXE
2014-08-06 02:45:12 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\jsIntl.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-06 02:45:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-06 02:45:07 ----A---- C:\Windows\system32\elshyph.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\url.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-06 02:45:06 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-08-06 02:45:05 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-08-06 02:45:04 ----A---- C:\Windows\system32\wininet.dll
2014-08-06 02:45:04 ----A---- C:\Windows\system32\urlmon.dll
2014-08-06 02:45:04 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-08-06 02:45:04 ----A---- C:\Windows\system32\msls31.dll
2014-08-06 02:45:04 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-06 02:45:04 ----A---- C:\Windows\system32\jsIntl.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-08-06 02:45:03 ----A---- C:\Windows\system32\msrating.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\mshtmler.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\msfeedssync.exe
2014-08-06 02:45:03 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\jscript9.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\ieui.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\iesysprep.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\iertutil.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\ieframe.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-06 02:45:03 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\wextract.exe
2014-08-06 02:45:02 ----A---- C:\Windows\system32\webcheck.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\vbscript.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\url.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\pngfilt.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\occache.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\mshtml.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\mshta.exe
2014-08-06 02:45:02 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\licmgr10.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\inseng.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\iexpress.exe
2014-08-06 02:45:02 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-06 02:45:02 ----A---- C:\Windows\system32\iesetup.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\iernonce.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-08-06 02:45:02 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-06 02:45:02 ----A---- C:\Windows\system32\ieapfltr.dat
2014-08-06 02:45:02 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-06 02:45:02 ----A---- C:\Windows\system32\icardie.dll
2014-08-06 02:45:01 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-06 02:45:01 ----A---- C:\Windows\system32\jscript.dll
2014-08-06 02:45:01 ----A---- C:\Windows\system32\imgutil.dll
2014-08-06 02:45:01 ----A---- C:\Windows\system32\iepeers.dll
2014-08-06 02:35:01 ----D---- C:\Program Files\Microsoft.NET
2014-08-06 02:19:47 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-08-06 02:19:41 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-08-06 02:19:41 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-08-06 02:19:41 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-08-06 02:19:39 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-08-06 02:19:39 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-08-06 02:19:39 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-08-06 02:19:39 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-08-06 02:19:39 ----A---- C:\Windows\system32\wksprtPS.dll
2014-08-06 02:19:39 ----A---- C:\Windows\system32\wksprt.exe
2014-08-06 02:19:39 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-08-06 02:19:39 ----A---- C:\Windows\system32\tsgqec.dll
2014-08-06 02:19:39 ----A---- C:\Windows\system32\mstsc.exe
2014-08-06 02:19:39 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-08-06 02:19:38 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-08-06 02:19:38 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-08-06 01:47:14 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-08-06 01:47:11 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-08-06 01:47:11 ----A---- C:\Windows\system32\rdpudd.dll
2014-08-06 01:47:11 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-08-06 01:09:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-08-06 00:59:28 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-08-06 00:59:28 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-08-06 00:59:27 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-08-06 00:59:27 ----A---- C:\Windows\system32\UIAnimation.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-08-06 00:59:19 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-08-06 00:59:19 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-08-06 00:59:19 ----A---- C:\Windows\system32\d3d10_1.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-08-06 00:59:18 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-08-06 00:59:18 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-08-06 00:59:18 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-08-06 00:59:18 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-08-06 00:59:18 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-08-06 00:59:18 ----A---- C:\Windows\system32\dxgi.dll
2014-08-06 00:59:17 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-08-06 00:59:17 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-08-06 00:59:17 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-08-06 00:59:17 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-08-06 00:59:17 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-08-06 00:59:17 ----A---- C:\Windows\system32\XpsPrint.dll
2014-08-06 00:59:17 ----A---- C:\Windows\system32\d3d10level9.dll
2014-08-06 00:59:17 ----A---- C:\Windows\system32\d3d10core.dll
2014-08-06 00:59:17 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-08-06 00:59:17 ----A---- C:\Windows\system32\d3d10.dll
2014-08-06 00:59:16 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-08-06 00:59:16 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-08-06 00:59:16 ----A---- C:\Windows\system32\FntCache.dll
2014-08-06 00:59:16 ----A---- C:\Windows\system32\DWrite.dll
2014-08-05 23:31:28 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-08-05 23:31:26 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-08-05 23:31:26 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-08-05 23:31:25 ----A---- C:\Windows\system32\winlogon.exe
2014-08-05 23:31:25 ----A---- C:\Windows\system32\objsel.dll
2014-08-05 23:31:25 ----A---- C:\Windows\system32\KernelBase.dll
2014-08-05 23:31:24 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-08-05 23:31:24 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-08-05 23:31:23 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-08-05 23:31:23 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-08-05 23:31:23 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-08-05 23:31:23 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-08-05 23:31:23 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-08-05 23:31:23 ----A---- C:\Windows\system32\smss.exe
2014-08-05 23:31:23 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-08-05 23:31:23 ----A---- C:\Windows\system32\dimsroam.dll
2014-08-05 23:31:23 ----A---- C:\Windows\system32\cngprovider.dll
2014-08-05 23:31:23 ----A---- C:\Windows\system32\capiprovider.dll
2014-08-05 23:31:23 ----A---- C:\Windows\system32\adprovider.dll
2014-08-05 23:31:22 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-08-05 23:31:22 ----A---- C:\Windows\system32\wincredprovider.dll
2014-08-05 23:31:22 ----A---- C:\Windows\system32\csrsrv.dll
2014-08-05 23:31:19 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-08-05 23:31:19 ----A---- C:\Windows\system32\apisetschema.dll
2014-08-05 23:30:53 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-08-05 23:30:53 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-08-05 23:30:53 ----A---- C:\Windows\system32\schannel.dll
2014-08-05 23:30:53 ----A---- C:\Windows\system32\kerberos.dll
2014-08-05 23:30:52 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-08-05 23:30:52 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-08-05 23:30:52 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-08-05 23:30:52 ----A---- C:\Windows\system32\wdigest.dll
2014-08-05 23:30:52 ----A---- C:\Windows\system32\TSpkg.dll
2014-08-05 23:30:52 ----A---- C:\Windows\system32\ncrypt.dll
2014-08-05 23:30:52 ----A---- C:\Windows\system32\msv1_0.dll
2014-08-05 23:30:51 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-08-05 23:30:50 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-08-05 23:30:50 ----A---- C:\Windows\system32\credssp.dll
2014-08-05 23:30:32 ----A---- C:\Windows\system32\consent.exe
2014-08-05 23:30:32 ----A---- C:\Windows\system32\appinfo.dll
2014-08-05 23:29:59 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-08-05 23:29:59 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-08-05 23:29:59 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-08-05 23:29:59 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-08-05 23:29:59 ----A---- C:\Windows\system32\nlasvc.dll
2014-08-05 23:29:59 ----A---- C:\Windows\system32\nlaapi.dll
2014-08-05 23:29:59 ----A---- C:\Windows\system32\netcorehc.dll
2014-08-05 23:29:59 ----A---- C:\Windows\system32\ncsi.dll
2014-08-05 23:29:59 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-08-05 23:29:59 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-08-05 23:29:58 ----A---- C:\Windows\system32\netevent.dll
2014-08-05 23:29:48 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-08-05 23:29:48 ----A---- C:\Windows\system32\iologmsg.dll
2014-08-05 23:29:48 ----A---- C:\Windows\system32\drivers\storport.sys
2014-08-05 23:29:48 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-08-05 23:29:48 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-08-05 23:29:44 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-08-05 23:29:43 ----A---- C:\Windows\system32\RMActivate.exe
2014-08-05 23:29:42 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-08-05 23:29:42 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-08-05 23:29:42 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-08-05 23:29:42 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-08-05 23:29:41 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-08-05 23:29:41 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-08-05 23:29:41 ----A---- C:\Windows\system32\secproc_isv.dll
2014-08-05 23:29:41 ----A---- C:\Windows\system32\secproc.dll
2014-08-05 23:29:41 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-08-05 23:29:41 ----A---- C:\Windows\system32\msdrm.dll
2014-08-05 23:29:40 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-08-05 23:29:40 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-08-05 23:29:40 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-08-05 23:29:40 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-08-05 23:29:40 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-08-05 23:29:40 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-08-05 23:29:13 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-08-05 23:29:13 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-08-05 23:29:03 ----A---- C:\Windows\system32\wwansvc.dll
2014-08-05 23:29:03 ----A---- C:\Windows\system32\wwanprotdim.dll
2014-08-05 23:29:01 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-08-05 23:29:01 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-08-05 23:28:41 ----A---- C:\Windows\system32\ntdll.dll
2014-08-05 23:28:41 ----A---- C:\Windows\system32\advapi32.dll
2014-08-05 23:28:40 ----A---- C:\Windows\SYSWOW64\tdh.dll
2014-08-05 23:28:40 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2014-08-05 23:28:40 ----A---- C:\Windows\system32\tdh.dll
2014-08-05 23:28:39 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2014-08-05 23:28:34 ----A---- C:\Windows\system32\d3d11.dll
2014-08-05 23:28:33 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-08-05 23:28:18 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-08-05 23:28:18 ----A---- C:\Windows\system32\drivers\netio.sys
2014-08-05 23:28:18 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-08-05 23:28:15 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-08-05 23:28:15 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-08-05 23:28:15 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-08-05 23:28:15 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-08-05 23:28:06 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-08-05 23:28:06 ----A---- C:\Windows\system32\wintrust.dll
2014-08-05 23:28:01 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-08-05 23:28:00 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-05 23:28:00 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-05 23:27:58 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-08-05 23:27:58 ----A---- C:\Windows\system32\wer.dll
2014-08-05 23:27:54 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-08-05 23:27:53 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-08-05 23:27:51 ----A---- C:\Windows\system32\win32k.sys
2014-08-05 23:27:49 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-08-05 23:27:49 ----A---- C:\Windows\system32\osk.exe
2014-08-05 23:27:46 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-05 23:27:46 ----A---- C:\Windows\system32\authui.dll
2014-08-05 23:27:45 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-08-05 23:27:45 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-08-05 23:27:45 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-08-05 23:27:45 ----A---- C:\Windows\system32\credui.dll
2014-08-05 23:27:40 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-08-05 23:27:28 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2014-08-05 23:27:28 ----A---- C:\Windows\system32\mswsock.dll
2014-08-05 23:27:27 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-08-05 23:27:27 ----A---- C:\Windows\system32\qedit.dll
2014-08-05 23:27:26 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-08-05 23:27:26 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-08-05 23:27:26 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-08-05 23:27:26 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-08-05 23:27:26 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-08-05 23:27:26 ----A---- C:\Windows\system32\lpk.dll
2014-08-05 23:27:26 ----A---- C:\Windows\system32\fontsub.dll
2014-08-05 23:27:26 ----A---- C:\Windows\system32\dciman32.dll
2014-08-05 23:27:26 ----A---- C:\Windows\system32\atmlib.dll
2014-08-05 23:27:26 ----A---- C:\Windows\system32\atmfd.dll
2014-08-05 23:27:22 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-08-05 23:27:22 ----A---- C:\Windows\system32\tzres.dll
2014-08-05 23:27:17 ----A---- C:\Windows\system32\drivers\usbscan.sys
2014-08-05 23:27:17 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-08-05 23:27:17 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-08-05 23:27:11 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-08-05 23:27:11 ----A---- C:\Windows\system32\shdocvw.dll
2014-08-05 23:27:08 ----A---- C:\Windows\system32\comctl32.dll
2014-08-05 23:27:07 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-08-05 23:27:05 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-08-05 23:27:05 ----A---- C:\Windows\system32\qdvd.dll
2014-08-05 23:27:01 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-08-05 23:27:01 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-08-05 23:27:01 ----A---- C:\Windows\system32\WebClnt.dll
2014-08-05 23:27:01 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-08-05 23:27:01 ----A---- C:\Windows\system32\davclnt.dll
2014-08-05 23:26:59 ----A---- C:\Windows\system32\msxml3.dll
2014-08-05 23:26:58 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-08-05 23:26:58 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-08-05 23:26:58 ----A---- C:\Windows\system32\msxml6.dll
2014-08-05 23:26:57 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-08-05 23:26:57 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-08-05 23:26:57 ----A---- C:\Windows\system32\msxml6r.dll
2014-08-05 23:26:57 ----A---- C:\Windows\system32\msxml3r.dll
2014-08-05 23:26:53 ----A---- C:\Windows\system32\drivers\afd.sys
2014-08-05 23:26:51 ----A---- C:\Windows\system32\crypt32.dll
2014-08-05 23:26:50 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-08-05 23:26:50 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-08-05 23:26:50 ----A---- C:\Windows\system32\cryptsvc.dll
2014-08-05 23:26:50 ----A---- C:\Windows\system32\cryptnet.dll
2014-08-05 23:26:49 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-08-05 23:26:35 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-08-05 23:26:33 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-08-05 23:26:33 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-08-05 23:26:33 ----A---- C:\Windows\system32\drivers\usbohci.sys
2014-08-05 23:26:33 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-08-05 23:26:33 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-08-05 23:26:33 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-08-05 23:26:33 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-08-05 23:26:29 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-08-05 23:26:29 ----A---- C:\Windows\system32\win32spl.dll
2014-08-05 23:26:28 ----A---- C:\Windows\system32\shell32.dll
2014-08-05 23:26:27 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-08-05 23:26:25 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-08-05 23:26:25 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-08-05 23:26:24 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-08-05 23:26:24 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-08-05 23:26:22 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-08-05 23:26:22 ----A---- C:\Windows\system32\imagehlp.dll
2014-08-05 23:26:21 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-08-05 23:26:20 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-08-05 23:26:20 ----A---- C:\Windows\system32\usp10.dll
2014-08-05 23:26:12 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-08-05 23:26:12 ----A---- C:\Windows\system32\msieftp.dll
2014-08-05 23:23:55 ----A---- C:\Windows\system32\certutil.exe
2014-08-05 23:23:54 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-08-05 23:23:53 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-08-05 23:23:53 ----A---- C:\Windows\system32\certenc.dll
2014-08-05 23:23:47 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-05 23:23:47 ----A---- C:\Windows\system32\gdi32.dll
2014-08-05 23:22:51 ----A---- C:\Windows\system32\lsasrv.dll
2014-08-05 23:22:50 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-08-05 23:22:50 ----A---- C:\Windows\system32\drivers\cng.sys
2014-08-05 23:22:49 ----A---- C:\Windows\system32\sspicli.dll
2014-08-05 23:22:49 ----A---- C:\Windows\system32\lsass.exe
2014-08-05 23:22:49 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-08-05 23:22:48 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-08-05 23:22:48 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-08-05 23:22:48 ----A---- C:\Windows\system32\sspisrv.dll
2014-08-05 23:22:48 ----A---- C:\Windows\system32\secur32.dll
2014-08-05 23:22:31 ----A---- C:\Windows\system32\wow64win.dll
2014-08-05 23:22:31 ----A---- C:\Windows\system32\wow64.dll
2014-08-05 23:22:31 ----A---- C:\Windows\system32\kernel32.dll
2014-08-05 23:22:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-08-05 23:22:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-08-05 23:22:30 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-08-05 23:22:30 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-08-05 23:22:30 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-08-05 23:22:30 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-08-05 23:22:30 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-08-05 23:22:30 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-08-05 23:22:30 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-08-05 23:22:30 ----A---- C:\Windows\system32\wow64cpu.dll
2014-08-05 23:22:30 ----A---- C:\Windows\system32\winsrv.dll
2014-08-05 23:22:30 ----A---- C:\Windows\system32\ntvdm64.dll
2014-08-05 23:22:30 ----A---- C:\Windows\system32\conhost.exe
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-08-05 23:22:29 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-08-05 23:22:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-08-05 23:22:27 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-08-05 23:22:27 ----A---- C:\Windows\SYSWOW64\user.exe
2014-08-05 23:22:25 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-08-05 23:22:24 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-08-05 23:22:24 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-08-05 23:22:24 ----A---- C:\Windows\system32\nshwfp.dll
2014-08-05 23:22:24 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-08-05 23:22:20 ----A---- C:\Windows\system32\scavengeui.dll
2014-08-05 23:22:15 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-08-05 23:22:15 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-05 23:22:15 ----A---- C:\Windows\system32\cdd.dll
2014-08-05 23:22:14 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-08-05 23:22:14 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-08-05 23:22:09 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-08-05 23:22:09 ----A---- C:\Windows\system32\cryptdlg.dll
2014-08-05 23:10:48 ----A---- C:\Windows\system32\taskhost.exe
2014-08-05 23:09:31 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-08-05 23:09:26 ----A---- C:\Windows\system32\cscript.exe
2014-08-05 23:09:25 ----A---- C:\Windows\SYSWOW64\wscript.exe
2014-08-05 23:09:25 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2014-08-05 23:09:25 ----A---- C:\Windows\SYSWOW64\cscript.exe
2014-08-05 23:09:25 ----A---- C:\Windows\system32\wscript.exe
2014-08-05 23:09:25 ----A---- C:\Windows\system32\scrrun.dll
2014-08-05 18:22:54 ----AS---- C:\Windows\SYSWOW64\lcpmncccmxl.exe
2014-08-05 18:22:54 ----AS---- C:\Windows\SYSWOW64\dcgmncccmxl.exe
2014-08-05 18:22:53 ----D---- C:\Windows\SYSWOW64\bitstreams
2014-08-05 18:22:53 ----AS---- C:\Windows\SYSWOW64\zlib1.dll
2014-08-05 18:22:53 ----AS---- C:\Windows\SYSWOW64\ssleay32.dll
2014-08-05 18:22:53 ----AS---- C:\Windows\SYSWOW64\pthreadVC2.dll
2014-08-05 18:22:53 ----AS---- C:\Windows\SYSWOW64\pthreadGC2.dll
2014-08-05 18:22:53 ----AS---- C:\Windows\SYSWOW64\libssh2.dll
2014-08-05 18:22:53 ----AS---- C:\Windows\SYSWOW64\acumncccmxl.exe
2014-08-05 18:22:52 ----AS---- C:\Windows\SYSWOW64\librtmp.dll
2014-08-05 18:22:52 ----AS---- C:\Windows\SYSWOW64\libidn-11.dll
2014-08-05 18:22:52 ----AS---- C:\Windows\SYSWOW64\libeay32.dll
2014-08-05 18:22:52 ----AS---- C:\Windows\SYSWOW64\libcurl-4.dll
2014-08-05 18:22:52 ----AS---- C:\Windows\SYSWOW64\cudart32_50_35.dll
2014-08-05 18:12:14 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-08-05 18:12:07 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-08-05 18:12:07 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-08-05 18:12:07 ----A---- C:\Windows\SYSWOW64\java.exe
2014-08-04 21:14:05 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-08-04 21:04:34 ----D---- C:\Windows\pss
2014-08-04 21:00:11 ----D---- C:\Users\Hruboňovi\AppData\Roaming\Macrovision
2014-08-04 20:59:04 ----D---- C:\Users\Hruboňovi\AppData\Roaming\DigitalPersona
2014-08-04 20:53:38 ----D---- C:\Program Files\Validity Sensors, Inc
2014-08-04 20:51:07 ----D---- C:\Windows\system32\tr
2014-08-04 20:51:07 ----D---- C:\Windows\system32\sv
2014-08-04 20:51:07 ----D---- C:\Windows\system32\ru
2014-08-04 20:51:07 ----D---- C:\Windows\system32\no
2014-08-04 20:51:07 ----D---- C:\Windows\system32\da
2014-08-04 20:51:05 ----D---- C:\Windows\system32\ko
2014-08-04 20:51:05 ----D---- C:\Windows\system32\ja
2014-08-04 20:51:05 ----D---- C:\Windows\system32\it
2014-08-04 20:51:05 ----D---- C:\Windows\system32\fr
2014-08-04 20:51:05 ----D---- C:\Windows\system32\es
2014-08-04 20:51:05 ----D---- C:\Windows\system32\de
2014-08-04 20:51:03 ----D---- C:\Windows\SYSWOW64\tr
2014-08-04 20:51:03 ----D---- C:\Windows\SYSWOW64\sv
2014-08-04 20:51:03 ----D---- C:\Windows\SYSWOW64\ru
2014-08-04 20:51:03 ----D---- C:\Windows\SYSWOW64\no
2014-08-04 20:51:03 ----D---- C:\Windows\SYSWOW64\da
2014-08-04 20:50:58 ----D---- C:\Windows\SYSWOW64\ko
2014-08-04 20:50:58 ----D---- C:\Windows\SYSWOW64\ja
2014-08-04 20:50:58 ----D---- C:\Windows\SYSWOW64\it
2014-08-04 20:50:58 ----D---- C:\Windows\SYSWOW64\fr
2014-08-04 20:50:58 ----D---- C:\Windows\SYSWOW64\es
2014-08-04 20:50:58 ----D---- C:\Windows\SYSWOW64\de
2014-08-04 20:50:55 ----D---- C:\Windows\DPDrv
2014-08-04 20:50:44 ----D---- C:\ProgramData\Macrovision
2014-08-04 20:50:44 ----D---- C:\Program Files\DigitalPersona
2014-08-04 20:50:44 ----D---- C:\Program Files (x86)\DigitalPersona
2014-08-04 20:50:07 ----D---- C:\ProgramData\Downloaded Installations
2014-08-04 20:46:18 ----D---- C:\Program Files\DIFX
2014-08-04 20:45:51 ----D---- C:\Windows\Driver Cache
2014-08-04 20:45:51 ----A---- C:\Windows\system32\drivers\AVerAF15.sys
2014-08-04 20:45:46 ----D---- C:\Program Files (x86)\AVerMedia
2014-08-04 20:44:11 ----A---- C:\Windows\system32\drivers\RTSTOR64.sys
2014-08-04 20:44:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-08-04 20:43:51 ----D---- C:\Users\Hruboňovi\AppData\Roaming\InstallShield
2014-08-04 20:30:04 ----D---- C:\Users\Hruboňovi\AppData\Roaming\NVIDIA
2014-08-04 20:21:07 ----D---- C:\ProgramData\Microsoft Toolkit
2014-08-04 18:54:37 ----D---- C:\Windows\SYSWOW64\Wat
2014-08-04 18:54:37 ----D---- C:\Windows\system32\Wat
2014-08-04 18:41:31 ----D---- C:\Windows\system32\SPReview
2014-08-04 18:40:59 ----D---- C:\Windows\system32\EventProviders
2014-08-04 18:37:04 ----A---- C:\Windows\system32\netfxperf.dll
2014-08-04 18:37:04 ----A---- C:\Windows\system32\dfshim.dll
2014-08-04 18:36:56 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-08-04 18:36:45 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2014-08-04 18:36:45 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2014-08-04 18:36:44 ----A---- C:\Windows\system32\tssrvlic.dll
2014-08-04 18:36:44 ----A---- C:\Windows\system32\sysmain.dll
2014-08-04 18:36:44 ----A---- C:\Windows\system32\RDVGHelper.exe
2014-08-04 18:36:43 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2014-08-04 18:36:42 ----A---- C:\Windows\system32\MSVidCtl.dll
2014-08-04 18:36:40 ----A---- C:\Windows\system32\mscoree.dll
2014-08-04 18:36:40 ----A---- C:\Windows\system32\mmcndmgr.dll
2014-08-04 18:36:39 ----A---- C:\Windows\system32\mf.dll
2014-08-04 18:36:38 ----A---- C:\Windows\system32\xpsservices.dll
2014-08-04 18:36:36 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2014-08-04 18:36:36 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2014-08-04 18:36:36 ----A---- C:\Windows\system32\schedsvc.dll
2014-08-04 18:36:35 ----A---- C:\Windows\system32\ole32.dll
2014-08-04 18:36:34 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2014-08-04 18:36:34 ----A---- C:\Windows\system32\spwizui.dll
2014-08-04 18:36:33 ----A---- C:\Windows\SYSWOW64\mf.dll
2014-08-04 18:36:33 ----A---- C:\Windows\system32\wevtsvc.dll
2014-08-04 18:36:33 ----A---- C:\Windows\system32\taskschd.dll
2014-08-04 18:36:33 ----A---- C:\Windows\system32\RacEngn.dll
2014-08-04 18:36:33 ----A---- C:\Windows\system32\diagperf.dll
2014-08-04 18:36:32 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2014-08-04 18:36:32 ----A---- C:\Windows\system32\vssapi.dll
2014-08-04 18:36:32 ----A---- C:\Windows\system32\ExplorerFrame.dll
2014-08-04 18:36:31 ----A---- C:\Windows\system32\UIRibbon.dll
2014-08-04 18:36:31 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2014-08-04 18:36:31 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2014-08-04 18:36:29 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2014-08-04 18:36:29 ----A---- C:\Windows\system32\WsmSvc.dll
2014-08-04 18:36:29 ----A---- C:\Windows\system32\WMVCORE.DLL
2014-08-04 18:36:28 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2014-08-04 18:36:28 ----A---- C:\Windows\system32\rdpdd.dll
2014-08-04 18:36:28 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2014-08-04 18:36:28 ----A---- C:\Windows\system32\PresentationHost.exe
2014-08-04 18:36:28 ----A---- C:\Windows\system32\MPSSVC.dll
2014-08-04 18:36:27 ----A---- C:\Windows\system32\WinSAT.exe
2014-08-04 18:36:27 ----A---- C:\Windows\system32\spreview.exe
2014-08-04 18:36:27 ----A---- C:\Windows\system32\spinstall.exe
2014-08-04 18:36:27 ----A---- C:\Windows\system32\CertEnroll.dll
2014-08-04 18:36:26 ----A---- C:\Windows\system32\d3d9.dll
2014-08-04 18:36:25 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2014-08-04 18:36:25 ----A---- C:\Windows\system32\SearchFolder.dll
2014-08-04 18:36:25 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2014-08-04 18:36:24 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2014-08-04 18:36:24 ----A---- C:\Windows\system32\VSSVC.exe
2014-08-04 18:36:24 ----A---- C:\Windows\system32\gpsvc.dll
2014-08-04 18:36:24 ----A---- C:\Windows\system32\dwmcore.dll
2014-08-04 18:36:24 ----A---- C:\Windows\system32\dbgeng.dll
2014-08-04 18:36:23 ----A---- C:\Windows\system32\drivers\http.sys
2014-08-04 18:36:22 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2014-08-04 18:36:21 ----A---- C:\Windows\SYSWOW64\ole32.dll
2014-08-04 18:36:21 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2014-08-04 18:36:21 ----A---- C:\Windows\system32\actxprxy.dll
2014-08-04 18:36:20 ----A---- C:\Windows\system32\termsrv.dll
2014-08-04 18:36:20 ----A---- C:\Windows\system32\qmgr.dll
2014-08-04 18:36:20 ----A---- C:\Windows\system32\gpprefcl.dll
2014-08-04 18:36:20 ----A---- C:\Windows\system32\audiosrv.dll
2014-08-04 18:36:19 ----A---- C:\Windows\system32\sqmapi.dll
2014-08-04 18:36:18 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2014-08-04 18:36:18 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2014-08-04 18:36:18 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2014-08-04 18:36:18 ----A---- C:\Windows\system32\winhttp.dll
2014-08-04 18:36:18 ----A---- C:\Windows\system32\QAGENTRT.DLL
2014-08-04 18:36:18 ----A---- C:\Windows\system32\propsys.dll
2014-08-04 18:36:18 ----A---- C:\Windows\system32\netlogon.dll
2014-08-04 18:36:18 ----A---- C:\Windows\system32\imapi2fs.dll
2014-08-04 18:36:17 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2014-08-04 18:36:17 ----A---- C:\Windows\system32\wbengine.exe
2014-08-04 18:36:17 ----A---- C:\Windows\system32\setupapi.dll
2014-08-04 18:36:17 ----A---- C:\Windows\system32\rpcss.dll
2014-08-04 18:36:17 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2014-08-04 18:36:16 ----A---- C:\Windows\system32\werconcpl.dll
2014-08-04 18:36:16 ----A---- C:\Windows\system32\taskeng.exe
2014-08-04 18:36:16 ----A---- C:\Windows\system32\odbc32.dll
2014-08-04 18:36:15 ----A---- C:\Windows\system32\WSDApi.dll
2014-08-04 18:36:15 ----A---- C:\Windows\system32\user32.dll.bak
2014-08-04 18:36:15 ----A---- C:\Windows\system32\user32.dll
2014-08-04 18:36:14 ----A---- C:\Windows\system32\umrdp.dll
2014-08-04 18:36:14 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2014-08-04 18:36:14 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-08-04 18:36:14 ----A---- C:\Windows\system32\dhcpcore.dll
2014-08-04 18:36:14 ----A---- C:\Windows\system32\certmgr.dll
2014-08-04 18:36:13 ----A---- C:\Windows\SYSWOW64\certcli.dll
2014-08-04 18:36:13 ----A---- C:\Windows\system32\drivers\netbt.sys
2014-08-04 18:36:12 ----A---- C:\Windows\system32\tsmf.dll
2014-08-04 18:36:12 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2014-08-04 18:36:11 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2014-08-04 18:36:11 ----A---- C:\Windows\system32\shlwapi.dll
2014-08-04 18:36:11 ----A---- C:\Windows\system32\msdtctm.dll
2014-08-04 18:36:11 ----A---- C:\Windows\system32\framedynos.dll
2014-08-04 18:36:10 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2014-08-04 18:36:10 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2014-08-04 18:36:10 ----A---- C:\Windows\system32\wmicmiplugin.dll
2014-08-04 18:36:10 ----A---- C:\Windows\system32\rdpshell.exe
2014-08-04 18:36:10 ----A---- C:\Windows\system32\netshell.dll
2014-08-04 18:36:09 ----A---- C:\Windows\system32\ws2_32.dll
2014-08-04 18:36:09 ----A---- C:\Windows\system32\netcfgx.dll
2014-08-04 18:36:09 ----A---- C:\Windows\system32\appmgr.dll
2014-08-04 18:36:08 ----A---- C:\Windows\system32\wmpps.dll
2014-08-04 18:36:08 ----A---- C:\Windows\system32\Query.dll
2014-08-04 18:36:08 ----A---- C:\Windows\system32\lsm.exe
2014-08-04 18:36:08 ----A---- C:\Windows\system32\drivers\csc.sys
2014-08-04 18:36:08 ----A---- C:\Windows\system32\comdlg32.dll
2014-08-04 18:36:08 ----A---- C:\Windows\system32\apphelp.dll
2014-08-04 18:36:07 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2014-08-04 18:36:07 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2014-08-04 18:36:07 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2014-08-04 18:36:07 ----A---- C:\Windows\system32\wpdshext.dll
2014-08-04 18:36:07 ----A---- C:\Windows\system32\drvstore.dll
2014-08-04 18:36:07 ----A---- C:\Windows\system32\azroles.dll
2014-08-04 18:36:06 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2014-08-04 18:36:06 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2014-08-04 18:36:06 ----A---- C:\Windows\system32\Vault.dll
2014-08-04 18:36:06 ----A---- C:\Windows\system32\samsrv.dll
2014-08-04 18:36:06 ----A---- C:\Windows\system32\QAGENT.DLL
2014-08-04 18:36:06 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2014-08-04 18:36:06 ----A---- C:\Windows\system32\cmd.exe
2014-08-04 18:36:06 ----A---- C:\Windows\system32\BFE.DLL
2014-08-04 18:36:05 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2014-08-04 18:36:05 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2014-08-04 18:36:05 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2014-08-04 18:36:05 ----A---- C:\Windows\system32\lpksetup.exe
2014-08-04 18:36:04 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2014-08-04 18:36:04 ----A---- C:\Windows\system32\rdpclip.exe
2014-08-04 18:36:04 ----A---- C:\Windows\system32\cscsvc.dll
2014-08-04 18:36:03 ----A---- C:\Windows\SYSWOW64\Query.dll
2014-08-04 18:36:03 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2014-08-04 18:36:03 ----A---- C:\Windows\system32\Wldap32.dll
2014-08-04 18:36:03 ----A---- C:\Windows\system32\sxs.dll
2014-08-04 18:36:03 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2014-08-04 18:36:03 ----A---- C:\Windows\system32\cscobj.dll
2014-08-04 18:36:02 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2014-08-04 18:36:02 ----A---- C:\Windows\SYSWOW64\upnp.dll
2014-08-04 18:36:02 ----A---- C:\Windows\system32\taskcomp.dll
2014-08-04 18:36:02 ----A---- C:\Windows\system32\pnidui.dll
2014-08-04 18:36:02 ----A---- C:\Windows\system32\mfds.dll
2014-08-04 18:36:02 ----A---- C:\Windows\system32\mcbuilder.exe
2014-08-04 18:36:02 ----A---- C:\Windows\system32\ipsmsnap.dll
2014-08-04 18:36:01 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2014-08-04 18:36:01 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2014-08-04 18:36:01 ----A---- C:\Windows\system32\webservices.dll
2014-08-04 18:36:01 ----A---- C:\Windows\system32\hgprint.dll
2014-08-04 18:36:00 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2014-08-04 18:36:00 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2014-08-04 18:36:00 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2014-08-04 18:36:00 ----A---- C:\Windows\system32\winsta.dll
2014-08-04 18:36:00 ----A---- C:\Windows\system32\SessEnv.dll
2014-08-04 18:36:00 ----A---- C:\Windows\system32\rdpendp.dll
2014-08-04 18:35:59 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2014-08-04 18:35:59 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2014-08-04 18:35:59 ----A---- C:\Windows\system32\sqlsrv32.dll
2014-08-04 18:35:59 ----A---- C:\Windows\system32\fveapi.dll
2014-08-04 18:35:59 ----A---- C:\Windows\system32\drivers\msrpc.sys
2014-08-04 18:35:59 ----A---- C:\Windows\system32\dot3api.dll
2014-08-04 18:35:58 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2014-08-04 18:35:58 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2014-08-04 18:35:58 ----A---- C:\Windows\system32\WMNetMgr.dll
2014-08-04 18:35:58 ----A---- C:\Windows\system32\schtasks.exe
2014-08-04 18:35:58 ----A---- C:\Windows\system32\prncache.dll
2014-08-04 18:35:58 ----A---- C:\Windows\system32\mcmde.dll
2014-08-04 18:35:58 ----A---- C:\Windows\system32\drivers\volsnap.sys
2014-08-04 18:35:57 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2014-08-04 18:35:57 ----A---- C:\Windows\SYSWOW64\userenv.dll
2014-08-04 18:35:57 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2014-08-04 18:35:57 ----A---- C:\Windows\system32\wlanpref.dll
2014-08-04 18:35:57 ----A---- C:\Windows\system32\vpnike.dll
2014-08-04 18:35:57 ----A---- C:\Windows\system32\userenv.dll
2014-08-04 18:35:57 ----A---- C:\Windows\system32\drivers\rdbss.sys
2014-08-04 18:35:56 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2014-08-04 18:35:56 ----A---- C:\Windows\system32\tspubwmi.dll
2014-08-04 18:35:56 ----A---- C:\Windows\system32\photowiz.dll
2014-08-04 18:35:56 ----A---- C:\Windows\system32\IPSECSVC.DLL
2014-08-04 18:35:56 ----A---- C:\Windows\system32\framedyn.dll
2014-08-04 18:35:56 ----A---- C:\Windows\system32\evr.dll
2014-08-04 18:35:56 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2014-08-04 18:35:56 ----A---- C:\Windows\system32\AudioSes.dll
2014-08-04 18:35:55 ----A---- C:\Windows\SYSWOW64\cmd.exe
2014-08-04 18:35:55 ----A---- C:\Windows\system32\wmpmde.dll
2014-08-04 18:35:55 ----A---- C:\Windows\system32\WMPEncEn.dll
2014-08-04 18:35:55 ----A---- C:\Windows\system32\wmpeffects.dll
2014-08-04 18:35:55 ----A---- C:\Windows\system32\SyncCenter.dll
2014-08-04 18:35:55 ----A---- C:\Windows\system32\sppobjs.dll
2014-08-04 18:35:55 ----A---- C:\Windows\system32\FXSSVC.exe
2014-08-04 18:35:55 ----A---- C:\Windows\system32\aepdu.dll
2014-08-04 18:35:54 ----A---- C:\Windows\system32\tscfgwmi.dll
2014-08-04 18:35:54 ----A---- C:\Windows\system32\srvsvc.dll
2014-08-04 18:35:54 ----A---- C:\Windows\system32\shsvcs.dll
2014-08-04 18:35:54 ----A---- C:\Windows\system32\rdpinit.exe
2014-08-04 18:35:54 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-08-04 18:35:54 ----A---- C:\Windows\system32\aeinv.dll
2014-08-04 18:35:53 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2014-08-04 18:35:53 ----A---- C:\Windows\SYSWOW64\propsys.dll
2014-08-04 18:35:53 ----A---- C:\Windows\SYSWOW64\mfds.dll
2014-08-04 18:35:53 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2014-08-04 18:35:53 ----A---- C:\Windows\system32\WinSATAPI.dll
2014-08-04 18:35:53 ----A---- C:\Windows\system32\vmicsvc.exe
2014-08-04 18:35:53 ----A---- C:\Windows\system32\stobject.dll
2014-08-04 18:35:53 ----A---- C:\Windows\system32\localsec.dll
2014-08-04 18:35:53 ----A---- C:\Windows\system32\imapi2.dll
2014-08-04 18:35:53 ----A---- C:\Windows\system32\fde.dll
2014-08-04 18:35:52 ----A---- C:\Windows\SYSWOW64\user32.dll.bak
2014-08-04 18:35:52 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-08-04 18:35:52 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2014-08-04 18:35:52 ----A---- C:\Windows\system32\netid.dll
2014-08-04 18:35:52 ----A---- C:\Windows\system32\netdiagfx.dll
2014-08-04 18:35:52 ----A---- C:\Windows\system32\inetpp.dll
2014-08-04 18:35:52 ----A---- C:\Windows\system32\drivers\vmbus.sys
2014-08-04 18:35:52 ----A---- C:\Windows\system32\drivers\udfs.sys
2014-08-04 18:35:52 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2014-08-04 18:35:52 ----A---- C:\Windows\system32\bcryptprimitives.dll
2014-08-04 18:35:51 ----A---- C:\Windows\SYSWOW64\azroles.dll
2014-08-04 18:35:51 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2014-08-04 18:35:51 ----A---- C:\Windows\system32\tcpipcfg.dll
2014-08-04 18:35:51 ----A---- C:\Windows\system32\spp.dll
2014-08-04 18:35:51 ----A---- C:\Windows\system32\QSHVHOST.DLL
2014-08-04 18:35:51 ----A---- C:\Windows\system32\cscui.dll
2014-08-04 18:35:51 ----A---- C:\Windows\system32\biocpl.dll
2014-08-04 18:35:50 ----A---- C:\Windows\SYSWOW64\themeui.dll
2014-08-04 18:35:50 ----A---- C:\Windows\system32\scansetting.dll
2014-08-04 18:35:50 ----A---- C:\Windows\system32\printui.dll
2014-08-04 18:35:50 ----A---- C:\Windows\system32\pla.dll
2014-08-04 18:35:50 ----A---- C:\Windows\system32\mspbda.dll
2014-08-04 18:35:50 ----A---- C:\Windows\system32\msinfo32.exe
2014-08-04 18:35:49 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2014-08-04 18:35:49 ----A---- C:\Windows\SYSWOW64\spp.dll
2014-08-04 18:35:49 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2014-08-04 18:35:49 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2014-08-04 18:35:48 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2014-08-04 18:35:48 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2014-08-04 18:35:48 ----A---- C:\Windows\system32\wusa.exe
2014-08-04 18:35:48 ----A---- C:\Windows\system32\wiaservc.dll
2014-08-04 18:35:48 ----A---- C:\Windows\system32\vds.exe
2014-08-04 18:35:48 ----A---- C:\Windows\system32\rpchttp.dll
2014-08-04 18:35:48 ----A---- C:\Windows\system32\msdri.dll
2014-08-04 18:35:48 ----A---- C:\Windows\system32\mscms.dll
2014-08-04 18:35:48 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2014-08-04 18:35:48 ----A---- C:\Windows\system32\drivers\pci.sys
2014-08-04 18:35:48 ----A---- C:\Windows\system32\aitagent.exe
2014-08-04 18:35:48 ----A---- C:\Windows\system32\AdmTmpl.dll
2014-08-04 18:35:47 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2014-08-04 18:35:47 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2014-08-04 18:35:47 ----A---- C:\Windows\system32\XpsRasterService.dll
2014-08-04 18:35:47 ----A---- C:\Windows\system32\wisptis.exe
2014-08-04 18:35:47 ----A---- C:\Windows\system32\PkgMgr.exe
2014-08-04 18:35:47 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2014-08-04 18:35:47 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2014-08-04 18:35:46 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2014-08-04 18:35:46 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2014-08-04 18:35:46 ----A---- C:\Windows\SYSWOW64\evr.dll
2014-08-04 18:35:46 ----A---- C:\Windows\system32\sppwinob.dll
2014-08-04 18:35:46 ----A---- C:\Windows\system32\ocsetup.exe
2014-08-04 18:35:45 ----A---- C:\Windows\SYSWOW64\calc.exe
2014-08-04 18:35:45 ----A---- C:\Windows\system32\wpdbusenum.dll
2014-08-04 18:35:45 ----A---- C:\Windows\system32\ocsetapi.dll
2014-08-04 18:35:45 ----A---- C:\Windows\system32\eapp3hst.dll
2014-08-04 18:35:45 ----A---- C:\Windows\system32\DXP.dll
2014-08-04 18:35:45 ----A---- C:\Windows\system32\drivers\volmgr.sys
2014-08-04 18:35:45 ----A---- C:\Windows\system32\ci.dll
2014-08-04 18:35:44 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2014-08-04 18:35:44 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2014-08-04 18:35:44 ----A---- C:\Windows\system32\wcncsvc.dll
2014-08-04 18:35:44 ----A---- C:\Windows\system32\upnp.dll
2014-08-04 18:35:44 ----A---- C:\Windows\system32\t2embed.dll
2014-08-04 18:35:44 ----A---- C:\Windows\system32\Robocopy.exe
2014-08-04 18:35:44 ----A---- C:\Windows\system32\mprapi.dll
2014-08-04 18:35:44 ----A---- C:\Windows\system32\eapphost.dll
2014-08-04 18:35:44 ----A---- C:\Windows\system32\drivers\msdsm.sys
2014-08-04 18:35:44 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2014-08-04 18:35:43 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2014-08-04 18:35:43 ----A---- C:\Windows\SYSWOW64\sxs.dll
2014-08-04 18:35:43 ----A---- C:\Windows\SYSWOW64\netshell.dll
2014-08-04 18:35:43 ----A---- C:\Windows\system32\thumbcache.dll
2014-08-04 18:35:43 ----A---- C:\Windows\system32\hal.dll
2014-08-04 18:35:42 ----A---- C:\Windows\SYSWOW64\stobject.dll
2014-08-04 18:35:42 ----A---- C:\Windows\system32\scecli.dll
2014-08-04 18:35:42 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2014-08-04 18:35:42 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2014-08-04 18:35:42 ----A---- C:\Windows\system32\DxpTaskSync.dll
2014-08-04 18:35:42 ----A---- C:\Windows\system32\dwmredir.dll
2014-08-04 18:35:41 ----A---- C:\Windows\SYSWOW64\prncache.dll
2014-08-04 18:35:41 ----A---- C:\Windows\system32\themeui.dll
2014-08-04 18:35:41 ----A---- C:\Windows\system32\puiobj.dll
2014-08-04 18:35:41 ----A---- C:\Windows\system32\msasn1.dll
2014-08-04 18:35:41 ----A---- C:\Windows\system32\iasrad.dll
2014-08-04 18:35:41 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2014-08-04 18:35:41 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2014-08-04 18:35:40 ----A---- C:\Windows\SYSWOW64\printui.dll
2014-08-04 18:35:40 ----A---- C:\Windows\system32\scrptadm.dll
2014-08-04 18:35:40 ----A---- C:\Windows\system32\onex.dll
2014-08-04 18:35:40 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2014-08-04 18:35:39 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2014-08-04 18:35:39 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2014-08-04 18:35:38 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2014-08-04 18:35:38 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2014-08-04 18:35:38 ----A---- C:\Windows\SYSWOW64\net1.exe
2014-08-04 18:35:38 ----A---- C:\Windows\system32\wdc.dll
2014-08-04 18:35:37 ----A---- C:\Windows\system32\wlangpui.dll
2014-08-04 18:35:37 ----A---- C:\Windows\system32\StructuredQuery.dll
2014-08-04 18:35:37 ----A---- C:\Windows\system32\sdengin2.dll
2014-08-04 18:35:37 ----A---- C:\Windows\system32\scesrv.dll
2014-08-04 18:35:37 ----A---- C:\Windows\system32\rasmans.dll
2014-08-04 18:35:37 ----A---- C:\Windows\system32\msftedit.dll
2014-08-04 18:35:36 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2014-08-04 18:35:36 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2014-08-04 18:35:36 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\wscapi.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\wiadefui.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\VAN.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\SndVol.exe
2014-08-04 18:35:36 ----A---- C:\Windows\system32\samcli.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\regapi.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\netcenter.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\iasacct.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\dskquoui.dll
2014-08-04 18:35:36 ----A---- C:\Windows\system32\drivers\termdd.sys
2014-08-04 18:35:36 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2014-08-04 18:35:35 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2014-08-04 18:35:35 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2014-08-04 18:35:35 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2014-08-04 18:35:35 ----A---- C:\Windows\system32\TabSvc.dll
2014-08-04 18:35:35 ----A---- C:\Windows\system32\srchadmin.dll
2014-08-04 18:35:35 ----A---- C:\Windows\system32\QUTIL.DLL
2014-08-04 18:35:34 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2014-08-04 18:35:34 ----A---- C:\Windows\SYSWOW64\webservices.dll
2014-08-04 18:35:34 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2014-08-04 18:35:34 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2014-08-04 18:35:34 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2014-08-04 18:35:34 ----A---- C:\Windows\SYSWOW64\fde.dll
2014-08-04 18:35:34 ----A---- C:\Windows\system32\setupcl.exe
2014-08-04 18:35:34 ----A---- C:\Windows\system32\rastls.dll
2014-08-04 18:35:34 ----A---- C:\Windows\system32\drivers\msahci.sys
2014-08-04 18:35:33 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-08-04 18:35:33 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2014-08-04 18:35:33 ----A---- C:\Windows\system32\drivers\acpi.sys
2014-08-04 18:35:32 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2014-08-04 18:35:32 ----A---- C:\Windows\SYSWOW64\pla.dll
2014-08-04 18:35:32 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2014-08-04 18:35:32 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2014-08-04 18:35:32 ----A---- C:\Windows\system32\tapisrv.dll
2014-08-04 18:35:32 ----A---- C:\Windows\system32\netiohlp.dll
2014-08-04 18:35:32 ----A---- C:\Windows\system32\msconfig.exe
2014-08-04 18:35:32 ----A---- C:\Windows\system32\mimefilt.dll
2014-08-04 18:35:32 ----A---- C:\Windows\system32\ListSvc.dll
2014-08-04 18:35:32 ----A---- C:\Windows\system32\hgcpl.dll
2014-08-04 18:35:32 ----A---- C:\Windows\system32\drivers\raspptp.sys
2014-08-04 18:35:31 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-08-04 18:35:31 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2014-08-04 18:35:31 ----A---- C:\Windows\system32\lsmproxy.dll
2014-08-04 18:35:31 ----A---- C:\Windows\system32\fdeploy.dll
2014-08-04 18:35:31 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2014-08-04 18:35:31 ----A---- C:\Windows\system32\drivers\ks.sys
2014-08-04 18:35:31 ----A---- C:\Windows\system32\clusapi.dll
2014-08-04 18:35:31 ----A---- C:\Windows\system32\basecsp.dll
2014-08-04 18:35:30 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2014-08-04 18:35:30 ----A---- C:\Windows\system32\riched20.dll
2014-08-04 18:35:30 ----A---- C:\Windows\system32\mtxclu.dll
2014-08-04 18:35:30 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2014-08-04 18:35:29 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2014-08-04 18:35:29 ----A---- C:\Windows\system32\dnscmmc.dll
2014-08-04 18:35:28 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2014-08-04 18:35:28 ----A---- C:\Windows\SYSWOW64\winmm.dll
2014-08-04 18:35:28 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2014-08-04 18:35:28 ----A---- C:\Windows\SYSWOW64\onex.dll
2014-08-04 18:35:28 ----A---- C:\Windows\system32\themecpl.dll
2014-08-04 18:35:28 ----A---- C:\Windows\system32\sharemediacpl.dll
2014-08-04 18:35:28 ----A---- C:\Windows\system32\RpcRtRemote.dll
2014-08-04 18:35:28 ----A---- C:\Windows\system32\powercpl.dll
2014-08-04 18:35:28 ----A---- C:\Windows\system32\nci.dll
2014-08-04 18:35:28 ----A---- C:\Windows\system32\logoncli.dll
2014-08-04 18:35:27 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2014-08-04 18:35:27 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2014-08-04 18:35:27 ----A---- C:\Windows\SYSWOW64\autochk.exe
2014-08-04 18:35:27 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2014-08-04 18:35:27 ----A---- C:\Windows\system32\wkssvc.dll
2014-08-04 18:35:27 ----A---- C:\Windows\system32\vpnikeapi.dll
2014-08-04 18:35:27 ----A---- C:\Windows\system32\SensorsCpl.dll
2014-08-04 18:35:27 ----A---- C:\Windows\system32\netjoin.dll
2014-08-04 18:35:27 ----A---- C:\Windows\system32\Narrator.exe
2014-08-04 18:35:27 ----A---- C:\Windows\system32\Faultrep.dll
2014-08-04 18:35:27 ----A---- C:\Windows\system32\eudcedit.exe
2014-08-04 18:35:26 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2014-08-04 18:35:26 ----A---- C:\Windows\SYSWOW64\samcli.dll
2014-08-04 18:35:26 ----A---- C:\Windows\SYSWOW64\proquota.exe
2014-08-04 18:35:26 ----A---- C:\Windows\SYSWOW64\msutb.dll
2014-08-04 18:35:26 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2014-08-04 18:35:26 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2014-08-04 18:35:26 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-08-04 18:35:26 ----A---- C:\Windows\system32\sppcomapi.dll
2014-08-04 18:35:26 ----A---- C:\Windows\system32\cabview.dll
2014-08-04 18:35:26 ----A---- C:\Windows\system32\autochk.exe
2014-08-04 18:35:26 ----A---- C:\Windows\system32\autofmt.exe
2014-08-04 18:35:25 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2014-08-04 18:35:25 ----A---- C:\Windows\SYSWOW64\regapi.dll
2014-08-04 18:35:25 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2014-08-04 18:35:25 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2014-08-04 18:35:25 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2014-08-04 18:35:25 ----A---- C:\Windows\system32\shsetup.dll
2014-08-04 18:35:25 ----A---- C:\Windows\system32\nshipsec.dll
2014-08-04 18:35:25 ----A---- C:\Windows\system32\fms.dll
2014-08-04 18:35:25 ----A---- C:\Windows\system32\autoconv.exe
2014-08-04 18:35:25 ----A---- C:\Windows\system32\audiodg.exe
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2014-08-04 18:35:24 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2014-08-04 18:35:24 ----A---- C:\Windows\system32\wwanconn.dll
2014-08-04 18:35:24 ----A---- C:\Windows\system32\wpd_ci.dll
2014-08-04 18:35:24 ----A---- C:\Windows\system32\wlanui.dll
2014-08-04 18:35:24 ----A---- C:\Windows\system32\sdclt.exe
2014-08-04 18:35:24 ----A---- C:\Windows\system32\prntvpt.dll
2014-08-04 18:35:24 ----A---- C:\Windows\system32\mscorier.dll
2014-08-04 18:35:24 ----A---- C:\Windows\system32\drivers\winusb.sys
2014-08-04 18:35:24 ----A---- C:\Windows\system32\drivers\wanarp.sys
2014-08-04 18:35:24 ----A---- C:\Windows\system32\drivers\scsiport.sys
2014-08-04 18:35:24 ----A---- C:\Windows\system32\bcdsrv.dll
2014-08-04 18:35:23 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2014-08-04 18:35:23 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2014-08-04 18:35:23 ----A---- C:\Windows\system32\SmiEngine.dll
2014-08-04 18:35:23 ----A---- C:\Windows\system32\rdpsign.exe
2014-08-04 18:35:23 ----A---- C:\Windows\system32\fontext.dll
2014-08-04 18:35:23 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2014-08-04 18:35:23 ----A---- C:\Windows\system32\dps.dll
2014-08-04 18:35:22 ----A---- C:\Windows\SYSWOW64\wdc.dll
2014-08-04 18:35:22 ----A---- C:\Windows\SYSWOW64\netid.dll
2014-08-04 18:35:22 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-08-04 18:35:22 ----A---- C:\Windows\system32\mprddm.dll
2014-08-04 18:35:22 ----A---- C:\Windows\system32\mblctr.exe
2014-08-04 18:35:22 ----A---- C:\Windows\system32\Display.dll
2014-08-04 18:35:22 ----A---- C:\Windows\system32\batmeter.dll
2014-08-04 18:35:22 ----A---- C:\Windows\system32\AxInstSv.dll
2014-08-04 18:35:21 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2014-08-04 18:35:21 ----A---- C:\Windows\SYSWOW64\Vault.dll
2014-08-04 18:35:21 ----A---- C:\Windows\SYSWOW64\untfs.dll
2014-08-04 18:35:21 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2014-08-04 18:35:21 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2014-08-04 18:35:21 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-08-04 18:35:21 ----A---- C:\Windows\SYSWOW64\nci.dll
2014-08-04 18:35:21 ----A---- C:\Windows\system32\wmpsrcwp.dll
2014-08-04 18:35:21 ----A---- C:\Windows\system32\DiagCpl.dll
2014-08-04 18:35:20 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2014-08-04 18:35:20 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2014-08-04 18:35:20 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2014-08-04 18:35:20 ----A---- C:\Windows\system32\usercpl.dll
2014-08-04 18:35:20 ----A---- C:\Windows\system32\rtutils.dll
2014-08-04 18:35:20 ----A---- C:\Windows\system32\provsvc.dll
2014-08-04 18:35:20 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2014-08-04 18:35:20 ----A---- C:\Windows\system32\bootres.dll
2014-08-04 18:35:19 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2014-08-04 18:35:19 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2014-08-04 18:35:19 ----A---- C:\Windows\SYSWOW64\Display.dll
2014-08-04 18:35:19 ----A---- C:\Windows\system32\wpccpl.dll
2014-08-04 18:35:19 ----A---- C:\Windows\system32\sppsvc.exe
2014-08-04 18:35:19 ----A---- C:\Windows\system32\SndVolSSO.dll
2014-08-04 18:35:19 ----A---- C:\Windows\system32\rasppp.dll
2014-08-04 18:35:19 ----A---- C:\Windows\system32\drivers\winhv.sys
2014-08-04 18:35:19 ----A---- C:\Windows\system32\dot3cfg.dll
2014-08-04 18:35:18 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2014-08-04 18:35:18 ----A---- C:\Windows\SYSWOW64\userinit.exe
2014-08-04 18:35:18 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2014-08-04 18:35:18 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2014-08-04 18:35:18 ----A---- C:\Windows\system32\hbaapi.dll
2014-08-04 18:35:18 ----A---- C:\Windows\system32\dxdiagn.dll
2014-08-04 18:35:18 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2014-08-04 18:35:17 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2014-08-04 18:35:17 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2014-08-04 18:35:17 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2014-08-04 18:35:17 ----A---- C:\Windows\system32\taskmgr.exe
2014-08-04 18:35:17 ----A---- C:\Windows\system32\proquota.exe
2014-08-04 18:35:17 ----A---- C:\Windows\system32\prnfldr.dll
2014-08-04 18:35:17 ----A---- C:\Windows\system32\pdh.dll
2014-08-04 18:35:17 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2014-08-04 18:35:16 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2014-08-04 18:35:16 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2014-08-04 18:35:16 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2014-08-04 18:35:16 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2014-08-04 18:35:16 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2014-08-04 18:35:16 ----A---- C:\Windows\SYSWOW64\cabview.dll
2014-08-04 18:35:16 ----A---- C:\Windows\system32\userinit.exe
2014-08-04 18:35:16 ----A---- C:\Windows\system32\untfs.dll
2014-08-04 18:35:16 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2014-08-04 18:35:15 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2014-08-04 18:35:15 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2014-08-04 18:35:15 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2014-08-04 18:35:15 ----A---- C:\Windows\system32\accessibilitycpl.dll
2014-08-04 18:35:14 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2014-08-04 18:35:14 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2014-08-04 18:35:14 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2014-08-04 18:35:14 ----A---- C:\Windows\system32\zipfldr.dll
2014-08-04 18:35:14 ----A---- C:\Windows\system32\slui.exe
2014-08-04 18:35:14 ----A---- C:\Windows\system32\drivers\storvsc.sys
2014-08-04 18:35:14 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2014-08-04 18:35:13 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2014-08-04 18:35:13 ----A---- C:\Windows\SYSWOW64\scecli.dll
2014-08-04 18:35:13 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-08-04 18:35:13 ----A---- C:\Windows\SYSWOW64\mscms.dll
2014-08-04 18:35:13 ----A---- C:\Windows\SYSWOW64\localsec.dll
2014-08-04 18:35:13 ----A---- C:\Windows\SYSWOW64\fontext.dll
2014-08-04 18:35:13 ----A---- C:\Windows\system32\sud.dll
2014-08-04 18:35:13 ----A---- C:\Windows\system32\DeviceCenter.dll
2014-08-04 18:35:12 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2014-08-04 18:35:12 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2014-08-04 18:35:12 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2014-08-04 18:35:12 ----A---- C:\Windows\system32\taskbarcpl.dll
2014-08-04 18:35:12 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2014-08-04 18:35:12 ----A---- C:\Windows\system32\networkmap.dll
2014-08-04 18:35:12 ----A---- C:\Windows\system32\dot3svc.dll
2014-08-04 18:35:12 ----A---- C:\Windows\system32\cryptui.dll
2014-08-04 18:35:12 ----A---- C:\Windows\system32\ActionCenter.dll
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\VAN.dll
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2014-08-04 18:35:11 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2014-08-04 18:35:11 ----A---- C:\Windows\system32\twext.dll
2014-08-04 18:35:11 ----A---- C:\Windows\system32\OobeFldr.dll
2014-08-04 18:35:11 ----A---- C:\Windows\system32\bcdedit.exe
2014-08-04 18:35:10 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2014-08-04 18:35:10 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2014-08-04 18:35:10 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2014-08-04 18:35:10 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\uxlib.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\tzutil.exe
2014-08-04 18:35:10 ----A---- C:\Windows\system32\sisbkup.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\recovery.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\isoburn.exe
2014-08-04 18:35:10 ----A---- C:\Windows\system32\dsuiext.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2014-08-04 18:35:10 ----A---- C:\Windows\system32\cca.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\azroleui.dll
2014-08-04 18:35:10 ----A---- C:\Windows\system32\asycfilt.dll
2014-08-04 18:35:09 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2014-08-04 18:35:09 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2014-08-04 18:35:09 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2014-08-04 18:35:09 ----A---- C:\Windows\system32\systemcpl.dll.bak
2014-08-04 18:35:09 ----A---- C:\Windows\system32\systemcpl.dll
2014-08-04 18:35:09 ----A---- C:\Windows\system32\syncui.dll
2014-08-04 18:35:09 ----A---- C:\Windows\system32\sdcpl.dll
2014-08-04 18:35:09 ----A---- C:\Windows\system32\recdisc.exe
2014-08-04 18:35:09 ----A---- C:\Windows\system32\netplwiz.dll
2014-08-04 18:35:09 ----A---- C:\Windows\system32\httpapi.dll
2014-08-04 18:35:09 ----A---- C:\Windows\system32\efscore.dll
2014-08-04 18:35:09 ----A---- C:\Windows\system32\drivers\sdbus.sys
2014-08-04 18:35:08 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2014-08-04 18:35:08 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2014-08-04 18:35:08 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2014-08-04 18:35:08 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2014-08-04 18:35:08 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\wlanmsm.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\sysclass.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\shwebsvc.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\sdrsvc.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\ncryptui.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\fvecpl.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2014-08-04 18:35:08 ----A---- C:\Windows\system32\drivers\mpio.sys
2014-08-04 18:35:08 ----A---- C:\Windows\system32\certcli.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\autoplay.dll
2014-08-04 18:35:08 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2014-08-04 18:35:07 ----A---- C:\Windows\SYSWOW64\wusa.exe
2014-08-04 18:35:07 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2014-08-04 18:35:07 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2014-08-04 18:35:07 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2014-08-04 18:35:07 ----A---- C:\Windows\system32\spwizeng.dll
2014-08-04 18:35:07 ----A---- C:\Windows\system32\msvidc32.dll
2014-08-04 18:35:07 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2014-08-04 18:35:06 ----A---- C:\Windows\SYSWOW64\sud.dll
2014-08-04 18:35:06 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2014-08-04 18:35:06 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2014-08-04 18:35:06 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2014-08-04 18:35:06 ----A---- C:\Windows\system32\vdsutil.dll
2014-08-04 18:35:06 ----A---- C:\Windows\system32\termmgr.dll
2014-08-04 18:35:06 ----A---- C:\Windows\system32\MFPlay.dll
2014-08-04 18:35:05 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2014-08-04 18:35:05 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2014-08-04 18:35:05 ----A---- C:\Windows\SYSWOW64\ftp.exe
2014-08-04 18:35:05 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2014-08-04 18:35:05 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2014-08-04 18:35:05 ----A---- C:\Windows\system32\sethc.exe
2014-08-04 18:35:05 ----A---- C:\Windows\system32\ReAgent.dll
2014-08-04 18:35:05 ----A---- C:\Windows\system32\ntlanman.dll
2014-08-04 18:35:05 ----A---- C:\Windows\system32\msscp.dll
2014-08-04 18:35:04 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2014-08-04 18:35:04 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2014-08-04 18:35:04 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2014-08-04 18:35:04 ----A---- C:\Windows\SYSWOW64\efscore.dll
2014-08-04 18:35:04 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2014-08-04 18:35:04 ----A---- C:\Windows\system32\sqlcese30.dll
2014-08-04 18:35:04 ----A---- C:\Windows\system32\rdpd3d.dll
2014-08-04 18:35:04 ----A---- C:\Windows\system32\iprtrmgr.dll
2014-08-04 18:35:04 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2014-08-04 18:35:03 ----A---- C:\Windows\SYSWOW64\syncui.dll
2014-08-04 18:35:03 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2014-08-04 18:35:03 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2014-08-04 18:35:03 ----A---- C:\Windows\system32\wmdrmsdk.dll
2014-08-04 18:35:03 ----A---- C:\Windows\system32\ssText3d.scr
2014-08-04 18:35:03 ----A---- C:\Windows\system32\srvcli.dll
2014-08-04 18:35:03 ----A---- C:\Windows\system32\slwga.dll.bak
2014-08-04 18:35:03 ----A---- C:\Windows\system32\slwga.dll
2014-08-04 18:35:03 ----A---- C:\Windows\system32\iyuv_32.dll
2014-08-04 18:35:03 ----A---- C:\Windows\system32\iTVData.dll
2014-08-04 18:35:03 ----A---- C:\Windows\system32\drmmgrtn.dll
2014-08-04 18:35:03 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2014-08-04 18:35:02 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2014-08-04 18:35:02 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2014-08-04 18:35:02 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2014-08-04 18:35:02 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2014-08-04 18:35:02 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2014-08-04 18:35:02 ----A---- C:\Windows\system32\nslookup.exe
2014-08-04 18:35:02 ----A---- C:\Windows\system32\msiexec.exe
2014-08-04 18:35:01 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2014-08-04 18:35:01 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2014-08-04 18:35:01 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2014-08-04 18:35:01 ----A---- C:\Windows\system32\wavemsp.dll
2014-08-04 18:35:01 ----A---- C:\Windows\system32\ntprint.dll
2014-08-04 18:35:01 ----A---- C:\Windows\system32\NAPHLPR.DLL
2014-08-04 18:35:01 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2014-08-04 18:35:01 ----A---- C:\Windows\system32\acppage.dll
2014-08-04 18:35:00 ----A---- C:\Windows\SYSWOW64\sethc.exe
2014-08-04 18:35:00 ----A---- C:\Windows\SYSWOW64\riched20.dll
2014-08-04 18:35:00 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2014-08-04 18:35:00 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2014-08-04 18:35:00 ----A---- C:\Windows\system32\srrstr.dll
2014-08-04 18:35:00 ----A---- C:\Windows\system32\sppnp.dll
2014-08-04 18:35:00 ----A---- C:\Windows\system32\bcdboot.exe
2014-08-04 18:34:59 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2014-08-04 18:34:59 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2014-08-04 18:34:59 ----A---- C:\Windows\SYSWOW64\migisol.dll
2014-08-04 18:34:59 ----A---- C:\Windows\SYSWOW64\fms.dll
2014-08-04 18:34:59 ----A---- C:\Windows\SYSWOW64\dpx.dll
2014-08-04 18:34:59 ----A---- C:\Windows\SYSWOW64\activeds.dll
2014-08-04 18:34:59 ----A---- C:\Windows\system32\certprop.dll
2014-08-04 18:34:58 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2014-08-04 18:34:58 ----A---- C:\Windows\system32\wkscli.dll
2014-08-04 18:34:58 ----A---- C:\Windows\system32\remotepg.dll
2014-08-04 18:34:58 ----A---- C:\Windows\system32\networkexplorer.dll
2014-08-04 18:34:58 ----A---- C:\Windows\system32\cabinet.dll
2014-08-04 18:34:57 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2014-08-04 18:34:57 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2014-08-04 18:34:57 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2014-08-04 18:34:57 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2014-08-04 18:34:57 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2014-08-04 18:34:57 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2014-08-04 18:34:57 ----A---- C:\Windows\system32\WinSCard.dll
2014-08-04 18:34:57 ----A---- C:\Windows\system32\PresentationSettings.exe
2014-08-04 18:34:57 ----A---- C:\Windows\system32\dfrgui.exe
2014-08-04 18:34:56 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2014-08-04 18:34:56 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2014-08-04 18:34:56 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2014-08-04 18:34:56 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2014-08-04 18:34:56 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2014-08-04 18:34:56 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2014-08-04 18:34:56 ----A---- C:\Windows\system32\wvc.dll
2014-08-04 18:34:56 ----A---- C:\Windows\system32\wsnmp32.dll
2014-08-04 18:34:56 ----A---- C:\Windows\system32\wmpdxm.dll
2014-08-04 18:34:56 ----A---- C:\Windows\system32\net1.exe
2014-08-04 18:34:56 ----A---- C:\Windows\system32\ftp.exe
2014-08-04 18:34:55 ----A---- C:\Windows\SYSWOW64\wvc.dll
2014-08-04 18:34:55 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2014-08-04 18:34:55 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2014-08-04 18:34:55 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2014-08-04 18:34:55 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2014-08-04 18:34:55 ----A---- C:\Windows\SYSWOW64\mstask.dll
2014-08-04 18:34:55 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2014-08-04 18:34:55 ----A---- C:\Windows\system32\wsqmcons.exe
2014-08-04 18:34:55 ----A---- C:\Windows\system32\wmdrmdev.dll
2014-08-04 18:34:55 ----A---- C:\Windows\system32\WerFaultSecure.exe
2014-08-04 18:34:55 ----A---- C:\Windows\system32\msyuv.dll
2014-08-04 18:34:55 ----A---- C:\Windows\system32\mfps.dll
2014-08-04 18:34:55 ----A---- C:\Windows\system32\blackbox.dll
2014-08-04 18:34:54 ----A---- C:\Windows\twain_32.dll
2014-08-04 18:34:54 ----A---- C:\Windows\SYSWOW64\twext.dll
2014-08-04 18:34:54 ----A---- C:\Windows\SYSWOW64\qcap.dll
2014-08-04 18:34:54 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2014-08-04 18:34:54 ----A---- C:\Windows\system32\unimdmat.dll
2014-08-04 18:34:54 ----A---- C:\Windows\system32\OpcServices.dll
2014-08-04 18:34:54 ----A---- C:\Windows\system32\msrle32.dll
2014-08-04 18:34:54 ----A---- C:\Windows\system32\mapistub.dll
2014-08-04 18:34:54 ----A---- C:\Windows\system32\mapi32.dll
2014-08-04 18:34:54 ----A---- C:\Windows\system32\Bubbles.scr
2014-08-04 18:34:53 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2014-08-04 18:34:53 ----A---- C:\Windows\SYSWOW64\slwga.dll.bak
2014-08-04 18:34:53 ----A---- C:\Windows\SYSWOW64\slwga.dll
2014-08-04 18:34:53 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2014-08-04 18:34:53 ----A---- C:\Windows\SYSWOW64\qasf.dll
2014-08-04 18:34:53 ----A---- C:\Windows\system32\tsbyuv.dll
2014-08-04 18:34:53 ----A---- C:\Windows\system32\seclogon.dll
2014-08-04 18:34:53 ----A---- C:\Windows\system32\iscsium.dll
2014-08-04 18:34:53 ----A---- C:\Windows\system32\ifsutil.dll
2014-08-04 18:34:53 ----A---- C:\Windows\system32\diskraid.exe
2014-08-04 18:34:52 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2014-08-04 18:34:52 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2014-08-04 18:34:52 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2014-08-04 18:34:52 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2014-08-04 18:34:52 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2014-08-04 18:34:52 ----A---- C:\Windows\system32\Ribbons.scr
2014-08-04 18:34:52 ----A---- C:\Windows\system32\Mystify.scr
2014-08-04 18:34:52 ----A---- C:\Windows\system32\muifontsetup.dll
2014-08-04 18:34:52 ----A---- C:\Windows\system32\drivers\umbus.sys
2014-08-04 18:34:51 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2014-08-04 18:34:51 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2014-08-04 18:34:51 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2014-08-04 18:34:51 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2014-08-04 18:34:51 ----A---- C:\Windows\system32\wmpshell.dll
2014-08-04 18:34:51 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2014-08-04 18:34:51 ----A---- C:\Windows\system32\rdpencom.dll
2014-08-04 18:34:51 ----A---- C:\Windows\system32\perfmon.exe
2014-08-04 18:34:50 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2014-08-04 18:34:50 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2014-08-04 18:34:50 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2014-08-04 18:34:50 ----A---- C:\Windows\SYSWOW64\msscp.dll
2014-08-04 18:34:50 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2014-08-04 18:34:50 ----A---- C:\Windows\SYSWOW64\acppage.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\umb.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\tlscsp.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\qasf.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\netutils.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2014-08-04 18:34:50 ----A---- C:\Windows\system32\FXSAPI.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\dbghelp.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\AzSqlExt.dll
2014-08-04 18:34:50 ----A---- C:\Windows\system32\ActionQueue.dll
2014-08-04 18:34:49 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2014-08-04 18:34:49 ----A---- C:\Windows\SYSWOW64\raschap.dll
2014-08-04 18:34:49 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2014-08-04 18:34:49 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2014-08-04 18:34:49 ----A---- C:\Windows\SYSWOW64\input.dll
2014-08-04 18:34:49 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2014-08-04 18:34:49 ----A---- C:\Windows\system32\wpdwcn.dll
2014-08-04 18:34:49 ----A---- C:\Windows\system32\wiavideo.dll
2014-08-04 18:34:49 ----A---- C:\Windows\system32\syssetup.dll
2014-08-04 18:34:49 ----A---- C:\Windows\system32\runonce.exe
2014-08-04 18:34:49 ----A---- C:\Windows\system32\raschap.dll
2014-08-04 18:34:49 ----A---- C:\Windows\bfsvc.exe
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\onexui.dll
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2014-08-04 18:34:48 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2014-08-04 18:34:48 ----A---- C:\Windows\system32\WMVSDECD.DLL
2014-08-04 18:34:48 ----A---- C:\Windows\system32\WMADMOD.DLL
2014-08-04 18:34:48 ----A---- C:\Windows\system32\vdsbas.dll
2014-08-04 18:34:48 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2014-08-04 18:34:48 ----A---- C:\Windows\system32\MdSched.exe
2014-08-04 18:34:47 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2014-08-04 18:34:47 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2014-08-04 18:34:47 ----A---- C:\Windows\SYSWOW64\runonce.exe
2014-08-04 18:34:47 ----A---- C:\Windows\SYSWOW64\logagent.exe
2014-08-04 18:34:47 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2014-08-04 18:34:47 ----A---- C:\Windows\system32\nltest.exe
2014-08-04 18:34:47 ----A---- C:\Windows\system32\mstask.dll
2014-08-04 18:34:47 ----A---- C:\Windows\system32\Mcx2Svc.dll
2014-08-04 18:34:47 ----A---- C:\Windows\system32\drivers\rmcast.sys
2014-08-04 18:34:47 ----A---- C:\Windows\system32\bitsadmin.exe
2014-08-04 18:34:46 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2014-08-04 18:34:46 ----A---- C:\Windows\SYSWOW64\shacct.dll
2014-08-04 18:34:46 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2014-08-04 18:34:46 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2014-08-04 18:34:46 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2014-08-04 18:34:46 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2014-08-04 18:34:46 ----A---- C:\Windows\system32\wmdrmnet.dll
2014-08-04 18:34:46 ----A---- C:\Windows\system32\vss_ps.dll
2014-08-04 18:34:46 ----A---- C:\Windows\system32\tabcal.exe
2014-08-04 18:34:46 ----A---- C:\Windows\system32\shacct.dll
2014-08-04 18:34:46 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2014-08-04 18:34:46 ----A---- C:\Windows\system32\logman.exe
2014-08-04 18:34:46 ----A---- C:\Windows\system32\cscapi.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2014-08-04 18:34:45 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2014-08-04 18:34:45 ----A---- C:\Windows\system32\WPDSp.dll
2014-08-04 18:34:45 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2014-08-04 18:34:45 ----A---- C:\Windows\system32\qcap.dll
2014-08-04 18:34:45 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2014-08-04 18:34:45 ----A---- C:\Windows\system32\msnetobj.dll
2014-08-04 18:34:45 ----A---- C:\Windows\system32\CscMig.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\pdh.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\logman.exe
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2014-08-04 18:34:44 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2014-08-04 18:34:44 ----A---- C:\Windows\system32\vmictimeprovider.dll
2014-08-04 18:34:44 ----A---- C:\Windows\system32\spbcd.dll
2014-08-04 18:34:44 ----A---- C:\Windows\system32\qdv.dll
2014-08-04 18:34:44 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2014-08-04 18:34:43 ----A---- C:\Windows\SYSWOW64\utildll.dll
2014-08-04 18:34:43 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2014-08-04 18:34:43 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2014-08-04 18:34:43 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2014-08-04 18:34:43 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2014-08-04 18:34:43 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2014-08-04 18:34:43 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2014-08-04 18:34:43 ----A---- C:\Windows\system32\takeown.exe
2014-08-04 18:34:43 ----A---- C:\Windows\system32\PnPUnattend.exe
2014-08-04 18:34:43 ----A---- C:\Windows\system32\fphc.dll
2014-08-04 18:34:43 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2014-08-04 18:34:43 ----A---- C:\Windows\system32\dot3ui.dll
2014-08-04 18:34:43 ----A---- C:\Windows\system32\amstream.dll
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\takeown.exe
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\fphc.dll
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2014-08-04 18:34:42 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2014-08-04 18:34:42 ----A---- C:\Windows\system32\vfwwdm32.dll
2014-08-04 18:34:42 ----A---- C:\Windows\system32\EhStorAPI.dll
2014-08-04 18:34:41 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2014-08-04 18:34:41 ----A---- C:\Windows\SYSWOW64\qdv.dll
2014-08-04 18:34:41 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2014-08-04 18:34:41 ----A---- C:\Windows\system32\shimgvw.dll
2014-08-04 18:34:41 ----A---- C:\Windows\system32\QCLIPROV.DLL
2014-08-04 18:34:41 ----A---- C:\Windows\system32\nrpsrv.dll
2014-08-04 18:34:41 ----A---- C:\Windows\system32\iasrecst.dll
2014-08-04 18:34:41 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2014-08-04 18:34:41 ----A---- C:\Windows\system32\djoin.exe
2014-08-04 18:34:41 ----A---- C:\Windows\system32\cmstp.exe
2014-08-04 18:34:41 ----A---- C:\Windows\system32\CertPolEng.dll

A poslední:

2014-08-04 18:34:40 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2014-08-04 18:34:40 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2014-08-04 18:34:40 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2014-08-04 18:34:40 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2014-08-04 18:34:40 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2014-08-04 18:34:40 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2014-08-04 18:34:40 ----A---- C:\Windows\SYSWOW64\cca.dll
2014-08-04 18:34:40 ----A---- C:\Windows\system32\WavDest.dll
2014-08-04 18:34:40 ----A---- C:\Windows\system32\fdProxy.dll
2014-08-04 18:34:40 ----A---- C:\Windows\system32\drivers\pacer.sys
2014-08-04 18:34:39 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2014-08-04 18:34:39 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2014-08-04 18:34:39 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2014-08-04 18:34:39 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2014-08-04 18:34:39 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2014-08-04 18:34:39 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2014-08-04 18:34:39 ----A---- C:\Windows\system32\relog.exe
2014-08-04 18:34:39 ----A---- C:\Windows\system32\mydocs.dll
2014-08-04 18:34:39 ----A---- C:\Windows\system32\MultiDigiMon.exe
2014-08-04 18:34:39 ----A---- C:\Windows\system32\KMSVC.DLL
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\relog.exe
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2014-08-04 18:34:38 ----A---- C:\Windows\SYSWOW64\amstream.dll
2014-08-04 18:34:38 ----A---- C:\Windows\system32\sscore.dll
2014-08-04 18:34:38 ----A---- C:\Windows\system32\msdmo.dll
2014-08-04 18:34:38 ----A---- C:\Windows\system32\mobsync.exe
2014-08-04 18:34:38 ----A---- C:\Windows\system32\itircl.dll
2014-08-04 18:34:38 ----A---- C:\Windows\system32\iscsicli.exe
2014-08-04 18:34:38 ----A---- C:\Windows\system32\diskpart.exe
2014-08-04 18:34:38 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2014-08-04 18:34:38 ----A---- C:\Windows\system32\BdeHdCfg.exe
2014-08-04 18:34:37 ----A---- C:\Windows\SYSWOW64\resutils.dll
2014-08-04 18:34:37 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2014-08-04 18:34:37 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2014-08-04 18:34:37 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2014-08-04 18:34:37 ----A---- C:\Windows\SYSWOW64\itircl.dll
2014-08-04 18:34:37 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2014-08-04 18:34:37 ----A---- C:\Windows\system32\dot3msm.dll
2014-08-04 18:34:36 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2014-08-04 18:34:36 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2014-08-04 18:34:36 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2014-08-04 18:34:36 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2014-08-04 18:34:36 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2014-08-04 18:34:36 ----A---- C:\Windows\system32\qprocess.exe
2014-08-04 18:34:36 ----A---- C:\Windows\system32\mciqtz32.dll
2014-08-04 18:34:36 ----A---- C:\Windows\system32\choice.exe
2014-08-04 18:34:36 ----A---- C:\Windows\system32\FXSTIFF.dll
2014-08-04 18:34:36 ----A---- C:\Windows\system32\findstr.exe
2014-08-04 18:34:36 ----A---- C:\Windows\system32\eappgnui.dll
2014-08-04 18:34:35 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2014-08-04 18:34:35 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2014-08-04 18:34:35 ----A---- C:\Windows\SYSWOW64\netutils.dll
2014-08-04 18:34:35 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2014-08-04 18:34:35 ----A---- C:\Windows\SYSWOW64\findstr.exe
2014-08-04 18:34:35 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2014-08-04 18:34:35 ----A---- C:\Windows\system32\sppc.dll
2014-08-04 18:34:35 ----A---- C:\Windows\system32\onexui.dll
2014-08-04 18:34:35 ----A---- C:\Windows\system32\luainstall.dll
2014-08-04 18:34:35 ----A---- C:\Windows\system32\chglogon.exe
2014-08-04 18:34:35 ----A---- C:\Windows\system32\drivers\tunnel.sys
2014-08-04 18:34:34 ----A---- C:\Windows\SYSWOW64\sppc.dll
2014-08-04 18:34:34 ----A---- C:\Windows\SYSWOW64\spopk.dll
2014-08-04 18:34:34 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2014-08-04 18:34:34 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2014-08-04 18:34:34 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2014-08-04 18:34:34 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2014-08-04 18:34:34 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2014-08-04 18:34:34 ----A---- C:\Windows\system32\spopk.dll
2014-08-04 18:34:34 ----A---- C:\Windows\system32\schedcli.dll
2014-08-04 18:34:34 ----A---- C:\Windows\system32\repair-bde.exe
2014-08-04 18:34:34 ----A---- C:\Windows\system32\qappsrv.exe
2014-08-04 18:34:34 ----A---- C:\Windows\system32\manage-bde.exe
2014-08-04 18:34:34 ----A---- C:\Windows\system32\inetmib1.dll
2014-08-04 18:34:34 ----A---- C:\Windows\system32\drivers\dfsc.sys
2014-08-04 18:34:33 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2014-08-04 18:34:33 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2014-08-04 18:34:33 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2014-08-04 18:34:33 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2014-08-04 18:34:33 ----A---- C:\Windows\system32\RDPENCDD.dll
2014-08-04 18:34:33 ----A---- C:\Windows\system32\odbcconf.dll
2014-08-04 18:34:33 ----A---- C:\Windows\system32\chgport.exe
2014-08-04 18:34:32 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2014-08-04 18:34:32 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2014-08-04 18:34:32 ----A---- C:\Windows\system32\vmstorfltres.dll
2014-08-04 18:34:32 ----A---- C:\Windows\system32\vmicres.dll
2014-08-04 18:34:32 ----A---- C:\Windows\system32\tskill.exe
2014-08-04 18:34:32 ----A---- C:\Windows\system32\tsdiscon.exe
2014-08-04 18:34:32 ----A---- C:\Windows\system32\tscon.exe
2014-08-04 18:34:32 ----A---- C:\Windows\system32\rwinsta.exe
2014-08-04 18:34:32 ----A---- C:\Windows\system32\logoff.exe
2014-08-04 18:34:32 ----A---- C:\Windows\system32\chgusr.exe
2014-08-04 18:34:32 ----A---- C:\Windows\system32\fixmapi.exe
2014-08-04 18:34:31 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-08-04 18:34:31 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2014-08-04 18:34:31 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2014-08-04 18:34:31 ----A---- C:\Windows\system32\vmbusres.dll
2014-08-04 18:34:31 ----A---- C:\Windows\system32\UIRibbonRes.dll
2014-08-04 18:34:31 ----A---- C:\Windows\system32\TRAPI.dll
2014-08-04 18:34:31 ----A---- C:\Windows\system32\shadow.exe
2014-08-04 18:34:31 ----A---- C:\Windows\system32\FXSMON.dll
2014-08-04 18:34:31 ----A---- C:\Windows\system32\elsTrans.dll
2014-08-04 18:34:31 ----A---- C:\Windows\system32\drivers\tdi.sys
2014-08-04 18:34:30 ----A---- C:\Windows\SYSWOW64\perfts.dll
2014-08-04 18:34:30 ----A---- C:\Windows\SYSWOW64\imm32.dll
2014-08-04 18:34:30 ----A---- C:\Windows\system32\wshbth.dll
2014-08-04 18:34:30 ----A---- C:\Windows\system32\reset.exe
2014-08-04 18:34:30 ----A---- C:\Windows\system32\query.exe
2014-08-04 18:34:30 ----A---- C:\Windows\system32\napdsnap.dll
2014-08-04 18:34:30 ----A---- C:\Windows\system32\LogonUI.exe
2014-08-04 18:34:30 ----A---- C:\Windows\system32\change.exe
2014-08-04 18:34:30 ----A---- C:\Windows\system32\dsauth.dll
2014-08-04 18:34:29 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2014-08-04 18:34:29 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2014-08-04 18:34:29 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2014-08-04 18:34:29 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2014-08-04 18:34:29 ----A---- C:\Windows\system32\FXSUNATD.exe
2014-08-04 18:34:29 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2014-08-04 18:34:29 ----A---- C:\Windows\system32\cscdll.dll
2014-08-04 18:34:29 ----A---- C:\Windows\system32\bitsperf.dll
2014-08-04 18:34:28 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2014-08-04 18:34:28 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2014-08-04 18:34:28 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2014-08-04 18:34:28 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2014-08-04 18:34:28 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2014-08-04 18:34:28 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2014-08-04 18:34:27 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2014-08-04 18:34:27 ----A---- C:\Windows\SYSWOW64\sscore.dll
2014-08-04 18:34:27 ----A---- C:\Windows\SYSWOW64\shgina.dll
2014-08-04 18:34:27 ----A---- C:\Windows\system32\wsdchngr.dll
2014-08-04 18:34:27 ----A---- C:\Windows\system32\shgina.dll
2014-08-04 18:34:26 ----A---- C:\Windows\SYSWOW64\riched32.dll
2014-08-04 18:34:26 ----A---- C:\Windows\system32\wshirda.dll
2014-08-04 18:34:26 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2014-08-04 18:34:26 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2014-08-04 18:34:25 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2014-08-04 18:34:25 ----A---- C:\Windows\system32\rdpcfgex.dll
2014-08-04 18:34:25 ----A---- C:\Windows\system32\drivers\hidusb.sys
2014-08-04 18:34:25 ----A---- C:\Windows\system32\drivers\appid.sys
2014-08-04 18:34:24 ----A---- C:\Windows\system32\vmbuspipe.dll
2014-08-04 18:34:24 ----A---- C:\Windows\system32\spwmp.dll
2014-08-04 18:34:24 ----A---- C:\Windows\system32\riched32.dll
2014-08-04 18:34:24 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2014-08-04 18:34:24 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2014-08-04 18:34:24 ----A---- C:\Windows\system32\browseui.dll
2014-08-04 18:34:23 ----A---- C:\Windows\SYSWOW64\browseui.dll
2014-08-04 18:34:23 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2014-08-04 18:34:23 ----A---- C:\Windows\system32\IcCoinstall.dll
2014-08-04 18:34:23 ----A---- C:\Windows\system32\C_ISCII.DLL
2014-08-04 18:34:22 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2014-08-04 18:34:22 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2014-08-04 18:34:22 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2014-08-04 18:34:22 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2014-08-04 18:34:22 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2014-08-04 18:34:22 ----A---- C:\Windows\system32\VmdCoinstall.dll
2014-08-04 18:34:22 ----A---- C:\Windows\system32\shunimpl.dll
2014-08-04 18:34:22 ----A---- C:\Windows\system32\dxmasf.dll
2014-08-04 18:34:22 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2014-08-04 18:34:22 ----A---- C:\Windows\system32\drivers\scfilter.sys
2014-08-04 18:34:22 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2014-08-04 18:34:22 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2014-08-04 18:34:22 ----A---- C:\Windows\system32\drivers\cdrom.sys
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDTUQ.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDTUF.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDSG.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDSF.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDPO.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDNEPR.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\kbdlk41a.dll
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDINTAM.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDINBEN.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDGR1.DLL
2014-08-04 18:34:21 ----A---- C:\Windows\system32\KBDGKL.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\spwizres.dll
2014-08-04 18:34:20 ----A---- C:\Windows\system32\pifmgr.dll
2014-08-04 18:34:20 ----A---- C:\Windows\system32\nlsbres.dll
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDUS.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDTURME.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDMON.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDMAORI.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDLT1.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDINTEL.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDINORI.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDINMAR.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDINKAN.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDINHIN.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDGEO.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDCZ1.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDBULG.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDBLR.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-08-04 18:34:20 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2014-08-04 18:34:20 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2014-08-04 18:34:20 ----A---- C:\Windows\system32\BlbEvents.dll
2014-08-04 18:34:06 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2014-08-04 18:34:06 ----A---- C:\Windows\system32\dpx.dll
2014-08-04 18:33:58 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2014-08-04 18:33:43 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2014-08-04 18:31:56 ----A---- C:\Windows\system32\wbemcomn.dll
2014-08-04 18:22:20 ----D---- C:\Program Files\Common Files\DESIGNER
2014-08-04 18:21:39 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2014-08-04 18:21:10 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-08-04 18:20:22 ----D---- C:\Windows\PCHEALTH
2014-08-04 18:20:22 ----D---- C:\Program Files\Microsoft SQL Server
2014-08-04 18:20:22 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-08-04 18:16:51 ----D---- C:\Program Files\Microsoft Analysis Services
2014-08-04 18:16:51 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2014-08-04 18:16:21 ----D---- C:\Program Files (x86)\Microsoft Office
2014-08-04 18:16:12 ----D---- C:\Program Files\Microsoft Office
2014-08-04 18:16:10 ----D---- C:\ProgramData\Microsoft Help
2014-08-04 18:14:17 ----RHD---- C:\MSOCache
2014-08-04 18:02:55 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-08-04 18:02:55 ----A---- C:\Windows\system32\esent.dll
2014-08-04 18:02:54 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-08-04 18:02:54 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-08-04 18:02:54 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-08-04 18:02:52 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-08-04 18:02:52 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-08-04 18:02:51 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-08-04 18:02:51 ----A---- C:\Windows\system32\fsutil.exe
2014-08-04 18:02:51 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-08-03 22:24:46 ----D---- C:\Program Files (x86)\DsNET Corp
2014-08-03 22:10:22 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2014-08-03 22:10:07 ----A---- C:\Windows\system32\nvsvcr.dll
2014-08-03 22:10:07 ----A---- C:\Windows\system32\nvshext.dll
2014-08-03 22:08:58 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2014-08-03 22:08:58 ----A---- C:\Windows\system32\OpenCL.dll
2014-08-03 22:06:47 ----D---- C:\ProgramData\NVIDIA Corporation
2014-08-03 22:03:28 ----D---- C:\Program Files\NVIDIA Corporation
2014-08-03 21:59:31 ----A---- C:\Windows\system32\Wdfres.dll
2014-08-03 21:59:31 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-08-03 21:53:05 ----D---- C:\Windows\system32\MRT
2014-08-03 21:53:02 ----A---- C:\Windows\system32\MRT.exe
2014-08-03 21:47:43 ----D---- C:\Program Files\Microsoft Silverlight
2014-08-03 21:47:43 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-08-03 21:45:12 ----A---- C:\Windows\system32\browserchoice.exe
2014-08-03 21:37:12 ----D---- C:\Users\Hruboňovi\AppData\Roaming\VitySoft
2014-08-03 21:37:00 ----D---- C:\ProgramData\Oracle
2014-08-03 21:36:57 ----D---- C:\ProgramData\Sun
2014-08-03 21:36:29 ----D---- C:\Program Files (x86)\Java
2014-08-03 21:32:24 ----D---- C:\Program Files\FreeRapid-0.9u3
2014-08-03 21:30:17 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-08-03 21:30:17 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-08-03 21:30:16 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-08-03 21:30:16 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-08-03 21:30:13 ----A---- C:\Windows\system32\WUDFx.dll
2014-08-03 21:30:13 ----A---- C:\Windows\system32\WUDFHost.exe
2014-08-03 21:30:13 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-08-03 21:28:51 ----D---- C:\Program Files\Synaptics
2014-08-03 21:18:24 ----D---- C:\Program Files (x86)\Elaborate Bytes
2014-08-03 20:27:16 ----D---- C:\Program Files\IDT
2014-08-03 20:27:14 ----A---- C:\Windows\system32\stlang64.dll
2014-08-03 20:27:14 ----A---- C:\Windows\system32\idt64mp1.exe
2014-08-03 20:27:14 ----A---- C:\Windows\system32\AESTEC64.dll
2014-08-03 20:27:14 ----A---- C:\Windows\system32\AESTCo64.dll
2014-08-03 20:27:14 ----A---- C:\Windows\system32\AESTAR64.dll
2014-08-03 20:27:14 ----A---- C:\Windows\system32\AESTAC64.dll
2014-08-03 20:27:14 ----A---- C:\Windows\sttray64.exe
2014-08-03 20:27:13 ----D---- C:\Windows\system32\SRSLabs
2014-08-03 20:25:39 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-08-03 20:25:38 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-08-03 20:25:38 ----A---- C:\Windows\system32\wmi.dll
2014-08-03 20:16:06 ----D---- C:\Program Files\Microsoft Security Client
2014-08-03 20:16:06 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-08-03 17:40:12 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-08-03 17:40:12 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-08-03 17:40:12 ----A---- C:\Windows\system32\Wpc.dll
2014-08-03 17:40:12 ----A---- C:\Windows\system32\gameux.dll
2014-08-03 17:38:33 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-08-03 17:38:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-08-03 17:38:33 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-08-03 17:37:39 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-08-03 17:37:39 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-08-03 17:37:39 ----A---- C:\Windows\system32\drivers\srv.sys
2014-08-03 17:37:24 ----A---- C:\Windows\system32\EncDec.dll
2014-08-03 17:37:23 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2014-08-03 17:37:19 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-08-03 17:37:19 ----A---- C:\Windows\system32\ntshrui.dll
2014-08-03 17:37:17 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-08-03 17:37:17 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-08-03 17:37:17 ----A---- C:\Windows\system32\mfc42u.dll
2014-08-03 17:37:17 ----A---- C:\Windows\system32\mfc42.dll
2014-08-03 17:37:07 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-08-03 17:37:07 ----A---- C:\Windows\system32\inetcomm.dll
2014-08-03 17:37:05 ----A---- C:\Windows\system32\msi.dll
2014-08-03 17:37:04 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-03 17:37:02 ----A---- C:\Windows\system32\dnsapi.dll
2014-08-03 17:37:01 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-08-03 17:37:01 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-08-03 17:37:01 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-08-03 17:37:01 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-08-03 17:36:51 ----A---- C:\Windows\system32\dpnet.dll
2014-08-03 17:36:50 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-08-03 17:36:50 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2014-08-03 17:36:50 ----A---- C:\Windows\system32\dpnaddr.dll
2014-08-03 17:36:47 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2014-08-03 17:36:47 ----A---- C:\Windows\system32\rdpcore.dll
2014-08-03 17:36:47 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2014-08-03 17:36:41 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-08-03 17:36:41 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-08-03 17:36:41 ----A---- C:\Windows\system32\oleaut32.dll
2014-08-03 17:36:41 ----A---- C:\Windows\system32\oleacc.dll
2014-08-03 17:36:37 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-08-03 17:36:37 ----A---- C:\Windows\system32\msvcrt.dll
2014-08-03 17:36:35 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-08-03 17:36:35 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-08-03 17:36:35 ----A---- C:\Windows\system32\netapi32.dll
2014-08-03 17:36:35 ----A---- C:\Windows\system32\browser.dll
2014-08-03 17:36:35 ----A---- C:\Windows\system32\browcli.dll
2014-08-03 17:36:32 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-08-03 17:36:26 ----A---- C:\Windows\system32\profsvc.dll
2014-08-03 17:36:26 ----A---- C:\Windows\system32\profprov.dll
2014-08-03 17:35:15 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-08-03 17:35:15 ----A---- C:\Windows\system32\CPFilters.dll
2014-08-03 17:35:14 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-08-03 17:35:14 ----A---- C:\Windows\system32\sbe.dll
2014-08-03 17:35:08 ----A---- C:\Windows\system32\tquery.dll
2014-08-03 17:35:08 ----A---- C:\Windows\system32\mssrch.dll
2014-08-03 17:35:07 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-08-03 17:35:06 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-08-03 17:35:06 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-08-03 17:35:06 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-08-03 17:35:06 ----A---- C:\Windows\system32\mssvp.dll
2014-08-03 17:35:05 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-08-03 17:35:05 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-08-03 17:35:05 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-08-03 17:35:05 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-08-03 17:35:05 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-08-03 17:35:05 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-08-03 17:35:05 ----A---- C:\Windows\system32\mssphtb.dll
2014-08-03 17:35:05 ----A---- C:\Windows\system32\mssph.dll
2014-08-03 17:35:04 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-08-03 17:35:04 ----A---- C:\Windows\system32\msscntrs.dll
2014-08-03 17:35:03 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-08-03 17:35:00 ----A---- C:\Windows\system32\poqexec.exe
2014-08-03 17:34:59 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-08-03 17:34:51 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-08-03 17:34:51 ----A---- C:\Windows\system32\webio.dll
2014-08-03 17:34:31 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2014-08-03 17:34:29 ----A---- C:\Windows\system32\cdosys.dll
2014-08-03 17:34:25 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-08-03 17:34:24 ----A---- C:\Windows\system32\odbccu32.dll
2014-08-03 17:34:24 ----A---- C:\Windows\system32\odbccr32.dll
2014-08-03 17:34:24 ----A---- C:\Windows\system32\odbccp32.dll
2014-08-03 17:34:23 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-08-03 17:34:23 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-08-03 17:34:23 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-08-03 17:34:23 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-08-03 17:34:23 ----A---- C:\Windows\system32\odbctrac.dll
2014-08-03 17:34:22 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-08-03 17:34:20 ----A---- C:\Windows\system32\localspl.dll
2014-08-03 17:34:13 ----A---- C:\Windows\system32\quartz.dll
2014-08-03 17:34:12 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-08-03 17:34:11 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-08-03 17:34:11 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-08-03 17:34:10 ----A---- C:\Windows\system32\rdpwsx.dll
2014-08-03 17:33:56 ----A---- C:\Windows\system32\winresume.exe
2014-08-03 17:33:56 ----A---- C:\Windows\system32\winload.exe
2014-08-03 17:33:56 ----A---- C:\Windows\system32\kdusb.dll
2014-08-03 17:33:56 ----A---- C:\Windows\system32\kdcom.dll
2014-08-03 17:33:56 ----A---- C:\Windows\system32\kd1394.dll
2014-08-03 17:33:55 ----A---- C:\Windows\system32\setbcdlocale.dll
2014-08-03 17:33:54 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-08-03 17:33:54 ----A---- C:\Windows\system32\srcore.dll
2014-08-03 17:33:54 ----A---- C:\Windows\system32\rstrui.exe
2014-08-03 17:33:48 ----A---- C:\Windows\system32\drivers\bowser.sys
2014-08-03 17:33:46 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-08-03 17:33:39 ----A---- C:\Windows\system32\psisdecd.dll
2014-08-03 17:33:38 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-08-03 17:33:33 ----A---- C:\Windows\system32\WFS.exe
2014-08-03 17:33:33 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-08-03 17:33:30 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-08-03 17:33:30 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-08-03 17:33:30 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-08-03 17:33:30 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-08-03 17:33:30 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-08-03 17:33:30 ----A---- C:\Windows\system32\cfgmgr32.dll
2014-08-03 17:33:27 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-08-03 17:33:27 ----A---- C:\Windows\system32\xmllite.dll
2014-08-03 17:33:26 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-08-03 17:33:15 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-08-03 17:33:15 ----A---- C:\Windows\system32\prevhost.exe
2014-08-03 17:33:10 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-08-03 17:33:10 ----A---- C:\Windows\system32\synceng.dll
2014-08-03 17:26:22 ----D---- C:\Windows\Panther
2014-08-03 17:26:10 ----RASH---- C:\BOOTSECT.BAK
2014-08-03 17:26:07 ----SHD---- C:\Boot
2014-08-03 17:15:30 ----D---- C:\Program Files (x86)\Google
2014-08-03 17:13:50 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-08-03 17:13:50 ----A---- C:\Windows\system32\packager.dll
2014-08-03 17:06:05 ----D---- C:\Program Files (x86)\TeamViewer
2014-08-03 17:04:51 ----N---- C:\Windows\system32\MpSigStub.exe
2014-08-03 17:04:01 ----D---- C:\Users\Hruboňovi\AppData\Roaming\TeamViewer
2014-08-03 17:03:46 ----D---- C:\Program Files (x86)\Microsoft
2014-08-03 17:03:08 ----D---- C:\Users\Hruboňovi\AppData\Roaming\GHISLER
2014-08-03 17:02:59 ----D---- C:\Program Files\totalcmd
2014-08-03 17:02:33 ----D---- C:\Users\Hruboňovi\AppData\Roaming\BSplayer Pro
2014-08-03 17:02:33 ----D---- C:\Users\Hruboňovi\AppData\Roaming\BSplayer
2014-08-03 17:02:33 ----D---- C:\Program Files (x86)\Webteh
2014-08-03 17:02:22 ----D---- C:\Program Files (x86)\Tbccint
2014-08-03 17:02:21 ----D---- C:\ProgramData\Tbccint
2014-08-03 16:59:10 ----A---- C:\Windows\system32\wups2.dll
2014-08-03 16:59:10 ----A---- C:\Windows\system32\wucltux.dll
2014-08-03 16:59:10 ----A---- C:\Windows\system32\wuaueng.dll
2014-08-03 16:59:10 ----A---- C:\Windows\system32\wuauclt.exe
2014-08-03 16:59:02 ----A---- C:\Windows\system32\wups.dll
2014-08-03 16:59:02 ----A---- C:\Windows\system32\wudriver.dll
2014-08-03 16:59:02 ----A---- C:\Windows\system32\wuapi.dll
2014-08-03 16:58:54 ----A---- C:\Windows\system32\wuwebv.dll
2014-08-03 16:58:54 ----A---- C:\Windows\system32\wuapp.exe
2014-08-03 16:58:26 ----D---- C:\Program Files (x86)\Microsoft Antimalware
2014-08-03 16:58:21 ----SHD---- C:\Windows\Installer
2014-08-03 16:53:55 ----D---- C:\Program Files (x86)\Intel
2014-08-03 16:53:55 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-08-03 16:53:45 ----D---- C:\Intel
2014-08-03 16:51:51 ----A---- C:\ProgramData\nvModes.dat
2014-08-03 16:48:51 ----D---- C:\Windows\Minidump
2014-08-03 16:48:24 ----D---- C:\ProgramData\NVIDIA
2014-08-03 16:37:39 ----A---- C:\Windows\system32\nvuninst.exe
2014-08-03 16:37:39 ----A---- C:\Windows\system32\nvcpluir.dll
2014-08-03 16:37:39 ----A---- C:\Windows\system32\nvcplui.exe
2014-08-03 16:35:23 ----D---- C:\Users\Hruboňovi\AppData\Roaming\Identities
2014-08-03 16:34:45 ----SD---- C:\Users\Hruboňovi\AppData\Roaming\Microsoft
2014-08-03 16:34:45 ----D---- C:\Users\Hruboňovi\AppData\Roaming\Media Center Programs
2014-08-03 16:33:22 ----SHD---- C:\Recovery
2014-08-03 16:33:22 ----SHD---- C:\ProgramData\Šablony
2014-08-03 16:33:22 ----SHD---- C:\ProgramData\Plocha
2014-08-03 16:33:22 ----SHD---- C:\ProgramData\Oblíbené položky
2014-08-03 16:33:22 ----SHD---- C:\ProgramData\Nabídka Start
2014-08-03 16:33:22 ----SHD---- C:\ProgramData\Dokumenty
2014-08-03 16:33:22 ----SHD---- C:\ProgramData\Data aplikací
2014-08-03 16:29:50 ----D---- C:\Windows\SoftwareDistribution
2014-08-03 16:27:02 ----D---- C:\Windows\Prefetch
2014-08-03 16:26:41 ----SHD---- C:\System Volume Information
2014-08-03 16:26:41 ----ASH---- C:\pagefile.sys
2014-08-03 16:26:41 ----ASH---- C:\hiberfil.sys
2014-08-03 14:52:19 ----A---- C:\Windows\system32\oemdspif.dll
2014-08-03 14:52:18 ----A---- C:\Windows\system32\nvwssr.dll
2014-08-03 14:52:18 ----A---- C:\Windows\system32\nvwss.dll
2014-08-03 14:52:18 ----A---- C:\Windows\system32\nvvsvc.exe
2014-08-03 14:52:18 ----A---- C:\Windows\system32\nvvitvsr.dll
2014-08-03 14:52:18 ----A---- C:\Windows\system32\nvvitvs.dll
2014-08-03 14:52:18 ----A---- C:\Windows\system32\nvudisp.exe
2014-08-03 14:52:18 ----A---- C:\Windows\system32\nvsvc64.dll
2014-08-03 14:52:17 ----A---- C:\Windows\system32\nvmoblsr.dll
2014-08-03 14:52:17 ----A---- C:\Windows\system32\nvmobls.dll
2014-08-03 14:52:17 ----A---- C:\Windows\system32\nvmctray.dll
2014-08-03 14:52:17 ----A---- C:\Windows\system32\nvmccssr.dll
2014-08-03 14:52:17 ----A---- C:\Windows\system32\nvmccss.dll
2014-08-03 14:52:17 ----A---- C:\Windows\system32\nvmccsrs.dll
2014-08-03 14:52:17 ----A---- C:\Windows\system32\nvmccs.dll
2014-08-03 14:52:16 ----A---- C:\Windows\system32\nvgamesr.dll
2014-08-03 14:52:16 ----A---- C:\Windows\system32\nvgames.dll
2014-08-03 14:52:15 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2014-08-03 14:52:15 ----A---- C:\Windows\system32\nvdispsr.dll
2014-08-03 14:52:15 ----A---- C:\Windows\system32\nvdisps.dll
2014-08-03 14:52:15 ----A---- C:\Windows\system32\nvd3dumx.dll
2014-08-03 14:52:13 ----A---- C:\Windows\system32\nvcpl.dll
2014-08-03 14:52:13 ----A---- C:\Windows\system32\nvcolor.exe
2014-08-03 14:52:13 ----A---- C:\Windows\system32\nvcod134.dll
2014-08-03 14:52:13 ----A---- C:\Windows\system32\nvcod.dll
2014-08-03 14:52:13 ----A---- C:\Windows\system32\nvapi64.dll
2014-08-03 14:52:12 ----A---- C:\Windows\system32\dpinst.exe
2014-08-03 12:23:14 ----A---- C:\Windows\system32\drivers\enecir.sys

======List of files/folders modified in the last 1 month======

2014-08-12 18:22:57 ----RD---- C:\Program Files
2014-08-12 18:22:35 ----D---- C:\Windows\Temp
2014-08-12 09:56:01 ----D---- C:\Windows\system32\config
2014-08-12 08:36:28 ----D---- C:\Windows\System32
2014-08-12 08:36:28 ----D---- C:\Windows\inf
2014-08-12 08:36:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-08-10 11:30:32 ----HD---- C:\ProgramData
2014-08-10 11:29:41 ----D---- C:\Windows\winsxs
2014-08-10 11:29:35 ----D---- C:\Program Files (x86)\Common Files
2014-08-10 11:29:30 ----D---- C:\Windows\system32\DriverStore
2014-08-10 11:26:52 ----D---- C:\Windows\SysWOW64
2014-08-10 11:25:17 ----RSD---- C:\Windows\Fonts
2014-08-10 11:24:43 ----RD---- C:\Program Files (x86)
2014-08-10 11:21:51 ----D---- C:\Windows
2014-08-07 18:48:10 ----D---- C:\Windows\system32\Tasks
2014-08-06 18:14:34 ----D---- C:\Windows\system32\drivers
2014-08-06 18:14:18 ----D---- C:\Windows\system32\catroot
2014-08-06 18:14:03 ----D---- C:\Windows\system32\catroot2
2014-08-06 14:46:53 ----D---- C:\Windows\rescache
2014-08-06 12:19:23 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-08-06 12:19:23 ----D---- C:\Windows\system32\cs-CZ
2014-08-06 12:03:16 ----D---- C:\Windows\Microsoft.NET
2014-08-06 11:00:27 ----SD---- C:\ProgramData\Microsoft
2014-08-06 07:59:00 ----RSD---- C:\Windows\assembly
2014-08-06 07:15:31 ----D---- C:\Windows\Tasks
2014-08-06 06:59:54 ----D---- C:\Program Files\Windows Media Player
2014-08-06 06:59:54 ----D---- C:\Program Files (x86)\Windows Media Player
2014-08-06 06:59:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-06 06:59:53 ----D---- C:\Program Files\Internet Explorer
2014-08-06 06:59:52 ----D---- C:\Windows\SYSWOW64\migration
2014-08-06 06:59:52 ----D---- C:\Windows\SYSWOW64\en-US
2014-08-06 06:59:52 ----D---- C:\Windows\system32\migration
2014-08-06 06:59:52 ----D---- C:\Windows\PolicyDefinitions
2014-08-06 06:59:51 ----D---- C:\Windows\system32\en-US
2014-08-06 06:59:51 ----D---- C:\Windows\AppPatch
2014-08-06 06:59:50 ----D---- C:\Windows\SYSWOW64\wbem
2014-08-06 06:59:50 ----D---- C:\Windows\system32\wbem
2014-08-06 06:59:50 ----D---- C:\Windows\system32\drivers\en-US
2014-08-06 06:59:50 ----D---- C:\Program Files\Windows Journal
2014-08-06 06:59:49 ----D---- C:\Windows\SYSWOW64\Dism
2014-08-06 06:59:49 ----D---- C:\Windows\system32\Dism
2014-08-06 06:59:48 ----D---- C:\Windows\ehome
2014-08-06 06:59:48 ----D---- C:\Program Files\Windows Defender
2014-08-06 06:59:48 ----D---- C:\Program Files (x86)\Windows Defender
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\it-IT
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\es-ES
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\el-GR
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\de-DE
2014-08-06 06:59:41 ----D---- C:\Windows\SYSWOW64\da-DK
2014-08-06 06:59:41 ----D---- C:\Windows\system32\zh-TW
2014-08-06 06:59:41 ----D---- C:\Windows\system32\zh-HK
2014-08-06 06:59:41 ----D---- C:\Windows\system32\zh-CN
2014-08-06 06:59:41 ----D---- C:\Windows\system32\tr-TR
2014-08-06 06:59:41 ----D---- C:\Windows\system32\sv-SE
2014-08-06 06:59:41 ----D---- C:\Windows\system32\pt-PT
2014-08-06 06:59:41 ----D---- C:\Windows\system32\pt-BR
2014-08-06 06:59:41 ----D---- C:\Windows\system32\pl-PL
2014-08-06 06:59:41 ----D---- C:\Windows\system32\nl-NL
2014-08-06 06:59:41 ----D---- C:\Windows\system32\ko-KR
2014-08-06 06:59:41 ----D---- C:\Windows\system32\ja-JP
2014-08-06 06:59:41 ----D---- C:\Windows\system32\it-IT
2014-08-06 06:59:41 ----D---- C:\Windows\system32\hu-HU
2014-08-06 06:59:41 ----D---- C:\Windows\system32\fr-FR
2014-08-06 06:59:41 ----D---- C:\Windows\system32\fi-FI
2014-08-06 06:59:41 ----D---- C:\Windows\system32\es-ES
2014-08-06 06:59:41 ----D---- C:\Windows\system32\el-GR
2014-08-06 06:59:41 ----D---- C:\Windows\system32\de-DE
2014-08-06 06:59:40 ----D---- C:\Windows\system32\ru-RU
2014-08-06 06:59:40 ----D---- C:\Windows\system32\nb-NO
2014-08-06 06:59:40 ----D---- C:\Windows\system32\da-DK
2014-08-06 02:52:31 ----D---- C:\Windows\Logs
2014-08-06 02:39:48 ----A---- C:\Windows\win.ini
2014-08-06 02:34:59 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-08-04 21:13:07 ----D---- C:\Windows\ShellNew
2014-08-04 20:44:11 ----D---- C:\Windows\system
2014-08-04 19:12:45 ----D---- C:\Program Files (x86)\Windows Sidebar
2014-08-04 19:12:45 ----D---- C:\Program Files (x86)\Windows Portable Devices
2014-08-04 19:12:45 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2014-08-04 19:12:45 ----D---- C:\Program Files (x86)\Windows Mail
2014-08-04 19:12:44 ----D---- C:\Program Files\Windows Sidebar
2014-08-04 19:12:44 ----D---- C:\Program Files\Windows Portable Devices
2014-08-04 19:12:44 ----D---- C:\Program Files\Windows Photo Viewer
2014-08-04 19:12:44 ----D---- C:\Program Files\Windows Mail
2014-08-04 19:12:44 ----D---- C:\Program Files\DVD Maker
2014-08-04 19:12:44 ----D---- C:\Program Files\Common Files\System
2014-08-04 19:12:43 ----D---- C:\Windows\servicing
2014-08-04 19:12:35 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2014-08-04 19:12:35 ----D---- C:\Windows\SYSWOW64\Setup
2014-08-04 19:12:35 ----D---- C:\Windows\SYSWOW64\oobe
2014-08-04 19:12:35 ----D---- C:\Windows\SYSWOW64\cs
2014-08-04 19:12:35 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2014-08-04 19:12:34 ----D---- C:\Windows\SYSWOW64\sppui
2014-08-04 19:12:34 ----D---- C:\Windows\SYSWOW64\manifeststore
2014-08-04 19:12:33 ----D---- C:\Windows\SYSWOW64\migwiz
2014-08-04 19:12:22 ----D---- C:\Windows\system32\oobe
2014-08-04 19:12:21 ----D---- C:\Windows\system32\sppui
2014-08-04 19:12:21 ----D---- C:\Windows\system32\Setup
2014-08-04 19:12:21 ----D---- C:\Windows\system32\manifeststore
2014-08-04 19:12:21 ----D---- C:\Windows\system32\cs
2014-08-04 19:12:21 ----D---- C:\Windows\system32\AdvancedInstallers
2014-08-04 19:12:18 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-08-04 19:12:17 ----D---- C:\Windows\system32\migwiz
2014-08-04 19:12:17 ----D---- C:\Windows\system32\drivers\UMDF
2014-08-04 19:11:54 ----D---- C:\Windows\system32\Boot
2014-08-04 19:09:57 ----D---- C:\Windows\system32\wdi
2014-08-04 19:05:16 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2014-08-04 19:05:16 ----A---- C:\Windows\system32\msclmd.dll
2014-08-04 18:22:20 ----D---- C:\Program Files\Common Files
2014-08-03 22:10:27 ----RD---- C:\Users
2014-08-03 21:53:05 ----D---- C:\Windows\debug
2014-08-03 17:25:47 ----D---- C:\Windows\Setup
2014-08-03 16:58:40 ----D---- C:\Windows\system32\restore
2014-08-03 16:57:56 ----D---- C:\Windows\system32\CodeIntegrity
2014-08-03 16:37:33 ----D---- C:\Windows\Help
2014-08-03 16:35:19 ----SHD---- C:\$Recycle.Bin
2014-08-03 16:33:22 ----D---- C:\Windows\system32\Recovery
2014-08-03 16:33:22 ----D---- C:\Program Files\Windows NT
2014-08-03 16:31:16 ----D---- C:\Windows\system32\sysprep
2014-08-03 16:27:31 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 AVerAF15;HP DVB-T TV Tuner; C:\Windows\System32\Drivers\AVerAF15.sys [2008-07-04 306688]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-09-04 64000]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-08-07 143360]
R3 NETw5s64;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETw5s64.sys [2010-01-13 7675392]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-10-27 196384]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-03-23 505344]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-05-23 36352]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-20 41984]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 64bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 tap0901;TAP-Windows Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 XMLDIUSB;XML USB Device Interface; C:\Windows\System32\Drivers\XMLDIUSB.sys [2010-01-29 55808]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 FUSServices;Session Launcher Service; C:\Windows\SysWOW64\FUSServices.exe [2010-02-11 10752]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-10-23 922912]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2014-06-24 1738168]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2014-06-27 2088408]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2014-04-25 171928]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [2010-03-23 247808]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-08-06 5052224]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-08-10 651720]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-08-06 111616]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 289256]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-12-08 178760]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2012-10-01 5132888]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-08-04 1255736]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-06 262320]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 DpHost;@C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe [2009-04-17 322624]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-03 116648]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-03 116648]
S4 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-10-27 1364256]
S4 vfsFPService;Validity Fingerprint Service; C:\Windows\system32\vfsFPService.exe [2009-03-26 721712]

-----------------EOF-----------------

Děkuji za příspěvky..

Zdravim

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

Děkuji za reakci.. Hned, jakmile to bude možné, budu aplikovat.. Nicméně se nejedná o můj laptop a veškeré úpravy provádím přes vzdálenou plochu.. Ta bude dostupná až večer.. Ozvu se později..

Ou Kej, je pripadne mozne vyuzit i nasi vzdalenou pomoc www.neslape.cz

Nakonec jsem se k tomu dostal dříve..
OTL:

OTL logfile created on: 13.8.2014 15:27:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Hruboňovi\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,97 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 53,31% Memory free
7,93 Gb Paging File | 5,49 Gb Available in Paging File | 69,13% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,66 Gb Total Space | 33,46 Gb Free Space | 34,26% Space Free | Partition Type: NTFS
Drive D: | 200,33 Gb Total Space | 101,14 Gb Free Space | 50,49% Space Free | Partition Type: NTFS
Drive E: | 100,00 Mb Total Space | 1,81 Mb Free Space | 1,81% Space Free | Partition Type: NTFS

Computer Name: HP | User Name: Hruboňovi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Processes (SafeList) ==========

PRC - [2014.08.13 15:25:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Hruboňovi\Desktop\OTL.exe
PRC - [2014.08.06 11:34:35 | 004,623,680 | ---- | M] (TeamViewer GmbH) -- c:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Desktop.exe
PRC - [2014.08.06 11:34:34 | 013,246,272 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
PRC - [2014.08.06 11:34:34 | 005,052,224 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2014.08.06 11:21:00 | 000,229,696 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
PRC - [2014.08.04 20:27:40 | 000,374,272 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wupdt32.exe
PRC - [2014.07.15 11:24:50 | 000,860,488 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2014.06.27 11:52:26 | 002,088,408 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
PRC - [2014.06.24 10:42:12 | 004,101,576 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
PRC - [2014.06.24 10:41:42 | 001,738,168 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
PRC - [2014.05.20 13:16:08 | 000,201,728 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\inet32e.exe
PRC - [2014.04.25 14:12:20 | 000,171,928 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
PRC - [2013.11.05 23:33:38 | 001,000,462 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\winnetsvce.exe
PRC - [2010.02.11 04:23:14 | 000,024,576 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFFSUM.exe
PRC - [2010.02.11 04:19:36 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFPrintServer.exe
PRC - [2010.02.11 04:16:38 | 000,438,272 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServices.exe
PRC - [2010.02.11 04:05:50 | 000,010,752 | ---- | M] () -- C:\Windows\SysWOW64\FUSServices.exe
PRC - [2008.06.11 22:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe


========== Modules (No Company Name) ==========

MOD - [2014.08.04 20:27:40 | 000,374,272 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wupdt32.exe
MOD - [2014.07.15 11:24:48 | 000,353,096 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppgooglenaclpluginchrome.dll
MOD - [2014.07.15 11:24:44 | 008,537,928 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
MOD - [2014.07.15 11:24:38 | 000,718,664 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
MOD - [2014.07.15 11:24:36 | 000,126,280 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
MOD - [2014.07.15 11:24:35 | 001,732,936 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
MOD - [2014.05.20 13:16:08 | 000,201,728 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\inet32e.exe
MOD - [2014.05.13 12:04:48 | 000,167,768 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
MOD - [2014.05.13 12:04:46 | 000,109,400 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
MOD - [2014.05.13 12:04:42 | 000,416,600 | ---- | M] () -- C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
MOD - [2013.11.05 23:33:38 | 001,000,462 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\winnetsvce.exe
MOD - [2013.11.05 23:33:38 | 000,538,126 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\libcurl-4.dll
MOD - [2013.11.05 23:33:38 | 000,084,992 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\zlib1.dll
MOD - [2010.02.11 04:23:14 | 000,024,576 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFFSUM.exe
MOD - [2010.02.11 04:23:04 | 000,794,624 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\Utility32.dll
MOD - [2010.02.11 04:22:12 | 000,086,016 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\SuString.dll
MOD - [2010.02.11 04:22:10 | 000,241,664 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\Advanced.dll
MOD - [2010.02.11 04:19:36 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFPrintServer.exe
MOD - [2010.02.11 04:16:58 | 000,212,992 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\SMSU.dll
MOD - [2010.02.11 04:16:38 | 000,438,272 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServices.exe
MOD - [2010.02.11 04:15:56 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServiceFOLDERu.dll
MOD - [2010.02.11 04:15:48 | 000,323,584 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\FAXU.dll
MOD - [2010.02.11 04:12:38 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServiceTR29U.dll
MOD - [2010.02.11 04:12:34 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\PrintFaxU.dll
MOD - [2010.02.11 04:12:30 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\Pdg32U.dll
MOD - [2010.02.11 04:12:26 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\DigitalizerU.dll
MOD - [2010.02.11 04:12:20 | 000,356,352 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\TiffU.dll
MOD - [2010.02.11 04:11:54 | 000,024,576 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServiceTSU.dll
MOD - [2010.02.11 04:11:52 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServiceMONU.dll
MOD - [2010.02.11 04:11:48 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServiceHTTPU.dll
MOD - [2010.02.11 04:11:42 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFServiceAPIU.dll
MOD - [2010.02.11 04:11:26 | 000,503,808 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\PlugInU.dll
MOD - [2010.02.11 04:10:58 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\DeviceU.dll
MOD - [2010.02.11 04:10:50 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\HAL\XMLDIUSBU.dll
MOD - [2010.02.11 04:10:42 | 000,172,032 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\HAL\XMLDILANU.dll
MOD - [2010.02.11 04:10:36 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\HTTPClientU.dll
MOD - [2010.02.11 04:10:32 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\SMTPServerU.dll
MOD - [2010.02.11 04:10:28 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\SMTPClientU.dll
MOD - [2010.02.11 04:10:26 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\MFMimeParserU.dll
MOD - [2010.02.11 04:10:12 | 000,368,640 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\AddressBookU.dll
MOD - [2010.02.11 04:09:44 | 000,131,072 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\ComponentsU.dll
MOD - [2010.02.11 04:09:28 | 000,417,792 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\ControlsU.dll
MOD - [2010.02.11 04:08:58 | 000,118,784 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\RouterU.dll
MOD - [2010.02.11 04:08:48 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\GraphicsU.dll
MOD - [2010.02.11 04:08:42 | 000,245,760 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\ProtocolU.dll
MOD - [2010.02.11 04:08:10 | 000,815,104 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\Utility32U.dll
MOD - [2010.02.11 04:07:12 | 000,086,016 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\SuStringU.dll
MOD - [2010.02.11 04:07:10 | 000,245,760 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\AdvancedU.dll
MOD - [2010.02.10 22:13:00 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Xerox Companion Suite\QTrace.dll


========== Services (SafeList) ==========

SRV:64bit: - [2014.08.06 02:45:02 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014.04.09 15:13:48 | 000,289,256 | ---- | M] (McAfee, Inc.) [On_Demand | Running] -- C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe -- (McComponentHostService)
SRV:64bit: - [2014.03.11 12:34:10 | 000,347,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2014.03.11 12:34:10 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2011.05.13 18:58:10 | 000,030,520 | ---- | M] (Hewlett-Packard Company) [Disabled | Stopped] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV:64bit: - [2010.03.23 14:53:06 | 000,247,808 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe -- (STacSV)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.03.26 02:46:54 | 000,721,712 | ---- | M] (Validity Sensors, Inc.) [Disabled | Stopped] -- C:\Windows\SysNative\vfsFPService.exe -- (vfsFPService)
SRV:64bit: - [2009.03.02 18:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe -- (AESTFilters)
SRV - [2014.08.10 11:29:35 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2014.08.06 11:34:34 | 005,052,224 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2014.08.06 07:15:29 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.10.27 09:03:44 | 001,364,256 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.09.11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.23 14:53:06 | 000,247,808 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe -- (STacSV)
SRV - [2010.02.11 04:05:50 | 000,010,752 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\FUSServices.exe -- (FUSServices)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.04.17 14:09:44 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe -- (DpHost)
SRV - [2009.03.26 02:46:50 | 000,599,344 | ---- | M] (Validity Sensors, Inc.) [Disabled | Stopped] -- C:\Windows\SysWOW64\vfsFPService.exe -- (vfsFPService)
SRV - [2009.03.02 18:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe -- (AESTFilters)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2014.03.11 09:52:30 | 000,133,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2013.10.27 09:04:00 | 000,196,384 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2013.10.02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013.08.22 14:40:24 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.14 04:37:44 | 000,396,848 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2011.05.13 18:58:16 | 000,030,008 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2011.05.13 18:57:58 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.03.23 14:53:06 | 000,505,344 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2010.01.29 23:04:32 | 000,055,808 | ---- | M] (OEM) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\XMLDIUSB.sys -- (XMLDIUSB)
DRV:64bit: - [2010.01.13 16:37:18 | 007,675,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.23 01:08:37 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009.03.01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.02.17 19:11:25 | 000,031,400 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2008.09.04 18:48:00 | 000,064,000 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:64bit: - [2008.08.07 17:01:36 | 000,143,360 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2008.07.04 07:23:12 | 000,306,688 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVerAF15.sys -- (AVerAF15)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-638237248-3080054114-1947788734-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-638237248-3080054114-1947788734-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE11SR
IE - HKU\S-1-5-21-638237248-3080054114-1947788734-1000\..\SearchScopes\{8EDA27D0-7DA9-4C5B-B327-EAF1031F090C}: "URL" = http://trovi.com/ResultsExt.aspx?q={sea ... 10430&UM=4
IE - HKU\S-1-5-21-638237248-3080054114-1947788734-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ [2014.08.04 20:50:57 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\firefoxext [2014.08.04 20:50:57 | 000,000,000 | ---D | M]

[2014.05.21 12:23:56 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll

========== Chrome ==========

CHR - homepage: http://www.seznam.cz/
CHR - plugin: Error reading preferences file
CHR - Extension: Dokumenty Google = C:\Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: Disk Google = C:\Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: VyhledávánĂ­ Google = C:\Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: AdBlock = C:\Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.9_0\
CHR - Extension: Peněženka Google = C:\Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [MFFSum_Pro_LL2] C:\Program Files (x86)\Xerox Companion Suite\MFFSUM.exe ()
O4 - HKLM..\Run: [MFPrintServer_Pro_LL2] C:\Program Files (x86)\Xerox Companion Suite\MFPrintServer.exe ()
O4 - HKLM..\Run: [mncccmxlSrv] C:\Windows\SysWOW64\mncccmxl.vbe ()
O4 - HKLM..\Run: [MSStp] C:\Windows\SysWOW64\msstp.vbe ()
O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-638237248-3080054114-1947788734-1000..\Run: [BlackWay] C:\Program Files (x86)\Windows 7 Activator\Windows 7 Activator.exe File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wupdt32.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-638237248-3080054114-1947788734-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: Prevést cíl vazby do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Prevést cíl vazby do existujícího PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Prevést do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Pridat do stávajícího PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Prevést cíl vazby do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Prevést cíl vazby do existujícího PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Prevést do Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Pridat do stávajícího PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.30.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9BCF73A1-06FA-4727-8F8B-FBA2FEDDF197}: DhcpNameServer = 192.168.30.1
O18 - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FMVC - C:\Windows\SysWow64\fmcodec.DLL (Fox Magic Software)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 7 Days ==========

[2014.08.13 15:24:59 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Hruboňovi\Desktop\OTL.exe
[2014.08.12 18:22:57 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.08.12 18:22:57 | 000,000,000 | ---D | C] -- C:\rsit
[2014.08.10 11:30:32 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2014.08.10 11:29:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared
[2014.08.10 11:29:34 | 000,000,000 | ---D | C] -- C:\Users\Hruboňovi\AppData\Local\Adobe
[2014.08.10 11:29:20 | 000,024,416 | R--- | C] (Adobe Systems Inc.) -- C:\Windows\SysNative\AdobePDFUI.dll
[2014.08.10 11:24:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2014.08.10 11:24:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2014.08.10 11:24:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2014.08.07 19:55:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2014.08.07 19:53:56 | 000,000,000 | ---D | C] -- C:\Users\Hruboňovi\AppData\Local\Monotype Imaging Inc
[2014.08.06 18:20:51 | 000,000,000 | ---D | C] -- C:\Users\Hruboňovi\AppData\Local\Com
[2014.08.06 18:20:42 | 000,000,000 | ---D | C] -- C:\Users\Hruboňovi\AppData\Local\Xerox Companion Suite
[2014.08.06 18:14:16 | 000,055,808 | ---- | C] (OEM) -- C:\Windows\SysNative\drivers\XMLDIUSB.sys
[2014.08.06 18:13:34 | 000,525,824 | ---- | C] (OEM) -- C:\Windows\SysNative\lanamn.exe
[2014.08.06 18:13:34 | 000,326,656 | ---- | C] (OEM) -- C:\Windows\SysNative\wialffv2scn.dll
[2014.08.06 18:12:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Companion Suite Pro LL2
[2014.08.06 18:12:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xerox Companion Suite
[2014.08.06 18:12:06 | 000,034,816 | ---- | C] (OEM) -- C:\Windows\SysNative\CSPLL2P.dll
[2014.08.06 18:11:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xerox Companion Suite
[2014.08.06 18:06:57 | 000,109,568 | ---- | C] (JMicron Technology Corporation) -- C:\Windows\SysNative\JmCrIcon.dll
[2014.08.06 18:06:56 | 000,000,000 | ---D | C] -- C:\Windows\JMCR_DIR
[2014.08.06 18:06:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2014.08.06 18:06:20 | 000,000,000 | ---D | C] -- C:\swsetup

========== Files - Modified Within 7 Days ==========

[2014.08.13 15:31:40 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.08.13 15:25:27 | 001,583,214 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014.08.13 15:25:27 | 000,668,790 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2014.08.13 15:25:27 | 000,654,138 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014.08.13 15:25:27 | 000,141,418 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2014.08.13 15:25:27 | 000,122,010 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014.08.13 15:25:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Hruboňovi\Desktop\OTL.exe
[2014.08.13 15:20:43 | 000,000,958 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014.08.13 15:20:11 | 000,000,510 | ---- | M] () -- C:\Users\Hruboňovi\rgmnr
[2014.08.13 15:18:54 | 000,000,954 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014.08.13 15:18:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.08.13 15:18:27 | 3195,432,960 | -HS- | M] () -- C:\hiberfil.sys
[2014.08.12 22:00:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014.08.12 18:14:17 | 001,222,144 | ---- | M] () -- C:\Users\Hruboňovi\Desktop\RSITx64.exe
[2014.08.11 16:33:43 | 000,007,667 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Local\Resmon.ResmonCfg
[2014.08.10 22:18:46 | 000,016,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014.08.10 22:18:46 | 000,016,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014.08.10 20:53:22 | 000,445,016 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014.08.06 18:20:43 | 000,305,337 | ---- | M] () -- C:\Windows\MFInstallScheduler.htm
[2014.08.06 18:20:43 | 000,009,759 | ---- | M] () -- C:\Windows\MFCustomInstall_dll.htm
[2014.08.06 18:12:17 | 000,000,956 | ---- | M] () -- C:\Users\Public\Desktop\Xerox Companion - Monitor.lnk
[2014.08.06 18:12:17 | 000,000,946 | ---- | M] () -- C:\Users\Public\Desktop\Xerox Companion - Director.lnk
[2014.08.06 18:08:25 | 000,000,131 | ---- | M] () -- C:\Windows\xUninstall.bat

========== Files Created - No Company Name ==========

[2014.08.13 15:31:40 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.08.12 18:14:15 | 001,222,144 | ---- | C] () -- C:\Users\Hruboňovi\Desktop\RSITx64.exe
[2014.08.10 11:29:03 | 000,002,465 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Distiller 9.lnk
[2014.08.10 11:29:03 | 000,002,453 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat 9 Pro.lnk
[2014.08.10 11:29:03 | 000,002,171 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle Designer ES 8.2.lnk
[2014.08.06 18:13:43 | 000,020,480 | ---- | C] () -- C:\Windows\SysNative\LF2GRPOW.EXE
[2014.08.06 18:13:42 | 000,071,680 | ---- | C] () -- C:\Windows\SysNative\LF2GRPJL.DLL
[2014.08.06 18:13:41 | 000,015,872 | ---- | C] () -- C:\Windows\SysNative\LF2GRCOI.DLL
[2014.08.06 18:13:33 | 000,014,178 | ---- | C] () -- C:\Windows\SysNative\WIASCAN_STRTBL.XML
[2014.08.06 18:12:49 | 000,010,752 | ---- | C] () -- C:\Windows\SysNative\FUSServices.exe
[2014.08.06 18:12:17 | 000,000,956 | ---- | C] () -- C:\Users\Public\Desktop\Xerox Companion - Monitor.lnk
[2014.08.06 18:12:17 | 000,000,946 | ---- | C] () -- C:\Users\Public\Desktop\Xerox Companion - Director.lnk
[2014.08.06 18:08:25 | 000,000,131 | ---- | C] () -- C:\Windows\xUninstall.bat
[2014.08.06 18:07:22 | 000,305,337 | ---- | C] () -- C:\Windows\MFInstallScheduler.htm
[2014.08.06 18:07:22 | 000,009,759 | ---- | C] () -- C:\Windows\MFCustomInstall_dll.htm
[2014.08.06 03:06:19 | 001,558,136 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2014.08.05 19:37:55 | 000,000,003 | ---- | C] () -- C:\Users\Hruboňovi\stut
[2014.08.05 19:35:40 | 000,000,510 | ---- | C] () -- C:\Users\Hruboňovi\rgmnr
[2014.08.05 18:22:54 | 000,972,814 | --S- | C] () -- C:\Windows\SysWow64\dcgmncccmxl.exe
[2014.08.05 18:22:54 | 000,187,904 | --S- | C] () -- C:\Windows\SysWow64\lcpmncccmxl.exe
[2014.08.05 18:22:53 | 010,236,928 | --S- | C] () -- C:\Windows\SysWow64\acumncccmxl.exe
[2014.08.05 18:22:53 | 000,100,864 | --S- | C] () -- C:\Windows\SysWow64\zlib1.dll
[2014.08.05 18:22:52 | 000,538,126 | --S- | C] () -- C:\Windows\SysWow64\libcurl-4.dll
[2014.08.05 18:22:52 | 000,192,512 | --S- | C] () -- C:\Windows\SysWow64\libidn-11.dll
[2014.08.05 18:22:52 | 000,133,632 | --S- | C] () -- C:\Windows\SysWow64\librtmp.dll
[2014.08.04 20:39:19 | 000,007,667 | ---- | C] () -- C:\Users\Hruboňovi\AppData\Local\Resmon.ResmonCfg
[2014.08.03 16:54:45 | 000,061,671 | ---- | C] () -- C:\ProgramData\nvModes.001
[2014.08.03 16:51:51 | 000,061,671 | ---- | C] () -- C:\ProgramData\nvModes.dat

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014.03.25 04:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014.03.25 04:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014.08.06 08:44:27 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer
[2014.08.03 17:02:33 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer Pro
[2014.08.04 20:59:04 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\DigitalPersona
[2014.08.03 17:03:08 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\GHISLER
[2014.08.03 17:04:01 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\TeamViewer
[2014.08.03 21:37:12 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\VitySoft

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,009,492 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2014.08.03 17:15:38 | 000,000,954 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.08.03 17:15:41 | 000,000,958 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2014.08.06 07:15:31 | 000,000,914 | ---- | C] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2011.02.26 08:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 07:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2014.06.24 10:42:02 | 004,818,848 | ---- | M] (Safer-Networking Ltd.) MD5=280C014187E24860A7C860329513208F -- C:\Program Files (x86)\Spybot - Search & Destroy 2\explorer.exe
[2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 08:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\SysNative\drivers\tcpip.sys
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2012.10.03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.09.08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2014.04.05 04:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.01.04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013.01.03 07:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2013.09.07 04:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2010.04.09 13:06:28 | 001,898,376 | ---- | M] (Microsoft Corporation) MD5=7FC877A25796D8ADF539E64703FCA7E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_0f2ca8c580036f65\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2010.04.09 09:56:29 | 001,892,232 | ---- | M] (Microsoft Corporation) MD5=A9C0F786AC1F736891D05CE0A1D29DEB -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_0f9ea52499331463\tcpip.sys
[2013.01.03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013.01.04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2012.10.03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2014.03.04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\SysNative\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< >

< %systemroot%*.* /U /s >
[5 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[4 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2014.08.10 11:30:42 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\Adobe
[2014.08.06 08:44:27 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer
[2014.08.03 17:02:33 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer Pro
[2014.08.04 20:59:04 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\DigitalPersona
[2014.08.03 17:03:08 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\GHISLER
[2014.08.03 16:35:23 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\Identities
[2014.08.04 20:43:51 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\InstallShield
[2014.08.04 21:00:11 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\Macrovision
[2009.07.14 17:36:38 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\Media Center Programs
[2014.08.10 21:32:57 | 000,000,000 | --SD | M] -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft
[2014.08.04 20:30:04 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\NVIDIA
[2014.08.03 17:04:01 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\TeamViewer
[2014.08.03 21:37:12 | 000,000,000 | ---D | M] -- C:\Users\Hruboňovi\AppData\Roaming\VitySoft

< %APPDATA%\*.exe /s >
[2009.08.11 21:21:26 | 000,087,552 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\AC3 Filter\ac3config.exe
[2009.08.11 21:21:30 | 000,090,112 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\AC3 Filter\spdif_test.exe
[2010.03.22 14:52:04 | 000,697,690 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
[2012.10.11 09:01:20 | 001,175,371 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\FFDShow\unins000.exe
[2010.08.14 10:42:54 | 000,113,152 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\Haali media splitter\dsmux.exe
[2010.08.14 10:45:10 | 000,358,400 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\Haali media splitter\gdsmux.exe
[2010.08.14 10:42:06 | 000,137,728 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\Haali media splitter\mkv2vfr.exe
[2010.09.30 15:30:22 | 000,042,305 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
[2014.05.20 13:16:08 | 000,201,728 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\inet32e.exe
[2013.11.05 23:33:38 | 001,000,462 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Networking\winnetsvce.exe
[2014.08.04 20:27:40 | 000,374,272 | ---- | M] () -- C:\Users\Hruboňovi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wupdt32.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2014.08.13 16:00:07 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2014.08.13 15:18:54 | 000,000,954 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2014.08.13 15:20:43 | 000,000,958 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"BlackWay" = C:\Program Files (x86)\Windows 7 Activator\Windows 7 Activator.exe

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2014.08.06 02:45:07 | 000,812,216 | ---- | M] (Microsoft Corporation) MD5=CD900EFB4F8946A2BB1950D9F45915C2 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2014.07.15 11:24:50 | 000,860,488 | ---- | M] (Google Inc.) MD5=B43E68B8A022FB00FF54360D408E871B -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.08.13 15:31:40 | 000,000,512 | ---- | M] () MD5=EA05BAD00F16F726469AEFC219D06CDB -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2014.08.03 21:37:16 | 000,005,592 | ---- | M] () -- \Users\Hruboňovi\AppData\Roaming\VitySoft\FRD\plugins\crackle.frp

< *keygen* /s >

< *loader* /s >
[2008.03.18 07:31:00 | 000,009,216 | R--- | M] () -- \Program Files (x86)\Adobe\Acrobat 9.0\PDFMaker\AutoCAD\OD\AecDummyLoader_2.05_8.dll
[2014.01.23 16:05:00 | 000,268,440 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\VSTOLoader.dll
[2013.05.09 01:43:22 | 000,019,080 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2014.01.23 16:05:00 | 000,364,184 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll
[2013.05.09 01:43:22 | 000,019,080 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033\VSTOLoaderUI.dll
[2014.08.06 12:18:06 | 000,002,611 | ---- | M] () -- \ProgramData\Spybot - Search & Destroy\Quarantine\Win32.Downloader.gen-0000.zip
[2014.08.06 12:18:06 | 000,002,611 | ---- | M] () -- \Users\All Users\Spybot - Search & Destroy\Quarantine\Win32.Downloader.gen-0000.zip
[2014.06.26 09:46:50 | 000,009,418 | ---- | M] () -- \Users\Hruboňovi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.7.9_0\img\gifloader.gif
[2012.10.01 20:34:40 | 000,019,048 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00005109110000000100000000F01FEC\15.0.4420\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2012.10.01 20:34:40 | 000,019,048 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00005109110000000100000000F01FEC\15.0.4420\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2012.10.01 20:34:40 | 000,364,128 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00005109110000000100000000F01FEC\15.0.4420\VSTOLoader_dll_amd64.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2012.10.01 20:34:40 | 000,268,384 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00005109110000000100000000F01FEC\15.0.4420\VSTOLoader_dll_x86.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2013.05.09 01:43:22 | 000,019,080 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00005109110000000100000000F01FEC\15.0.4569\FL_VSTOLoaderUI_dll_amd64_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2013.05.09 01:43:22 | 000,019,080 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\00005109110000000100000000F01FEC\15.0.4569\FL_VSTOLoaderUI_dll_x86_ln.3643236F_FC70_11D3_A536_0090278A1BB8.41B86362_9D8B_4D9B_B426_8A6D1F809A25
[2009.07.14 15:25:34 | 002,202,645 | ---- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2010.11.20 12:09:38 | 000,004,290 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483.manifest
[2010.11.20 14:33:18 | 000,004,338 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6.manifest
[2012.10.04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\1eeeafda1c58ef6e778ff768f9a94a6f\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\1eeeafda1c58ef6e778ff768f9a94a6f\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\63e7d454eeb6cdac5bd05042201891bd\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\63e7d454eeb6cdac5bd05042201891bd\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.02.05 15:09:50 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_9c05f879842e1792.manifest
[2011.02.05 15:05:03 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_9c6455949d6c2720.manifest
[2011.02.05 19:34:40 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_9deb553581556a27.manifest
[2011.02.05 15:10:12 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_9e73f1b69a73f09a.manifest
[2013.08.02 04:12:19 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f6446aa2f5f86c06820f4e4200db84ac\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f6446aa2f5f86c06820f4e4200db84ac\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:41:11 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 16:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:38:44 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 04:18:31 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 13:03:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_69637bfcab8b6996\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:28:21 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_69353b6eabae8d55\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 17:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 17:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 17:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 17:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 17:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2014.08.04 19:07:05 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2014.08.04 19:07:06 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2014.08.04 19:07:06 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2014.08.04 19:07:06 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2014.08.04 19:07:07 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 17:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:56:23 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:45:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.29 03:54:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.03.04 12:35:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22616_none_0d44e078f32df860\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >

Extras:

OTL Extras logfile created on: 13.8.2014 15:27:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Hruboňovi\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17207)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,97 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 53,31% Memory free
7,93 Gb Paging File | 5,49 Gb Available in Paging File | 69,13% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,66 Gb Total Space | 33,46 Gb Free Space | 34,26% Space Free | Partition Type: NTFS
Drive D: | 200,33 Gb Total Space | 101,14 Gb Free Space | 50,49% Space Free | Partition Type: NTFS
Drive E: | 100,00 Mb Total Space | 1,81 Mb Free Space | 1,81% Space Free | Partition Type: NTFS

Computer Name: HP | User Name: Hruboňovi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-638237248-3080054114-1947788734-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{5922522C-2AA4-4054-AA97-FEEEB9280323}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{C83A21C5-00C0-40C1-8E5A-CA75DEBB155B}" = lport=137 | protocol=17 | dir=in | app=system |
"{ED43F6B4-3ED3-4405-89A1-2D7709438D9C}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1882E163-467D-4F7A-BBD2-2E47D2BFEE59}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer_service.exe |
"{20DED15F-5EE5-43D4-9DFE-668F609786DE}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{3A638411-AB86-44C7-B935-37F046FF41A7}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer.exe |
"{3F5299BB-0D68-4D11-8FD8-3FB191F04FF0}" = protocol=6 | dir=in | app=c:\users\hruboňovi\appdata\local\temp\systeme.exe |
"{523EC7DA-3A4E-4BE2-AFFC-3484395AA200}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"{6317E8E5-7F38-4BEF-B420-7831119DF061}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer.exe |
"{8840A478-CB7F-4C62-9163-6ACCD91E01D1}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer_service.exe |
"{A750818A-DF61-45ED-AA2F-7AD37DB14106}" = protocol=17 | dir=in | app=c:\users\hruboňovi\appdata\local\temp\systeme.exe |
"{E82598A2-8C12-433A-9208-43E100EB9089}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe |
"{EED6A5FA-A316-407A-BC3B-D0FDEED551A2}" = dir=in | app=c:\program files (x86)\xerox companion suite\mfservices.exe |
"{F71A5005-147E-4C4E-B534-25ACE64B5FAB}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe |
"TCP Query User{0A7F4F38-1E37-41FF-9CB2-735A7AEF0A53}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\frd.exe |
"UDP Query User{16C33DA3-D45D-406F-8265-161B44C1416D}C:\program files (x86)\java\jre7\launch4j-tmp\frd.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\launch4j-tmp\frd.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{30296AB9-984A-415B-8909-1FE367438B47}" = DigitalPersona Personal 4.01
"{50813B8C-FCBB-3C61-8039-EAAA93029066}" = Microsoft .NET Framework 4.5.1 (CSY)
"{7B1AF68B-4606-4152-9991-1E9D4FF5F0FA}" = Microsoft Antimalware Service CS-CZ Language Pack
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
"{90150000-0015-0405-1000-0000000FF1CE}" = Microsoft Access MUI (Czech) 2013
"{90150000-0015-0409-1000-0000000FF1CE}" = Microsoft Access MUI (English) 2013
"{90150000-0016-0405-1000-0000000FF1CE}" = Microsoft Excel MUI (Czech) 2013
"{90150000-0016-0409-1000-0000000FF1CE}" = Microsoft Excel MUI (English) 2013
"{90150000-0017-0405-1000-0000000FF1CE}" = Microsoft SharePoint Designer MUI (Czech) 2013
"{90150000-0018-0405-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (Czech) 2013
"{90150000-0018-0409-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (English) 2013
"{90150000-0019-0405-1000-0000000FF1CE}" = Microsoft Publisher MUI (Czech) 2013
"{90150000-0019-0409-1000-0000000FF1CE}" = Microsoft Publisher MUI (English) 2013
"{90150000-001A-0405-1000-0000000FF1CE}" = Microsoft Outlook MUI (Czech) 2013
"{90150000-001A-0409-1000-0000000FF1CE}" = Microsoft Outlook MUI (English) 2013
"{90150000-001B-0405-1000-0000000FF1CE}" = Microsoft Word MUI (Czech) 2013
"{90150000-001B-0409-1000-0000000FF1CE}" = Microsoft Word MUI (English) 2013
"{90150000-001F-0405-1000-0000000FF1CE}" = Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština
"{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français
"{90150000-001F-041B-1000-0000000FF1CE}" = Nástroje korektúry balíka Microsoft Office 2013 - slovenčina
"{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español
"{90150000-002C-0405-1000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2013
"{90150000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2013
"{90150000-0044-0405-1000-0000000FF1CE}" = Microsoft InfoPath MUI (Czech) 2013
"{90150000-0044-0409-1000-0000000FF1CE}" = Microsoft InfoPath MUI (English) 2013
"{90150000-006E-0405-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2013
"{90150000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2013
"{90150000-0090-0405-1000-0000000FF1CE}" = Microsoft DCF MUI (Czech) 2013
"{90150000-0090-0409-1000-0000000FF1CE}" = Microsoft DCF MUI (English) 2013
"{90150000-00A1-0405-1000-0000000FF1CE}" = Microsoft OneNote MUI (Czech) 2013
"{90150000-00A1-0409-1000-0000000FF1CE}" = Microsoft OneNote MUI (English) 2013
"{90150000-00BA-0405-1000-0000000FF1CE}" = Microsoft Groove MUI (Czech) 2013
"{90150000-00BA-0409-1000-0000000FF1CE}" = Microsoft Groove MUI (English) 2013
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-0405-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Czech) 2013
"{90150000-00C1-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2013
"{90150000-00E1-0405-1000-0000000FF1CE}" = Microsoft Office OSM MUI (Czech) 2013
"{90150000-00E1-0409-1000-0000000FF1CE}" = Microsoft Office OSM MUI (English) 2013
"{90150000-00E2-0405-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (Czech) 2013
"{90150000-00E2-0409-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (English) 2013
"{90150000-0100-0405-1000-0000000FF1CE}" = Microsoft Office O MUI (Czech) 2013
"{90150000-0101-0405-1000-0000000FF1CE}" = Microsoft X MUI (Czech) 2013
"{90150000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2013
"{90150000-0117-0409-1000-0000000FF1CE}" = Microsoft Access Setup Metadata MUI (English) 2013
"{90150000-012B-0405-1000-0000000FF1CE}" = Microsoft Lync MUI (Czech) 2013
"{90150000-012B-0409-1000-0000000FF1CE}" = Microsoft Lync MUI (English) 2013
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029" = Microsoft .NET Framework 4.5.1 (čeština)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 331.65
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 331.65
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 1.15.2
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.3.26.4
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{BFAE8D5B-F918-486F-B74E-90762DF11C5C}" = Microsoft Security Client
"{F65B8208-5221-43D9-AA12-DDEA64EC4AF6}" = Validity Sensors software
"07B260955637F1FF7587ED2AA87459040DD09BF7" = Balíček ovladače systému Windows - ENE (enecir) HIDClass (09/04/2008 2.6.0.0)
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft Security Client" = Microsoft Security Essentials
"Office15.OMUI.cs-cz" = Microsoft Office Language Pack 2013 - Czech/čeština
"Office15.PROPLUS" = Microsoft Office Professional Plus 2013
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron JMB38X Flash Media Controller
"{26A24AE4-039D-4CA4-87B4-2F03217067FF}" = Java 7 Update 67
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4ACE3E86-78B6-43A1-B104-E3F3006FC576}" = Xerox Phaser 3100MFP Drivers
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{ABDB5A8F-A163-4FD7-A8AE-E2695ACFEA90}" = Xerox Phaser3100 MFP
"{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{AC76BA86-1029-4770-7760-000000000004}{AC76BA86-1029-4770-7760-000000000004}" = Adobe Acrobat 9 Pro - Czech, Hungarian, Polish, Slovak
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"Adobe Flash Player Plugin" = Adobe Flash Player 14 Plugin
"aTube Catcher" = aTube Catcher
"AVerMedia A309 (MiniCard, DVB-T)" = AVerMedia A309 (MiniCard, DVB-T) 1.0.64.46
"AVerMedia MCE Encoder x64" = AVerMedia MCE Encoder x64 3.0.1.5
"BSPlayerf" = BS.Player FREE
"Google Chrome" = Google Chrome
"HP MiniCard Hybrid TV" = HP MiniCard Hybrid TV 1.3.64.69
"TeamViewer 9" = TeamViewer 9
"TeamViewer 9.0" = TeamViewer 9.0
"VirtualCloneDrive" = VirtualCloneDrive

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 8.8.2014 16:42:00 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 9.8.2014 12:50:06 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 10.8.2014 4:51:04 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 10.8.2014 14:53:37 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 10.8.2014 15:42:41 | Computer Name = HP | Source = Software Protection Platform Service | ID = 8193
Description = Plánovač aktivace licence (sppuinotify.dll) byl ukončen s následujícím
kódem chyby: 0x80070005

Error - 11.8.2014 3:37:25 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 12.8.2014 2:31:35 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 12.8.2014 12:21:05 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 13.8.2014 0:17:25 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

Error - 13.8.2014 9:18:40 | Computer Name = HP | Source = Winlogon | ID = 4103
Description = Aktivace licence systému Windows se nezdařila. Chyba 0x80070005.

[ Key Management Service Events ]
Error - 4.8.2014 14:32:25 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS Port! is not a
valid argument.

Error - 4.8.2014 14:32:25 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS PID! is not a valid
argument.

Error - 4.8.2014 14:32:25 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS Activation Interval
Range! 0 is not a valid argument.

Error - 4.8.2014 14:32:25 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS Renewal Interval
Range! 0 is not a valid argument.

Error - 4.8.2014 14:33:50 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS Port! is not a
valid argument.

Error - 4.8.2014 14:33:50 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS PID! is not a valid
argument.

Error - 4.8.2014 14:33:50 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS Activation Interval
Range! 0 is not a valid argument.

Error - 4.8.2014 14:33:50 | Computer Name = HP | Source = KmsRequests | ID = 902
Description = Služba Ochrana softwaru byla spuštěna. Invalid KMS Renewal Interval
Range! 0 is not a valid argument.

[ System Events ]
Error - 10.8.2014 4:50:47 | Computer Name = HP | Source = Ntfs | ID = 262281
Description = Výchozí správce prostředků transakcí na svazku E: zaznamenal neopakovatelnou
chybu a nemohl být spuštěn. Data obsahují kód chyby.

Error - 10.8.2014 14:53:02 | Computer Name = HP | Source = Ntfs | ID = 262281
Description = Výchozí správce prostředků transakcí na svazku E: zaznamenal neopakovatelnou
chybu a nemohl být spuštěn. Data obsahují kód chyby.

Error - 10.8.2014 15:42:41 | Computer Name = HP | Source = DCOM | ID = 10001
Description =

Error - 11.8.2014 3:37:08 | Computer Name = HP | Source = Ntfs | ID = 262281
Description = Výchozí správce prostředků transakcí na svazku E: zaznamenal neopakovatelnou
chybu a nemohl být spuštěn. Data obsahují kód chyby.

Error - 12.8.2014 2:31:21 | Computer Name = HP | Source = Ntfs | ID = 262281
Description = Výchozí správce prostředků transakcí na svazku E: zaznamenal neopakovatelnou
chybu a nemohl být spuštěn. Data obsahují kód chyby.

Error - 12.8.2014 12:20:51 | Computer Name = HP | Source = Ntfs | ID = 262281
Description = Výchozí správce prostředků transakcí na svazku E: zaznamenal neopakovatelnou
chybu a nemohl být spuštěn. Data obsahují kód chyby.

Error - 12.8.2014 15:52:04 | Computer Name = HP | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error - 12.8.2014 15:52:05 | Computer Name = HP | Source = Disk | ID = 262155
Description = Ovladač zjistil chybu řadiče na \Device\Harddisk1\DR1.

Error - 13.8.2014 0:17:08 | Computer Name = HP | Source = Ntfs | ID = 262281
Description = Výchozí správce prostředků transakcí na svazku E: zaznamenal neopakovatelnou
chybu a nemohl být spuštěn. Data obsahují kód chyby.

Error - 13.8.2014 9:18:27 | Computer Name = HP | Source = Ntfs | ID = 262281
Description = Výchozí správce prostředků transakcí na svazku E: zaznamenal neopakovatelnou
chybu a nemohl být spuštěn. Data obsahují kód chyby.


< End of report >

Jak je na tom legalita systemu, radne zakoupeny???

Ne..

Pak je mi lito, ale nase forum se nezabyva nelagalnimi systemy - je to zcela jasne popsano v pravidlech fora a charte mezinarodni aliance ASAP, jejiz jsme cleny...