Win 8.1 sekání systému (ntb HP)

[Razor339]

Zdravím, mám ntb HP ProBook 4540s (přednainstalovaný Windows 8).
Na ntb přestal jít ethernet port, tak jsem provedl přeinstalaci ovladače, a také provedl už upgrade na Win 8.1.
No nyní se ntb chová celý zmateně, ještě před upgrade se sama zničeho nic převracela obrazovka vzhůru nohama. Nyní ethernet port nejde hlasí jen že sítový kabel byl odpojen, wifi přestala jít také a hlásí že není dostupné žádné připojení, ntb se několikrát restartoval sám a vypsal vždy že nastala nějaká chyba. Po naběhnutí systému celkově ntb pomalý, posekaný, někde kliknout jde, něco funguje něco ne, nabídka v metru pro obnovení systému ani nenaběhne a spadne to. Brána firewall se sama vypla a nejde zapnout, avast i defender od MS se také vypl sám. Neustále něco padá a seká se. Zkoušel sem provést částečné obnovení (nejde prý je jednotka zamknuta), tovární obnovení také nejde, prý že chybí jednotka pro obnovení nebo něco takového. Tak nevím co stím
Jestli je tu někdo kdo by mi pomohl?

Předem děkuji za odpověď

[motji]

Zdravím
Napadá mě, že bud´je poškozen disk, nebo vir, nebo je zase nějaká chyba v systému...přece jen win8.1. má ještě své mouchy. Pro začátek vložte oba logy ze Rsitu http://forum.viry.cz/viewtopic.php?f=30&t=130787

[Razor339]

Tak tady je LOG

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jaroslav at 2014-08-25 22:02:51
Microsoft Windows 8.1
System drive C: has 157 GB (77%) free of 205 GB
Total RAM: 3979 MB (80% free)

HijackThis download failed

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\WINDOWS\system32\Hpservice.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork
dashost.exe {1c37008e-de19-4e4f-8b6fb558b8e22e8c}
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe"
"C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
"c:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe"
"C:\Program Files (x86)\PDF Complete\pdfsvc.exe" /startedbyscm:66B66708-40E2BE4D-pdfcService
"C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe" KMPProcess
C:\Windows\system32\vcsFPService.exe
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe"
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-87981144-0143-4144-8406-04eb4af913ba -SystemEventPortName:HostProcess-2cb2979f-8f5b-4e63-a6c7-144c680d1b54 -IoCancelEventPortName:HostProcess-8cfec4ce-ebb1-45e5-80b4-32b3dd471637 -NonStateChangingEventPortName:HostProcess-b2be0abf-5ba1-432c-9c03-e348c5ebeabe -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:e696209a-6524-4e2f-a387-d0f9cebbf57b -DeviceGroupId:
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a1a19a5d-f0ee-4b86-b1a4-a21620cba0bf -SystemEventPortName:HostProcess-9f9fffe0-b8e3-4a9c-a66e-9afa6a8d8f07 -IoCancelEventPortName:HostProcess-a39977f5-fc1d-4dc8-8157-2d75d0dd395b -NonStateChangingEventPortName:HostProcess-4d4d63c3-0308-4942-970e-06bec6c88502 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:b642e3a2-204e-48fe-bdec-94b3d0a253b2 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"

"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files\IDT\WDM\sttray64.exe"
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-2a1f318b-7b69-4400-9ac7-eed1f81c1d19 -SystemEventPortName:HostProcess-a5d7037a-8766-425e-b6f1-410f8aee83aa -IoCancelEventPortName:HostProcess-2c476c0d-3b2a-48a5-b666-979e60c85bb5 -NonStateChangingEventPortName:HostProcess-e547395b-abb9-4934-b6cb-0e39178b3b1c -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ac26f386-dc41-4b22-b98e-c35f0037978d -DeviceGroupId:WpdFsGroup
"C:\Users\Jaroslav\Desktop\RSITx64.exe"
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe11_ Global\UsGthrCtrlFltPipeMssGthrPipe11 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 584 588 596 65536 592

======Scheduled tasks folder======

C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\HPCeeScheduleForJaroslav.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForJaroslav (null)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2013-11-28 209504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-08-11 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2013-11-28 176736]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-08-11 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2013-11-28 6126680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28 4438104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BtPreLoad"=C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [2012-08-20 64640]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-03-14 2779024]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2012-08-06 1425408]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2014-01-29 171992]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2014-01-29 399832]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2014-01-29 442328]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-08-19 21720]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PDF Complete"=C:\Program Files (x86)\PDF Complete\pdfsty.exe [2013-02-07 683656]
"HP HD Webcam Driver_Monitor"=C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe [2012-07-26 303480]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-11 4085896]
"QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2013-10-16 337184]
""= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2014-01-29 442880]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-08-25 22:02:51 ----D---- C:\rsit
2014-08-25 22:02:51 ----D---- C:\Program Files\trend micro
2014-08-24 11:10:48 ----D---- C:\WINDOWS\Minidump
2014-08-21 18:55:19 ----D---- C:\WINDOWS\LastGood.Tmp
2014-08-21 18:55:02 ----A---- C:\WINDOWS\system32\RtNicProp64.dll
2014-08-21 18:55:02 ----A---- C:\WINDOWS\system32\drivers\Rt630x64.sys
2014-08-21 18:16:11 ----D---- C:\Program Files (x86)\Realtek
2014-08-21 18:10:29 ----RD---- C:\WINDOWS\BrowserChoice
2014-08-21 18:07:38 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2014-08-21 18:07:38 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2014-08-21 18:07:37 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2014-08-21 18:07:37 ----A---- C:\WINDOWS\system32\dxgi.dll
2014-08-21 18:07:37 ----A---- C:\WINDOWS\system32\dwmcore.dll
2014-08-21 18:07:37 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2014-08-21 18:07:35 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-08-21 18:07:34 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-08-21 18:07:26 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-08-21 18:07:24 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-08-21 18:07:22 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-08-21 18:07:21 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-08-21 18:07:19 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-08-21 18:07:17 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-08-21 18:07:17 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-08-21 18:07:17 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-08-21 18:07:17 ----A---- C:\WINDOWS\system32\wininet.dll
2014-08-21 18:07:17 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-08-21 18:07:17 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-08-21 18:07:17 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-08-21 18:07:16 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-08-21 18:07:16 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-08-21 18:07:15 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-08-21 18:07:14 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-08-21 18:07:14 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-08-21 18:07:14 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-08-21 18:07:14 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-08-21 18:07:13 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-08-21 18:07:13 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-08-21 18:07:12 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-08-21 18:06:59 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-08-21 18:06:54 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2014-08-21 18:06:54 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-21 18:04:39 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-08-21 18:04:39 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-08-21 18:04:38 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-08-21 18:04:38 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-08-21 18:04:36 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-08-21 18:04:36 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-08-21 18:04:36 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-08-21 18:04:35 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-08-21 18:04:35 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-08-21 18:04:06 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-08-21 18:04:06 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-08-21 18:04:03 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-08-21 18:03:58 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-08-21 18:03:57 ----A---- C:\WINDOWS\system32\vpnike.dll
2014-08-21 18:03:57 ----A---- C:\WINDOWS\system32\localspl.dll
2014-08-21 18:03:48 ----A---- C:\WINDOWS\system32\fveapi.dll
2014-08-21 18:03:48 ----A---- C:\WINDOWS\system32\dhcpcore.dll
2014-08-21 18:03:47 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-08-21 18:03:46 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-08-21 18:03:46 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-08-21 18:03:44 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore.dll
2014-08-21 18:03:37 ----A---- C:\WINDOWS\system32\framedynos.dll
2014-08-21 18:03:37 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-08-21 18:03:35 ----A---- C:\WINDOWS\system32\dhcpcore6.dll
2014-08-21 18:03:34 ----A---- C:\WINDOWS\SYSWOW64\framedynos.dll
2014-08-21 18:03:34 ----A---- C:\WINDOWS\SYSWOW64\dhcpcore6.dll
2014-08-21 18:03:34 ----A---- C:\WINDOWS\system32\BFE.DLL
2014-08-21 18:03:34 ----A---- C:\WINDOWS\system32\bdesvc.dll
2014-08-21 18:03:33 ----A---- C:\WINDOWS\system32\ncobjapi.dll
2014-08-21 18:03:33 ----A---- C:\WINDOWS\system32\drivers\agilevpn.sys
2014-08-21 18:03:32 ----A---- C:\WINDOWS\SYSWOW64\ncobjapi.dll
2014-08-21 18:03:32 ----A---- C:\WINDOWS\system32\winbici.dll
2014-08-21 18:03:32 ----A---- C:\WINDOWS\system32\framedyn.dll
2014-08-21 18:03:31 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2014-08-21 18:03:30 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2014-08-21 18:03:30 ----A---- C:\WINDOWS\system32\WebClnt.dll
2014-08-21 18:03:30 ----A---- C:\WINDOWS\system32\Robocopy.exe
2014-08-21 18:03:29 ----A---- C:\WINDOWS\SYSWOW64\Robocopy.exe
2014-08-21 18:03:29 ----A---- C:\WINDOWS\system32\IKEEXT.DLL
2014-08-21 18:03:29 ----A---- C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-21 18:03:29 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-21 18:03:28 ----A---- C:\WINDOWS\SYSWOW64\framedyn.dll
2014-08-21 18:03:28 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc.dll
2014-08-21 18:03:28 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-08-21 18:03:28 ----A---- C:\WINDOWS\system32\BulkOperationHost.exe
2014-08-21 18:03:27 ----A---- C:\WINDOWS\SYSWOW64\dhcpcsvc6.dll
2014-08-21 18:03:27 ----A---- C:\WINDOWS\system32\drivers\vwififlt.sys
2014-08-21 18:03:26 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-08-21 18:03:26 ----A---- C:\WINDOWS\system32\srms.dat
2014-08-21 18:03:26 ----A---- C:\WINDOWS\system32\reseteng.dll
2014-08-21 18:02:42 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-08-21 18:02:42 ----A---- C:\WINDOWS\system32\MDMAgent.exe
2014-08-21 18:02:42 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-08-21 18:02:42 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-08-21 18:02:30 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-08-21 18:02:30 ----A---- C:\WINDOWS\system32\msi.dll
2014-08-21 18:02:29 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-08-21 18:02:29 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-08-21 18:02:29 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-08-21 18:02:29 ----A---- C:\WINDOWS\system32\consent.exe
2014-08-21 18:02:29 ----A---- C:\WINDOWS\system32\authui.dll
2014-08-12 01:25:47 ----SHD---- C:\Recovery
2014-08-12 01:25:40 ----DC---- C:\WINDOWS\Panther
2014-08-12 01:24:51 ----D---- C:\Windows.old
2014-08-12 01:24:31 ----A---- C:\WINDOWS\SYSWOW64\wusa.exe
2014-08-12 01:24:31 ----A---- C:\WINDOWS\system32\wusa.exe
2014-08-12 01:23:42 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-08-12 01:23:23 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-08-12 01:23:23 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-08-12 01:22:58 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-08-12 01:22:58 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\wlidprov.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\wlangpui.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Graphics.Printing.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\w32tm.exe
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\userenv.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\sxproxy.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\spp.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\ReInfo.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\pdh.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\nshwfp.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\l2gpstore.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\FWPUCLNT.DLL
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\davclnt.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\CredentialMigrationHandler.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-08-12 01:21:21 ----A---- C:\WINDOWS\system32\drivers\wof.sys
2014-08-12 01:21:20 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\wlangpui.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\SetNetworkLocation.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\SessEnv.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\rasapi32.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\msftedit.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\l2gpstore.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\drivers\tcpipreg.sys
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\Display.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\dcomp.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\d3d11.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\cdd.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\system32\aclui.dll
2014-08-12 01:21:20 ----A---- C:\WINDOWS\explorer.exe
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Sensors.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\SessEnv.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\LocationApi.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\WsmWmiPl.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\wlidprov.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\w32tm.exe
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\userenv.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\sxproxy.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\spp.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\RMapi.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\ReInfo.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\ReAgent.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\pdh.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\ole32.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\nshwfp.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\netlogon.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\msxml6.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\LocationApi.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\kernel32.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\kerberos.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\FWPUCLNT.DLL
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\dfsc.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\dnsapi.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\DevPropMgr.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\davclnt.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-08-12 01:21:19 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\SYSWOW64\DaOtpCredentialProvider.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\WUDFSvc.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\WUDFPlatform.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\WUDFHost.exe
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\rsaenh.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\hal.dll
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\WUDFRd.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\WUDFPf.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\usbd.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-08-12 01:19:01 ----A---- C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-08-12 01:18:30 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-08-12 01:18:30 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-08-12 01:18:30 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-08-12 01:18:30 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-08-12 01:18:30 ----A---- C:\WINDOWS\system32\certcli.dll
2014-08-12 01:18:30 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-08-12 01:18:15 ----A---- C:\WINDOWS\SYSWOW64\mrt100.dll
2014-08-12 01:18:15 ----A---- C:\WINDOWS\SYSWOW64\mrt_map.dll
2014-08-12 01:18:15 ----A---- C:\WINDOWS\system32\mrt100.dll
2014-08-12 01:18:15 ----A---- C:\WINDOWS\system32\mrt_map.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\twinui.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2014-08-12 01:18:03 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2014-08-12 01:17:43 ----A---- C:\WINDOWS\system32\termsrv.dll
2014-08-12 01:17:39 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-08-12 01:17:01 ----A---- C:\WINDOWS\SYSWOW64\qedit.dll
2014-08-12 01:17:01 ----A---- C:\WINDOWS\system32\qedit.dll
2014-08-12 01:16:58 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-08-12 01:16:58 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-08-12 01:16:54 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2014-08-12 01:16:54 ----A---- C:\WINDOWS\system32\FntCache.dll
2014-08-12 01:16:54 ----A---- C:\WINDOWS\system32\DWrite.dll
2014-08-12 01:16:49 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-08-12 01:16:49 ----A---- C:\WINDOWS\system32\win32k.sys
2014-08-12 01:16:49 ----A---- C:\WINDOWS\system32\osk.exe
2014-08-12 01:16:35 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-08-12 01:16:22 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\wups.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\ubpm.dll
2014-08-12 01:16:22 ----A---- C:\WINDOWS\system32\storewuauth.dll
2014-08-12 01:15:27 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-08-12 01:15:27 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-08-12 01:15:27 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\winmde.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\swprv.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\srcore.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\srclient.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\shell32.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\resutils.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\propsys.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\mispace.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\mf.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-08-12 01:14:50 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\services.exe
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-08-12 01:14:49 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-08-12 01:11:15 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2014-08-12 01:11:15 ----D---- C:\Program Files (x86)\Reference Assemblies
2014-08-12 01:11:15 ----D---- C:\Program Files (x86)\MSBuild
2014-08-12 01:11:13 ----D---- C:\Program Files\Reference Assemblies
2014-08-12 01:11:13 ----D---- C:\Program Files\MSBuild
2014-08-12 01:10:35 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2014-08-12 01:10:35 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-08-12 01:10:33 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-08-12 01:10:32 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-08-12 01:00:58 ----SHD---- C:\ProgramData\Šablony
2014-08-12 01:00:58 ----SHD---- C:\ProgramData\Plocha
2014-08-12 01:00:58 ----SHD---- C:\ProgramData\Nabídka Start
2014-08-12 01:00:58 ----SHD---- C:\ProgramData\Dokumenty
2014-08-12 01:00:58 ----SHD---- C:\ProgramData\Data aplikací
2014-08-12 01:00:25 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2014-08-12 00:41:54 ----SD---- C:\Users\Jaroslav\AppData\Roaming\Microsoft
2014-08-12 00:33:44 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2014-08-12 00:28:33 ----D---- C:\Program Files\Synaptics
2014-08-12 00:28:31 ----D---- C:\WINDOWS\system32\SRSLabs
2014-08-12 00:28:22 ----D---- C:\Intel
2014-08-12 00:26:49 ----D---- C:\WINDOWS\Prefetch
2014-08-11 15:24:34 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2014-08-11 15:24:33 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2014-08-11 15:24:30 ----A---- C:\WINDOWS\avastSS.scr
2014-08-11 08:57:25 ----A---- C:\WINDOWS\SYSWOW64\avast5.ini
2014-08-11 08:57:25 ----A---- C:\WINDOWS\avast5.ini

======List of files/folders modified in the last 1 month======

2014-08-25 22:02:51 ----RD---- C:\Program Files
2014-08-25 22:02:11 ----RD---- C:\WINDOWS\System32
2014-08-25 22:02:11 ----D---- C:\WINDOWS\Inf
2014-08-25 22:02:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-24 22:35:29 ----D---- C:\WINDOWS\system32\LogFiles
2014-08-24 12:55:16 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-08-24 12:55:14 ----D---- C:\ProgramData\PDFC
2014-08-24 12:53:19 ----D---- C:\WINDOWS\Temp
2014-08-24 12:00:00 ----D---- C:\WINDOWS\system32\drivers\UMDF
2014-08-24 11:56:49 ----D---- C:\WINDOWS\system32\DriverStore
2014-08-24 11:56:44 ----D---- C:\WINDOWS\Tasks
2014-08-24 11:56:33 ----D---- C:\Windows
2014-08-24 11:56:06 ----SHD---- C:\System Volume Information
2014-08-22 01:21:13 ----HD---- C:\Program Files\WindowsApps
2014-08-22 01:21:10 ----D---- C:\WINDOWS\AppReadiness
2014-08-22 01:20:20 ----D---- C:\WINDOWS\system32\sru
2014-08-21 19:04:28 ----D---- C:\WINDOWS\Microsoft.NET
2014-08-21 19:02:20 ----RSD---- C:\WINDOWS\assembly
2014-08-21 18:55:19 ----D---- C:\WINDOWS\system32\drivers
2014-08-21 18:55:17 ----D---- C:\WINDOWS\system32\catroot
2014-08-21 18:47:43 ----HD---- C:\$Windows.~BT
2014-08-21 18:47:38 ----D---- C:\WINDOWS\Logs
2014-08-21 18:45:32 ----D---- C:\WINDOWS\system32\config
2014-08-21 18:41:36 ----D---- C:\WINDOWS\CbsTemp
2014-08-21 18:41:32 ----D---- C:\WINDOWS\WinSxS
2014-08-21 18:39:31 ----A---- C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-08-21 18:34:25 ----D---- C:\WINDOWS\system32\wdi
2014-08-21 18:30:42 ----D---- C:\WINDOWS\SysWOW64
2014-08-21 18:30:41 ----RD---- C:\WINDOWS\ToastData
2014-08-21 18:30:41 ----D---- C:\WINDOWS\system32\migration
2014-08-21 18:30:37 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-08-21 18:30:37 ----D---- C:\WINDOWS\MediaViewer
2014-08-21 18:30:36 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-08-21 18:30:35 ----D---- C:\WINDOWS\system32\en-US
2014-08-21 18:30:34 ----D---- C:\WINDOWS\system32\wbem
2014-08-21 18:30:32 ----D---- C:\WINDOWS\Camera
2014-08-21 18:30:31 ----D---- C:\WINDOWS\FileManager
2014-08-21 18:26:45 ----D---- C:\Program Files\Internet Explorer
2014-08-21 18:26:45 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-21 18:26:44 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-08-21 18:26:42 ----D---- C:\WINDOWS\PolicyDefinitions
2014-08-21 18:26:41 ----D---- C:\WINDOWS\system32\cs-CZ
2014-08-21 18:16:11 ----RD---- C:\Program Files (x86)
2014-08-21 18:16:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-08-21 18:16:04 ----D---- C:\swsetup
2014-08-21 18:05:15 ----D---- C:\Program Files\Common Files
2014-08-21 18:05:13 ----D---- C:\Program Files (x86)\Common Files
2014-08-21 18:05:11 ----D---- C:\Program Files (x86)\Intel
2014-08-21 18:02:06 ----D---- C:\WINDOWS\system32\restore
2014-08-21 18:01:58 ----D---- C:\WINDOWS\system32\catroot2
2014-08-21 17:55:13 ----SHD---- C:\WINDOWS\Installer
2014-08-21 17:55:12 ----HD---- C:\Config.Msi
2014-08-21 17:53:22 ----D---- C:\WINDOWS\SoftwareDistribution
2014-08-12 13:50:34 ----D---- C:\WINDOWS\system32\Tasks
2014-08-12 13:50:24 ----SD---- C:\ProgramData\Microsoft
2014-08-12 13:50:24 ----D---- C:\Program Files (x86)\Microsoft
2014-08-12 13:37:32 ----SHD---- C:\$Recycle.Bin
2014-08-12 13:33:49 ----D---- C:\WINDOWS\LiveKernelReports
2014-08-12 01:21:49 ----D---- C:\WINDOWS\system32\setup
2014-08-12 01:17:37 ----D---- C:\WINDOWS\system32\SecureBootUpdates
2014-08-12 01:15:30 ----D---- C:\Program Files\Windows Defender
2014-08-12 01:15:30 ----D---- C:\Program Files (x86)\Windows Defender
2014-08-12 01:15:13 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-08-12 01:10:09 ----D---- C:\WINDOWS\apppatch
2014-08-12 01:00:58 ----HD---- C:\ProgramData
2014-08-12 01:00:58 ----D---- C:\Program Files\Windows NT
2014-08-12 01:00:57 ----D---- C:\WINDOWS\Registration
2014-08-12 00:58:48 ----RSD---- C:\WINDOWS\Media
2014-08-12 00:52:30 ----D---- C:\WINDOWS\system32\Sysprep
2014-08-12 00:52:30 ----D---- C:\WINDOWS\system32\STRING
2014-08-12 00:52:13 ----RSD---- C:\WINDOWS\Fonts
2014-08-12 00:52:13 ----D---- C:\WINDOWS\ShellNew
2014-08-12 00:49:08 ----D---- C:\WINDOWS\WinStore
2014-08-12 00:49:07 ----D---- C:\WINDOWS\twain_32
2014-08-12 00:49:07 ----D---- C:\WINDOWS\SYSWOW64\winrm
2014-08-12 00:49:07 ----D---- C:\WINDOWS\SYSWOW64\WCN
2014-08-12 00:49:06 ----D---- C:\WINDOWS\SYSWOW64\sysprep
2014-08-12 00:49:06 ----D---- C:\WINDOWS\SYSWOW64\SMI
2014-08-12 00:49:06 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2014-08-12 00:49:06 ----D---- C:\WINDOWS\SYSWOW64\SDA
2014-08-12 00:49:06 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2014-08-12 00:49:06 ----D---- C:\WINDOWS\SYSWOW64\MUI
2014-08-12 00:49:06 ----D---- C:\WINDOWS\SYSWOW64\migwiz
2014-08-12 00:49:05 ----D---- C:\WINDOWS\SYSWOW64\LogFiles
2014-08-12 00:49:04 ----D---- C:\WINDOWS\SYSWOW64\IME
2014-08-12 00:49:04 ----D---- C:\WINDOWS\SYSWOW64\en-US
2014-08-12 00:49:03 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2014-08-12 00:49:03 ----D---- C:\WINDOWS\SYSWOW64\drivers
2014-08-12 00:49:03 ----D---- C:\WINDOWS\SYSWOW64\catroot
2014-08-12 00:49:01 ----D---- C:\WINDOWS\system32\winrm
2014-08-12 00:49:00 ----D---- C:\WINDOWS\system32\WCN
2014-08-12 00:49:00 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2014-08-12 00:48:58 ----D---- C:\WINDOWS\system32\spool
2014-08-12 00:48:54 ----D---- C:\WINDOWS\system32\slmgr
2014-08-12 00:48:54 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2014-08-12 00:48:25 ----D---- C:\WINDOWS\system32\oobe
2014-08-12 00:48:25 ----D---- C:\WINDOWS\system32\NDF
2014-08-12 00:48:25 ----D---- C:\WINDOWS\system32\MUI
2014-08-12 00:48:25 ----D---- C:\WINDOWS\system32\IME
2014-08-12 00:47:40 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2014-08-12 00:47:40 ----D---- C:\WINDOWS\system32\Boot
2014-08-12 00:47:33 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-08-12 00:47:33 ----D---- C:\WINDOWS\IME
2014-08-12 00:47:33 ----D---- C:\WINDOWS\Help
2014-08-12 00:47:32 ----D---- C:\WINDOWS\DigitalLocker
2014-08-12 00:45:31 ----RD---- C:\Users
2014-08-12 00:45:30 ----D---- C:\ProgramData\PRICache
2014-08-12 00:45:24 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2014-08-12 00:45:24 ----D---- C:\Program Files (x86)\Windows Media Player
2014-08-12 00:45:20 ----D---- C:\Program Files (x86)\Microsoft.NET
2014-08-12 00:45:16 ----SHD---- C:\Program Files\Windows Sidebar
2014-08-12 00:45:16 ----D---- C:\Program Files\Windows Media Player
2014-08-12 00:45:16 ----D---- C:\Program Files\Windows Journal
2014-08-12 00:45:15 ----D---- C:\Program Files\Common Files\microsoft shared
2014-08-12 00:43:11 ----D---- C:\WINDOWS\system32\Recovery
2014-08-12 00:27:01 ----D---- C:\WINDOWS\debug
2014-08-11 23:20:54 ----D---- C:\Program Files\Hewlett-Packard
2014-08-11 23:20:54 ----D---- C:\Program Files (x86)\Hewlett-Packard
2014-08-11 23:20:14 ----D---- C:\Users\Jaroslav\AppData\Roaming\hpqlog
2014-08-11 22:46:45 ----D---- C:\WINDOWS\AUInstallAgent
2014-08-11 15:55:20 ----D---- C:\WINDOWS\system32\MRT
2014-08-11 15:30:28 ----D---- C:\ProgramData\Stardock
2014-08-11 15:24:30 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-08-11 08:54:58 ----D---- C:\ProgramData\CanonIJPLM
2014-08-02 02:17:43 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-08-11 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-08-11 224896]
R0 hpdskflt;@oem40.inf,%service_desc%;HP Filter; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2012-08-22 31040]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-31 645952]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-08-11 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-08-11 427360]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-08-11 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-08-11 79184]
R3 Accelerometer;@oem40.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2012-08-22 43328]
R3 athr;@oem19.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-09-25 3922432]
R3 BTATH_BUS;@oem4.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\WINDOWS\System32\drivers\btath_bus.sys [2012-08-20 33944]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2012-08-20 567808]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2013-08-22 53248]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Zařízení Bluetooth (síť PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 HpqKbFiltr;@oem38.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\WINDOWS\System32\drivers\HpqKbFiltr.sys [2012-08-27 26504]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-01-29 5363200]
R3 IntcDAud;@oem17.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 MEIx64;@oem41.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2014-03-18 167424]
R3 RTL8168;@oem44.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-21 816344]
R3 SensorsServiceDriver;@sensorsservicedriver.inf,%WudfSensorsServiceDriverDisplayName%;Služba Reflektor UMDF pro knihovnu SensorsServiceDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-08-12 227840]
R3 SPUVCbv;@oem18.inf,%SPUVCb.ServiceName%;SPUVCb Driver Service; C:\WINDOWS\System32\Drivers\SPUVCbv_x64.sys [2012-08-03 1062008]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\WINDOWS\system32\DRIVERS\stwrt64.sys [2012-08-06 540160]
R3 SynTP;@oem31.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-10-30 549104]
S1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-08-11 93568]
S2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-08-11 92008]
S3 BTATH_LWFLT;@oem18.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys []
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-08-12 1200128]
S3 JMCR;JMCR; C:\WINDOWS\System32\drivers\jmcr.sys [2014-06-16 176880]
S3 pwdrvio;pwdrvio; \??\C:\WINDOWS\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\WINDOWS\syswow64\pwdspio.sys []
S3 SmbDrv;SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [2012-08-15 41272]
S3 SmbDrvI;SmbDrvI; C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [2012-08-15 43832]
S3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2012-08-20 211584]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160]
R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2013-10-16 681760]
R2 hpsrv;@oem40.inf,%hpservice_desc%;HP Service; C:\WINDOWS\system32\Hpservice.exe [2012-08-22 33600]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2011-02-07 138192]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-20 634632]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-19 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-19 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-19 277824]
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2013-02-07 1135752]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2012-08-06 321536]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-19 365376]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2012-07-19 2714232]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-05-13 1129760]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-08-11 50344]
S2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-08 116648]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2013-08-22 37768]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2013-08-22 37768]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-07-25 162672]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-01-29 279000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-08 116648]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

-----------------EOF-----------------

[Razor339]

a zde INFO

info.txt logfile of random's system information tool 1.10 2014-08-25 22:03:00

======MBR======

0x000003060000D8182F011400E39EE3DDE39EE3DD0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007D1C0EA5000000000200EEFFFFFF01000000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055AA

======Uninstall list======

64 Bit HP CIO Components Installer-->MsiExec.exe /I{FF21C3E6-97FD-474F-9518-8DCBE94C2854}
Adobe Reader XI (11.0.08) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
avast! Free Antivirus-->C:\Program Files\AVAST Software\Avast\Setup\Instup.exe /control_panel /instop:uninstall
Bonjour-->MsiExec.exe /X{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
Canon Easy-PhotoPrint EX-->C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\uninst.exe Uninst.ini uinstrsc.dll
Canon Easy-WebPrint EX-->"C:\Program Files (x86)\Canon\Easy-WebPrint EX\Maint.exe" /UninstallRemove C:\Program Files (x86)\Canon\Easy-WebPrint EX\uninst.ini
Canon Inkjet Printer/Scanner/Fax Extended Survey Program-->C:\Program Files (x86)\Canon\IJPLM\SETUP.EXE -R
Canon MG5300 series MP Drivers-->"C:\Windows\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series\DELDRV64.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series /L0x0005
Canon MG5300 series On-screen Manual-->C:\Program Files (x86)\Canon\IJ Manual\Canon MG5300 series\uninstall.exe
Canon MP Navigator EX 5.0-->"C:\Program Files (x86)\Canon\MP Navigator EX 5.0\Maint.exe" /UninstallRemove C:\Program Files (x86)\Canon\MP Navigator EX 5.0\uninst.ini
Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini uinstrsc.dll
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Energy Star-->MsiExec.exe /I{0FA995CC-C849-4755-B14B-5404CC75DC24}
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Hewlett-Packard ACLM.NET v1.2.2.3-->MsiExec.exe /I{6F340107-F9AA-47C6-B54C-C3A19F11553F}
High Quality Photo Resizer 5.02-->"C:\Program Files (x86)\High Quality Photo Resizer\unins000.exe"
HP 3D DriveGuard-->MsiExec.exe /X{29989969-FED8-4EFB-8FB2-39429D37E471}
HP Customer Experience Enhancements-->MsiExec.exe /X{07FA4960-B038-49EB-891B-9F95930AA544}
HP Documentation-->MsiExec.exe /X{FCD58C04-324A-40D1-BA9E-1A754DF1736D}
HP ESU for Microsoft Windows 8-->MsiExec.exe /X{50F16F43-54B8-43DB-B96F-255546DFB990}
HP HD Webcam Driver-->C:\Program Files (x86)\HP HD Webcam Driver\uninstall.exe
HP Hotkey Support-->MsiExec.exe /X{7F7E2060-7212-4A53-9875-55173E4BA3F0}
HP Postscript Converter-->MsiExec.exe /I{6E14E6D6-3175-4E1A-B934-CAB5A86367CD}
HP Registration Service-->MsiExec.exe /X{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}
HP SoftPaq Download Manager-->MsiExec.exe /I{B50981AD-95E8-4E4D-912A-7C4B738387CA}
HP Software Framework-->MsiExec.exe /X{03619AEC-00EE-43CB-9F4F-25BE4C8C90D2}
HP Software Setup-->MsiExec.exe /X{D1E7D876-6B86-4B35-A93D-15B0D6C43EAF}
HP Support Assistant-->"C:\Program Files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe" -runfromtemp -l0x0409 -removeonly
HP System Default Settings-->MsiExec.exe /X{357FE1E9-5890-4697-95DD-B15E01B4AA2A}
HP Update-->MsiExec.exe /X{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}
HP Wireless Button Driver-->MsiExec.exe /X{30B2D1D8-0A07-4B71-9553-0710C5D31E35}
HP Wireless Button Driver-->MsiExec.exe /X{941DE69D-6CEE-4171-8F1F-3D7E352AA498}
HPDiagnosticAlert-->MsiExec.exe /I{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}
IDT Audio-->"C:\Program Files (x86)\InstallShield Installation Information\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}\Setup.exe" -remove -removeonly
Intel(R) Management Engine Components-->C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\Uninstall\setup.exe -uninstall
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Intel(R) SDK for OpenCL - CPU Only Runtime Package-->C:\Program Files (x86)\Intel\OpenCL SDK\2.0\Uninstall\setup.exe -uninstall
Intel® Trusted Connect Service Client-->MsiExec.exe /I{977D1ABF-4089-4CA7-BA33-CC75808B7ACE}
JMicron Flash Media Controller Driver-->"C:\Program Files (x86)\JMicron\JMCR_DIR\setup.exe" delpkg
KMP Service-->"C:\Program Files (x86)\PANDORA.TV\PanService\unins000.exe"
Microsoft Office Access MUI (Czech) 2010-->MsiExec.exe /X{90140000-0015-0405-1000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2010-->MsiExec.exe /X{90140000-0016-0405-1000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2010-->MsiExec.exe /X{90140000-00BA-0405-1000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2010-->MsiExec.exe /X{90140000-0044-0405-1000-0000000FF1CE}
Microsoft Office Office 32-bit Components 2010-->MsiExec.exe /X{90140000-0043-0000-1000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2010-->MsiExec.exe /X{90140000-00A1-0405-1000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2010-->MsiExec.exe /X{90140000-001A-0405-1000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2010-->MsiExec.exe /X{90140000-0018-0405-1000-0000000FF1CE}
Microsoft Office Professional Plus 2010-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUSR /dll OSETUP.DLL
Microsoft Office Professional Plus 2010-->MsiExec.exe /X{91140000-0011-0000-1000-0000000FF1CE}
Microsoft Office Proof (Czech) 2010-->MsiExec.exe /X{90140000-001F-0405-1000-0000000FF1CE}
Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-1000-0000000FF1CE}
Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-1000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2010-->MsiExec.exe /X{90140000-001F-041B-1000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2010-->MsiExec.exe /X{90140000-002C-0405-1000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2010-->MsiExec.exe /X{90140000-0019-0405-1000-0000000FF1CE}
Microsoft Office Shared 32-bit MUI (Czech) 2010-->MsiExec.exe /X{90140000-0043-0405-1000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2010-->MsiExec.exe /X{90140000-006E-0405-1000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2010-->MsiExec.exe /X{90140000-001B-0405-1000-0000000FF1CE}
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053-->MsiExec.exe /X{B6E3757B-5E77-3915-866A-CCFC4B8D194C}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{071c9b48-7c32-4621-a0ac-3f809523288f}
Microsoft Visual C++ 2005 Redistributable (x64)-->MsiExec.exe /X{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022-->MsiExec.exe /X{350AA351-21FA-3270-8B7A-835434E766AD}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
PDF Complete Corporate Edition-->C:\Program Files (x86)\PDF Complete\uninstall.exe
Qualcomm Atheros Bluetooth Suite (64)-->MsiExec.exe /X{A84A4FB1-D703-48DB-89E0-68B6499D2801}
Qualcomm Atheros Driver Installation Program-->"C:\Program Files (x86)\InstallShield Installation Information\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}\Setup.exe" -runfromtemp -removeonly
Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly
Recuva-->"C:\Program Files\Recuva\uninst.exe"
Registrace uživatele zařízení Canon MG5300 series-->C:\Program Files (x86)\Canon\IJEREG\MG5300 series\UNINST.EXE
Skype™ 6.7-->MsiExec.exe /X{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}
Synaptics Pointing Device Driver-->rundll32.exe "%ProgramFiles%\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
The KMPlayer (remove only)-->"C:\Program Files (x86)\The KMPlayer\uninstall.exe"
Validity Fingerprint Sensor Driver-->MsiExec.exe /X{AA51ED2E-DCE7-415F-9C32-CB9B561D216D}
WinHTTrack Website Copier 3.47-27 (x64)-->"C:\Program Files\WinHTTrack\unins000.exe"
WinRAR 4.20 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe

======System event log======

Computer Name: V6BKERI424023
Event Code: 10010
Message: Server {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} se v daném časovém limitu neregistroval u služby DCOM.
Record Number: 1481
Source Name: Microsoft-Windows-DistributedCOM
Time Written: 20121006172549.983375-000
Event Type: Chyba
User: Jarek\Administrator

Computer Name: V6BKERI424023
Event Code: 98
Message: Svazek OS (\Device\HarddiskVolumeShadowCopy2) je v pořádku. Není nutné provádět žádnou akci.
Record Number: 1480
Source Name: Microsoft-Windows-Ntfs
Time Written: 20121006172523.363590-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: V6BKERI424023
Event Code: 104
Message: Byl vymazán soubor protokolu WitnessClientAdmin.
Record Number: 1479
Source Name: Microsoft-Windows-Eventlog
Time Written: 20121006172501.071609-000
Event Type: Informace
User: Jarek\Administrator

Computer Name: V6BKERI424023
Event Code: 104
Message: Byl vymazán soubor protokolu Windows PowerShell.
Record Number: 1478
Source Name: Microsoft-Windows-Eventlog
Time Written: 20121006172500.955280-000
Event Type: Informace
User: Jarek\Administrator

Computer Name: V6BKERI424023
Event Code: 104
Message: Byl vymazán soubor protokolu System.
Record Number: 1477
Source Name: Microsoft-Windows-Eventlog
Time Written: 20121006172500.718789-000
Event Type: Informace
User: Jarek\Administrator

=====Application event log=====

Computer Name: V6BKERI424023
Event Code: 8301
Message: Scoping completed for shadowcopy \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2.
Record Number: 919
Source Name: Microsoft-Windows-System-Restore
Time Written: 20121006172539.053605-000
Event Type: Informace
User: Jarek\Administrator

Computer Name: V6BKERI424023
Event Code: 8300
Message: Scoping started for shadowcopy \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2.
Record Number: 918
Source Name: Microsoft-Windows-System-Restore
Time Written: 20121006172534.456203-000
Event Type: Informace
User: Jarek\Administrator

Computer Name: V6BKERI424023
Event Code: 8194
Message: Bod obnovení byl úspěšně vytvořen (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Popis = Initial Restore Point).
Record Number: 917
Source Name: System Restore
Time Written: 20121006172521.000000-000
Event Type: Informace
User:

Computer Name: V6BKERI424023
Event Code: 8196
Message: Obnovení systému bylo povoleno (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Svazek = ).
Record Number: 916
Source Name: System Restore
Time Written: 20121006172504.000000-000
Event Type: Informace
User:

Computer Name: V6BKERI424023
Event Code: 8195
Message: Obnovení systému bylo zakázáno (Proces = C:\Windows\system32\wbem\wmiprvse.exe; Svazek = ).
Record Number: 915
Source Name: System Restore
Time Written: 20121006172504.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: V6BKERI424023
Event Code: 1100
Message: Služba protokolování událostí byla ukončena.
Record Number: 9765
Source Name: Microsoft-Windows-Eventlog
Time Written: 20121006172744.792275-000
Event Type: Úspěšný audit
User:

Computer Name: V6BKERI424023
Event Code: 4647
Message: Odhlášení spuštěné uživatelem:

Předmět:
ID zabezpečení: S-1-5-21-1569098308-485604084-1641831416-500
Název účtu: Administrator
Doména účtu: V6BKERI424023
ID přihlášení: 0x1A2C3

Tato událost je generována, pokud je spuštěno odhlášení. Není povolena žádná další uživatelem spuštěná akce. Tuto událost lze interpretovat jako událost odhlášení.
Record Number: 9764
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121006172743.635805-000
Event Type: Úspěšný audit
User:

Computer Name: V6BKERI424023
Event Code: 4905
Message: Došlo k pokusu zrušit registraci zdroje události zabezpečení.

Předmět
ID zabezpečení: S-1-5-18
Název účtu: V6BKERI424023$
Doména účtu: WORKGROUP
ID přihlášení: 0x3E7

Proces:
ID procesu: 0xfc4
Název procesu: C:\Windows\System32\VSSVC.exe

Zdroj události:
Název zdroje: VSSAudit
ID zdroje události: 0x1FB553
Record Number: 9763
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121006172526.018478-000
Event Type: Úspěšný audit
User:

Computer Name: V6BKERI424023
Event Code: 4904
Message: Došlo k pokusu zaregistrovat zdroj události zabezpečení.

Předmět :
ID zabezpečení: S-1-5-18
Název účtu: V6BKERI424023$
Doména účtu: WORKGROUP
ID přihlášení: 0x3E7

Proces:
ID procesu: 0xfc4
Název procesu: C:\Windows\System32\VSSVC.exe

Zdroj události:
Název zdroje: VSSAudit
ID zdroje události: 0x1FB553
Record Number: 9762
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20121006172526.002404-000
Event Type: Úspěšný audit
User:

Computer Name: V6BKERI424023
Event Code: 1102
Message: Protokol auditu byl vymazán.
Předmět:
ID zabezpečení: S-1-5-21-1569098308-485604084-1641831416-500
Název účtu: Administrator
Název domény: V6BKERI424023
ID přihlášení: 0x1A2C3
Record Number: 9761
Source Name: Microsoft-Windows-Eventlog
Time Written: 20121006172500.472038-000
Event Type: Úspěšný audit
User:

======Environment variables======

"FP_NO_HOST_CHECK"=NO
"USERNAME"=SYSTEM
"ComSpec"=%SystemRoot%\system32\cmd.exe
"TMP"=%SystemRoot%\TEMP
"OS"=Windows_NT
"windir"=%SystemRoot%
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=2
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"Path"=c:\Program Files (x86)\Intel\iCLS Client\;c:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64
"OnlineServices"=Online Services
"Platform"=BNB
"PCBRAND"=Pavilion

-----------------EOF-----------------

[motji]

Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem

Stáhněte AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/
-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.

[Razor339]

Tak tady to je

log JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Jaroslav on po 25. 08. 2014 at 22:27:15,85
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 25. 08. 2014 at 22:33:42,58
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



log AdwCleaner[S0] (ještě to taky vygenerovalo AdwCleaner[R0])

# AdwCleaner v3.308 - Report created 25/08/2014 at 22:38:18
# Updated 20/08/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Jaroslav - JAREK
# Running from : C:\Users\Jaroslav\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17239


-\\ Google Chrome v36.0.1985.125

[ File : C:\Users\Jaroslav\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Extension] : eofcbnmajmjmplflapaojjnihcjkigck

*************************

AdwCleaner[R0].txt - [951 octets] - [25/08/2014 22:36:09]
AdwCleaner[S0].txt - [877 octets] - [25/08/2014 22:38:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [936 octets] ##########

[motji]

Můžete ještě vyzkoušet počítač v nouzovém režimu? V manuálu k NTB se dočtete, jak ho zapnout, teď u NTB je to u každého výrobce jinak, dřív stačilo F8 po restartu.
Jinak já nevidím žádný problém po virové stránce, když tak ještě zkontrolujeme stav disku. Vyzkoušejte jak to vypadá v nouzovém režimu, co funguje a co ne

[Razor339]

Zkusím tedy ten nouzový režim ještě.
Momentálně je na tom ntb tak, že ethernet port nefunguje (píše síťový kabel byl odpojen), wifi taky nic, píše že není nic k dispozici.
Centrum akcí píše že je potřeba zkontrolovat jednotku, že byly nalezeny chyby. kontrola ale nejde provést vypíše se systémová chyba fsavailux.exe a že chybí v pc ifsutil.dll. Centrum akcí také píše že firewall brána je vypnuta, ale nejde zapnout pomocí centra, tak ji chci zapnout ručně, ale jen s evypíše že nelze změnit nastavení, kód chyby 0x8007042c. Je to divné.
Zatím děkuji za pomoc.

[motji]

Zkuste do příkazového(vyhledávacího) řádku napsat

Kód: Vybrat vše

SFC /scannow 

[/b]a enter. Uvidíte, zda proběhne kontrola systémových souborů.

[Razor339]

Tak sem zjistil že to nechce ani tiskárnu najít, při pokusu instalace ovladaču tiskárny opět chyba - WerFault - chyba aplikace (instrukce na 0x0000000077AF8 se odkazovala na paměť na 0x00000074A76000. Požadovaná data nebyla umístěna do paměti kvůli vstupně-výstupní chybě na 0xc0000428.)

SFC /scannow jsem provedl v příkazovém řádku.
Napsáno že test začal, po chvíli vypsáno - Windows Resource Protection could not perform the requested operation.

Chyba WerFault i po startu systému skáče.

[motji]

Inst. cd asi nemáte, že? já musím něco vymyslet, bohužel žádného odbornka na osmičky tu nemáme . Odkdy to dělá, máte ten systém už delší dobu?
Zkuste ještě po restartu naplánovat kontrolu disku.

stáhněte
http://www.slunecnice.cz/sw/crystaldiskinfo/
- spusťte ho a v nabídce zvolte Kopírovat.
-Data ze schránky sem pak vložte pomocí Ctrl+V

[Razor339]

Inst. cd nemám, byl tam přednainstalovaný Windows 8, ntb běžel bez problému asi rok, pak jednoho dne přestal jít při ethernet port a hlásil že síťový kabel byl odpojen, žádní MS pomoc nepomohla, přeinstaloval sem ovladač na ethernet a MS store nabízel upgrade na win 8.1 tak jsem jej provedl a od té doby (minulý týden) jak kdyby se ntb zbláznil. Ještě před upgrade se sám začal přehazpvat obraz vzhůru nohama. Chtěl jsem dát obnovení do továrního nastavení co nabízí win 8, ale to nejde provést jak sem již psal, divné (na jiných ntb sem takhle už několikrát dával obnovu do továrního nastavení).

K tomu crystal disk info, instalace mi šla spustit jen jako správce, normálně při zapnutí vyskočila chyba WerFault - chyba aplikace (instrukce na 0x0000000077AF8 se odkazovala na paměť na 0x00000074A76000. Požadovaná data nebyla umístěna do paměti kvůli vstupně-výstupní chybě na 0xc0000428.)
Při zapnuté instalaci jako správce, instalace proběhla ale několikrát vyskočila chyba WerFault .
Při zapnutí programu crystal disk info, normálně nebo jako správce vyskočí opět chyba WerFault a program se nespustí.

[motji]

A co v nouzovém režimu?
Aktualizujte všechny ovladače, a ještě zkontrolujte RAM - třeba přes Gold memory.
Virem to nebude, případně se budete muset obrátit na nějaké forum, kde řeší tyto problémy, my se zaměřujeme na viry a v případě nových win8 moc zkušeností nemám

[Razor339]

Zatím moc děkuji, vše tedy vyzkouším, (do nouzového režimu jsem se ještě nedostal, musím se podívat jak na to)

[motji]

Zkuste, ted nově na NTB to bývá různě, F8, F3 a podobně. pak dejte vědět