Kontrola
Napsal: 02 zář 2014 05:36
Zdravím, moc bych prosil o kontrolu logu.
Předem děkuji..
1. část
Logfile of random's system information tool 1.08 (written by random/random)
Run by frantacer at 2014-09-02 06:25:21
Microsoft Windows 8.1 Pro
System drive C: has 62 GB (58%) free of 108 GB
Total RAM: 3987 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:25:34, on 2. 9. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\frantacer.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Trend Micro Osprey BHO - {959A5673-7971-48e6-AF54-58F745AC4ABC} - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg32.dll
O2 - BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe32.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Plus Internet] C:\Program Files (x86)\Plus Internet\PlusInternetChecker.exe
O4 - HKLM\..\Run: [RadioController] "C:\Program Files (x86)\RadioController\RfBtnHelper.exe" Start_Run
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O4 - Startup: Dropbox.lnk = C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O4 - Global Startup: STIMON.lnk = ?
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - (no file)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe32.dll
O18 - Protocol: tmop - {69FD7CE3-4604-4FE6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg32.dll
O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O18 - Protocol: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: IviRegMgr - InterVideo - c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: JumpStart Wi-Fi Protected Setup (jswpsapi) - Wireless - C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PLAY ONLINE. OUC (PLAY ONLINE. RunOuc) - Unknown owner - C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Service KMSELDI - Unknown owner - C:\Program Files\KMSpico\Service_KMS.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12657 bytes
======Listing Processes======
wininit.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
"C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=nb -dt=60000 -ad -bt=0
uiWatchDog.exe 1592
"c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
\??\C:\Windows\system32\conhost.exe 0x4
coreFrameworkHost.exe 1592 1
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ELISOFT\MSSQL\Binn\sqlservr.exe" -sELISOFT
C:\Windows\SysWow64\perfhost.exe
"C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe" "C:/Program Files (x86)/PLAY ONLINE/UpdateDog/"
C:\Windows\RfBtnSvc64.exe
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
dashost.exe {16fa8950-2ce0-446b-9d759d0bb6946391}
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-cbc740b5-78ea-41ed-bbc7-ab5e0fe0587e -SystemEventPortName:HostProcess-581c0071-dcfe-498e-82f5-ab1ff19fa074 -IoCancelEventPortName:HostProcess-63155990-e071-48d1-8755-d51218051c9f -NonStateChangingEventPortName:HostProcess-030c7a73-01d0-4e37-8a29-200b4568b4be -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:87098f8f-3458-46ca-8d8e-229573dd72b1 -DeviceGroupId:WudfDefaultDevicePool
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Trend Micro\UniClient\UiFrmWrk\WscStatusController.exe"
\??\C:\Windows\system32\conhost.exe 0x4
taskhostex.exe
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
/QuitInfo:0000000000000BA8;00000000000008E0;
/loadhooks /Parent:000000000000111c
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 564 568 576 65536 572
"C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDTouch.exe"
"C:\Program Files\priPrinter\pritray.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe"
"C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe" -nogui
"C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" /FORCE
"C:\Program Files\Rainmeter\Rainmeter.exe"
taskeng.exe {C5ACBD67-1C5D-4BEF-9C38-26806812BFAA}
"C:\Program Files\Microsoft Office\Office15\MsoSync.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Users\frantacer\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\DriverNavigator Scheduled Scan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-07-27 218776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43C6D902-A1C5-45c9-91F6-FD9E90337E18}]
TSToolbarBHO - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-04-11 228552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-12 553384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{959A5673-7971-48e6-AF54-58F745AC4ABC}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg.dll [2014-02-14 452656]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe64.dll [2014-08-06 1345584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-12 211880]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43C6D902-A1C5-45c9-91F6-FD9E90337E18}]
TSToolbarBHO - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-04-11 517440]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-06 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{959A5673-7971-48e6-AF54-58F745AC4ABC}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg32.dll [2014-02-14 334384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe32.dll [2014-08-06 1391664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2014-07-27 1730256]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-06 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCAC5586-44D7-4c43-B64A-F042461A97D2} - Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-04-11 228552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]
{CCAC5586-44D7-4c43-B64A-F042461A97D2} - Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-04-11 517440]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2013-10-09 229824]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-09 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-08-23 2894664]
"priPrinterTray"=C:\Program Files\priPrinter\pritray.exe [2014-06-10 39936]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"=C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2014-03-16 2611808]
"Nektra OEAPI"= []
"OEXPRESS"= []
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2014-06-16 833024]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
""= []
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [2012-09-23 3477640]
"Plus Internet"=C:\Program Files (x86)\Plus Internet\PlusInternetChecker.exe [2013-04-09 641384]
"RadioController"=C:\Program Files (x86)\RadioController\RfBtnHelper.exe [2014-08-04 111216]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]
"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
STIMON.lnk - C:\Program Files (x86)\USB2.0 UVC WebCam\USB2.0 UVC WebCam\STIMON.exe
TP-LINK Wireless Configuration Utility.lnk - C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\Users\frantacer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-09-02 06:25:21 ----D---- C:\rsit
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\x264vfw.dll
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\lagarith.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\xvidvfw.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\xvidcore.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\x264vfw64.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\lagarith.dll
2014-09-02 03:08:40 ----A---- C:\Windows\SYSWOW64\unrar.dll
2014-09-02 03:08:40 ----A---- C:\Windows\system32\unrar64.dll
2014-09-02 03:08:36 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2014-09-02 03:08:31 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2014-09-02 01:22:28 ----D---- C:\Windows\SoftwareDistribution
2014-09-01 23:55:43 ----D---- C:\Windows\softwaredistribution.bak3
2014-09-01 23:54:50 ----D---- C:\Windows\softwaredistribution.bak2
2014-09-01 23:49:07 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-09-01 23:25:39 ----D---- C:\Program Files (x86)\Acer
2014-09-01 21:52:20 ----D---- C:\Windows\softwaredistribution.bak1
2014-09-01 21:32:09 ----D---- C:\Windows\softwaredistribution.bak
2014-08-31 22:34:02 ----D---- C:\Users\frantacer\AppData\Roaming\Dropbox
2014-08-30 10:33:35 ----D---- C:\Windows\LastGood.Tmp
2014-08-30 10:33:34 ----A---- C:\Windows\system32\drivers\btfilter.sys
2014-08-29 13:59:57 ----D---- C:\Users\frantacer\AppData\Roaming\sMedio
2014-08-27 23:28:13 ----A---- C:\Windows\system32\win32k.sys
2014-08-27 16:23:47 ----D---- C:\Windows\smFile
2014-08-27 16:23:46 ----D---- C:\Program Files (x86)\USB2.0 UVC WebCam
2014-08-26 04:12:21 ----D---- C:\Program Files\Synaptics
2014-08-26 04:11:37 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2014-08-26 04:00:10 ----A---- C:\DelFix.txt
2014-08-26 03:03:36 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2014-08-26 03:03:34 ----D---- C:\ProgramData\RogueKiller
2014-08-25 04:02:25 ----D---- C:\ProgramData\unzip
2014-08-25 03:41:51 ----A---- C:\Windows\system32\plkmon64.dll
2014-08-25 03:41:49 ----D---- C:\Program Files\priPrinter
2014-08-25 03:27:19 ----D---- C:\Users\frantacer\AppData\Roaming\Pelikan Software KFT
2014-08-22 03:25:19 ----D---- C:\AX88772C_772B_772A_772_Win8.x_64bit_Driver_v3.16.8.0_WHCK
2014-08-22 02:27:49 ----A---- C:\Windows\system32\drivers\ax88772.sys
2014-08-21 23:54:30 ----D---- C:\ProgramData\sMedio
2014-08-21 23:54:23 ----D---- C:\Program Files (x86)\sMedio
2014-08-21 23:54:21 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-08-19 04:43:48 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-08-19 04:43:48 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-08-19 04:43:48 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-08-19 04:43:48 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-08-19 04:43:47 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-08-19 04:43:47 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-08-19 04:43:47 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-08-19 04:43:47 ----A---- C:\Windows\system32\xinput1_3.dll
2014-08-19 04:43:47 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-08-19 04:43:47 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-08-19 04:43:46 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-08-19 04:43:46 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-08-19 04:43:46 ----A---- C:\Windows\system32\xinput1_2.dll
2014-08-19 04:43:46 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-08-19 04:43:45 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-08-19 04:43:45 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-08-19 04:43:45 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-08-19 04:43:45 ----A---- C:\Windows\system32\xinput1_1.dll
2014-08-19 04:43:45 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-08-19 04:43:45 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-08-19 04:43:43 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-08-19 04:43:43 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-08-19 04:43:41 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-08-19 04:43:41 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-08-19 04:43:41 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-08-19 04:43:41 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-08-19 04:43:41 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-08-19 04:43:41 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-08-19 04:43:40 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-08-19 04:43:40 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-08-16 16:16:33 ----D---- C:\Program Files (x86)\Commercial Service
2014-08-15 02:34:00 ----DC---- C:\Windows\system32\DRVSTORE
2014-08-15 02:09:45 ----D---- C:\ProgramData\XDMessagingv4
2014-08-15 02:09:19 ----D---- C:\Users\frantacer\AppData\Roaming\Abelssoft
2014-08-13 01:58:55 ----D---- C:\Users\frantacer\AppData\Roaming\PlatinumHideIP
2014-08-13 01:58:55 ----D---- C:\ProgramData\PlatinumHideIP
2014-08-13 01:53:59 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2014-08-13 01:53:59 ----A---- C:\Windows\system32\shell32.dll
2014-08-13 01:53:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2014-08-13 01:53:58 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-08-13 01:53:57 ----A---- C:\Windows\system32\Windows.UI.Search.dll
2014-08-13 01:53:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-08-13 01:53:57 ----A---- C:\Windows\system32\mstscax.dll
2014-08-13 01:53:56 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-08-13 01:53:56 ----A---- C:\Windows\system32\twinui.dll
2014-08-13 01:53:56 ----A---- C:\Windows\system32\SettingsHandlers.dll
2014-08-13 01:53:56 ----A---- C:\Windows\system32\d3d10warp.dll
2014-08-13 01:53:55 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2014-08-13 01:53:55 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\mfcore.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\gpsvc.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-08-13 01:53:55 ----A---- C:\Windows\system32\authui.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\actxprxy.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.Search.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\twinui.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\workfolderssvc.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\wlansvc.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\Windows.Media.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\localspl.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\drivers\srv.sys
2014-08-13 01:53:53 ----AC---- C:\Windows\system32\drivers\bthport.sys
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\mispace.dll
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\XpsPrint.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\wuaueng.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\WorkfoldersControl.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-08-13 01:53:53 ----A---- C:\Windows\system32\SRH.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\printui.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\netcfgx.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\mispace.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\mfplat.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-08-13 01:53:53 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-08-13 01:53:53 ----A---- C:\Windows\system32\drivers\netio.sys
2014-08-13 01:53:53 ----A---- C:\Windows\system32\AppxPackaging.dll
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\volsnap.sys
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\USBHUB3.SYS
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\usbccgp.sys
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\spaceport.sys
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\SRH.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\printui.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\mftranscode.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\AppxPackaging.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\aclui.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wuapi.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wsecedit.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\WSDMon.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wlanmsm.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wisp.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\winresume.exe
2014-08-13 01:53:52 ----A---- C:\Windows\system32\winload.exe
2014-08-13 01:53:52 ----A---- C:\Windows\system32\WebClnt.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\usbmon.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\uDWM.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\storagewmi.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\srvsvc.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\spoolsv.exe
2014-08-13 01:53:52 ----A---- C:\Windows\system32\SHCore.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\puiobj.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\mftranscode.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\lsasrv.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-08-13 01:53:52 ----A---- C:\Windows\system32\defragsvc.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\comdlg32.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\clusapi.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\aclui.dll
2014-08-13 01:53:51 ----AC---- C:\Windows\system32\drivers\usbhub.sys
2014-08-13 01:53:51 ----AC---- C:\Windows\system32\drivers\hdaudbus.sys
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\wlanapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\wisp.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\winmmbase.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\storagewmi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\Display.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\AppxSip.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\wucltux.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WSShared.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\wpdbusenum.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WorkFoldersGPExt.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\winmmbase.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\winmm.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\Windows.Networking.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\win32spl.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WiFiDisplay.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\VAN.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\user32.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\twinapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\SndVol.exe
2014-08-13 01:53:51 ----A---- C:\Windows\system32\SettingSync.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\rdpcorets.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\profsvc.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\osk.exe
2014-08-13 01:53:51 ----A---- C:\Windows\system32\mfps.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\httpprxm.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\dwmapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\nwifi.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\NdisImPlatform.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\msgpioclx.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\bridge.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\Display.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\DafPrintProvider.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\conhost.exe
2014-08-13 01:53:51 ----A---- C:\Windows\system32\bcryptprimitives.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\AppxSip.dll
2014-08-13 01:53:50 ----AC---- C:\Windows\system32\drivers\pci.sys
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\wsecedit.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\winmm.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\VAN.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\SettingSync.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\rsaenh.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\puiapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\prnntfy.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\iasnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\gpedit.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wwanconn.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wups2.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wups.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wuauclt.exe
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wshbth.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\WorkFoldersShell.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wlanapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wcmcsp.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-08-13 01:53:50 ----A---- C:\Windows\system32\stobject.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\schannel.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\SearchFolder.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\rsaenh.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\puiapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\prnntfy.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\PrintDialogs.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\ppcsnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\pmcsnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\iasnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\gpedit.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\GdiPlus.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\drivers\ks.sys
2014-08-13 01:53:50 ----A---- C:\Windows\system32\dab.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\browser.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\AppxSysprep.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\adhsvc.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\ActionCenter.dll
2014-08-13 01:53:49 ----AC---- C:\Windows\system32\drivers\bthpan.sys
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\stobject.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\PrintDialogs.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDRUM.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\certcli.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\BluetoothApis.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\wwanmm.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\wlansvcpal.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\wlansec.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\SndVolSSO.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\rdpudd.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDRUM.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDRU.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\Defrag.exe
2014-08-13 01:53:49 ----A---- C:\Windows\system32\compstui.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\certcli.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\BluetoothApis.dll
2014-08-13 01:53:48 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-08-13 01:53:48 ----A---- C:\Windows\SYSWOW64\KBDTT102.DLL
2014-08-13 01:53:48 ----A---- C:\Windows\system32\wudriver.dll
2014-08-13 01:53:48 ----A---- C:\Windows\system32\KBDTT102.DLL
2014-08-13 01:49:16 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-08-13 01:49:16 ----A---- C:\Windows\explorer.exe
2014-08-13 00:43:57 ----A---- C:\Windows\SYSWOW64\SQSRVRES.DLL
2014-08-13 00:43:57 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$ELISOFT-sqlctr10.52.4033.0.dll
2014-08-12 23:22:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-12 23:22:49 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-12 23:22:49 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-12 23:22:49 ----A---- C:\Windows\system32\urlmon.dll
2014-08-12 23:22:48 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-12 23:22:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-12 23:22:48 ----A---- C:\Windows\system32\iertutil.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-12 23:22:47 ----A---- C:\Windows\system32\ieframe.dll
2014-08-12 23:22:47 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\mshtml.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\jscript9.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-12 23:22:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-12 23:22:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-12 23:22:45 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\wininet.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-12 23:22:37 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-12 23:22:37 ----A---- C:\Windows\system32\vbscript.dll
2014-08-12 23:21:49 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-08-12 23:21:49 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-12 23:21:42 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-12 23:21:42 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-12 23:20:48 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-12 23:20:48 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\msihnd.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\msi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\dxgi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\dwmcore.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-12 23:20:48 ----A---- C:\Windows\system32\consent.exe
2014-08-12 23:20:46 ----A---- C:\Windows\system32\Wpc.dll
2014-08-12 23:20:46 ----A---- C:\Windows\system32\MrmCoreR.dll
2014-08-12 23:20:45 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-08-12 23:20:45 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-12 23:20:45 ----A---- C:\Windows\system32\WpcWebSync.dll
2014-08-12 23:20:45 ----A---- C:\Windows\system32\WpcMon.exe
2014-08-12 23:20:45 ----A---- C:\Windows\system32\gdi32.dll
2014-08-12 23:20:33 ----A---- C:\Windows\system32\MDMAgent.exe
2014-08-12 04:30:48 ----D---- C:\ProgramData\CommServ
2014-08-12 04:30:30 ----D---- C:\Program Files (x86)\MSECache
2014-08-12 01:57:31 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-12 01:57:28 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-08-11 18:27:09 ----D---- C:\ProgramData\LangSoft
2014-08-11 10:14:14 ----D---- C:\Users\frantacer\AppData\Roaming\LangSoft
2014-08-11 03:08:19 ----D---- C:\Program Files (x86)\ESET
2014-08-11 00:10:52 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-08-10 19:18:43 ----D---- C:\ProgramData\boost_interprocess
2014-08-10 03:26:03 ----D---- C:\Windows\system32\appmgmt
2014-08-10 02:16:08 ----D---- C:\ProgramData\Malwarebytes
2014-08-10 00:14:30 ----D---- C:\ProgramData\DonationCoder
2014-08-10 00:14:30 ----D---- C:\Program Files (x86)\DesktopCoral
2014-08-10 00:04:19 ----D---- C:\Users\frantacer\AppData\Roaming\Rainmeter
2014-08-10 00:04:09 ----D---- C:\Program Files\Rainmeter
2014-08-09 23:01:44 ----D---- C:\Program Files (x86)\Rainlendar2
2014-08-09 17:42:51 ----A---- C:\Windows\system32\drivers\ggsomc.sys
2014-08-09 17:42:51 ----A---- C:\Windows\system32\drivers\ggflt.sys
2014-08-08 23:32:22 ----D---- C:\Program Files\Elantech
2014-08-08 23:22:18 ----D---- C:\Program Files\Realtek
2014-08-08 23:22:17 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-08-08 23:20:59 ----A---- C:\Windows\system32\WavesGUILib64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSHP64.dll
2014-08-08 23:20:58 ----A---- C:\Windows\system32\SFSS_APO.dll
2014-08-08 23:20:57 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\SFNHK64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\SFCOM64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\SFAPO64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkGuiCompLib.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkApi64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEED64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtDataProc64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RTCOM64.dll
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RltkAPO64.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEP64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEL64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEG64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EED64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEA64A.dll
2014-08-08 23:20:53 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-08-08 23:20:51 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll
2014-08-08 23:20:51 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\FMAPO64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPP64A.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPO64A.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPD64A.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPA64.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\AERTAR64.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\AERTAC64.dll
2014-08-08 23:20:42 ----HD---- C:\Program Files (x86)\Temp
2014-08-08 23:20:41 ----A---- C:\Windows\RtlExUpd.dll
2014-08-08 01:27:32 ----D---- C:\Windows\SYSWOW64\sda
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsUVStor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsPStor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsPer.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsP2Stor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsBaStor.sys
2014-08-08 01:27:18 ----A---- C:\Windows\SYSWOW64\RsCRIcon.dll
2014-08-08 01:27:17 ----D---- C:\Program Files (x86)\Realtek
2014-08-08 01:12:14 ----A---- C:\Windows\Language_trs.ini
2014-08-07 23:52:48 ----D---- C:\Users\frantacer\AppData\Roaming\Easeware
2014-08-07 19:32:49 ----D---- C:\InvoiceMan20
2014-08-06 21:33:04 ----D---- C:\ProgramData\Ralink
2014-08-06 21:33:03 ----D---- C:\Users\frantacer\AppData\Roaming\TP-LINK
2014-08-06 21:32:49 ----A---- C:\Windows\SYSWOW64\jswscsup.dll
2014-08-06 21:32:49 ----A---- C:\Windows\system32\drivers\jswpslwfx.sys
2014-08-06 21:32:46 ----A---- C:\Windows\SYSWOW64\RaCertMgr.dll
2014-08-06 21:32:45 ----D---- C:\Program Files (x86)\TP-LINK
2014-08-06 21:27:00 ----A---- C:\Windows\system32\RaCoInstx.dll
2014-08-06 21:27:00 ----A---- C:\Windows\system32\netr28ux.sys
2014-08-06 21:27:00 ----A---- C:\Windows\system32\drivers\netr28ux.sys
2014-08-06 21:26:47 ----D---- C:\ProgramData\TP-LINK
2014-08-06 15:53:09 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-08-06 15:53:08 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-08-06 15:53:08 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-08-06 15:53:08 ----A---- C:\Windows\SYSWOW64\java.exe
2014-08-06 15:53:04 ----D---- C:\Program Files (x86)\Java
2014-08-04 14:44:17 ----A---- C:\Windows\iun6002.exe
2014-08-04 14:44:15 ----D---- C:\Program Files (x86)\mb
2014-08-04 14:36:04 ----A---- C:\Windows\RfBtnSvc64.exe
2014-08-04 14:36:03 ----D---- C:\Program Files (x86)\RadioController
2014-08-04 14:35:59 ----A---- C:\Windows\UnInstRfBtn.EXE
2014-08-04 14:35:59 ----A---- C:\Windows\system32\drivers\aPs2Kb2Hid.sys
Předem děkuji..
1. část
Logfile of random's system information tool 1.08 (written by random/random)
Run by frantacer at 2014-09-02 06:25:21
Microsoft Windows 8.1 Pro
System drive C: has 62 GB (58%) free of 108 GB
Total RAM: 3987 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:25:34, on 2. 9. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\trend micro\frantacer.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Trend Micro Osprey BHO - {959A5673-7971-48e6-AF54-58F745AC4ABC} - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg32.dll
O2 - BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe32.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O3 - Toolbar: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Plus Internet] C:\Program Files (x86)\Plus Internet\PlusInternetChecker.exe
O4 - HKLM\..\Run: [RadioController] "C:\Program Files (x86)\RadioController\RfBtnHelper.exe" Start_Run
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O4 - Startup: Dropbox.lnk = C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
O4 - Global Startup: STIMON.lnk = ?
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - (no file)
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe32.dll
O18 - Protocol: tmop - {69FD7CE3-4604-4FE6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg32.dll
O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O18 - Protocol: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: IviRegMgr - InterVideo - c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: JumpStart Wi-Fi Protected Setup (jswpsapi) - Wireless - C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PLAY ONLINE. OUC (PLAY ONLINE. RunOuc) - Unknown owner - C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Service KMSELDI - Unknown owner - C:\Program Files\KMSpico\Service_KMS.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12657 bytes
======Listing Processes======
wininit.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
"C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=nb -dt=60000 -ad -bt=0
uiWatchDog.exe 1592
"c:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
\??\C:\Windows\system32\conhost.exe 0x4
coreFrameworkHost.exe 1592 1
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
"C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.ELISOFT\MSSQL\Binn\sqlservr.exe" -sELISOFT
C:\Windows\SysWow64\perfhost.exe
"C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe" "C:/Program Files (x86)/PLAY ONLINE/UpdateDog/"
C:\Windows\RfBtnSvc64.exe
"C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
dashost.exe {16fa8950-2ce0-446b-9d759d0bb6946391}
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-cbc740b5-78ea-41ed-bbc7-ab5e0fe0587e -SystemEventPortName:HostProcess-581c0071-dcfe-498e-82f5-ab1ff19fa074 -IoCancelEventPortName:HostProcess-63155990-e071-48d1-8755-d51218051c9f -NonStateChangingEventPortName:HostProcess-030c7a73-01d0-4e37-8a29-200b4568b4be -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:87098f8f-3458-46ca-8d8e-229573dd72b1 -DeviceGroupId:WudfDefaultDevicePool
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Trend Micro\UniClient\UiFrmWrk\WscStatusController.exe"
\??\C:\Windows\system32\conhost.exe 0x4
taskhostex.exe
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe"
igfxEM.exe
igfxHK.exe
igfxTray.exe
/QuitInfo:0000000000000BA8;00000000000008E0;
/loadhooks /Parent:000000000000111c
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 564 568 576 65536 572
"C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files\Elantech\ETDTouch.exe"
"C:\Program Files\priPrinter\pritray.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe"
"C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe" -nogui
"C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" /FORCE
"C:\Program Files\Rainmeter\Rainmeter.exe"
taskeng.exe {C5ACBD67-1C5D-4BEF-9C38-26806812BFAA}
"C:\Program Files\Microsoft Office\Office15\MsoSync.exe"
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Users\frantacer\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\DriverNavigator Scheduled Scan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-07-27 218776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43C6D902-A1C5-45c9-91F6-FD9E90337E18}]
TSToolbarBHO - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-04-11 228552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-12 553384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{959A5673-7971-48e6-AF54-58F745AC4ABC}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg.dll [2014-02-14 452656]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe64.dll [2014-08-06 1345584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-12 211880]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43C6D902-A1C5-45c9-91F6-FD9E90337E18}]
TSToolbarBHO - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-04-11 517440]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-08-06 462760]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{959A5673-7971-48e6-AF54-58F745AC4ABC}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\module\20013\3.0.1313\1.6.1102\TmopIEPlg32.dll [2014-02-14 334384]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\module\20002\8.0.1173\8.0.1173\TmBpIe32.dll [2014-08-06 1391664]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2014-07-27 1730256]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-08-06 171944]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCAC5586-44D7-4c43-B64A-F042461A97D2} - Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-04-11 228552]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]
{CCAC5586-44D7-4c43-B64A-F042461A97D2} - Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-04-11 517440]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-11-21 36352]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20 444904]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2013-10-09 229824]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-09 13672152]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13 1387376]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2013-08-23 2894664]
"priPrinterTray"=C:\Program Files\priPrinter\pritray.exe [2014-06-10 39936]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"=C:\Program Files (x86)\Rainlendar2\Rainlendar2.exe [2014-03-16 2611808]
"Nektra OEAPI"= []
"OEXPRESS"= []
"Zoner Photo Studio Autoupdate"=C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [2014-06-16 833024]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
""= []
"Acrobat Assistant 8.0"=C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [2012-09-23 3477640]
"Plus Internet"=C:\Program Files (x86)\Plus Internet\PlusInternetChecker.exe [2013-04-09 641384]
"RadioController"=C:\Program Files (x86)\RadioController\RfBtnHelper.exe [2014-08-04 111216]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]
"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
STIMON.lnk - C:\Program Files (x86)\USB2.0 UVC WebCam\USB2.0 UVC WebCam\STIMON.exe
TP-LINK Wireless Configuration Utility.lnk - C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\Users\frantacer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\frantacer\AppData\Roaming\Dropbox\bin\Dropbox.exe
Rainmeter.lnk - C:\Program Files\Rainmeter\Rainmeter.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicDisplay.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BasicRender.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BrokerInfrastructure]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DeviceInstall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dxgkrnl.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\FsDepends.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LSM]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SmartcardSimulator]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SystemEventsBroker]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VirtualSmartcardReader]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wcmsvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{9DA2B80F-F89F-4A49-A5C2-511B085B9E8A}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{A0A588A4-C46F-4B37-B7EA-C82FE89870C6}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"EnableUIADesktopToggle"=0
"EnableCursorSuppression"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktopChanges"=1
"NoActiveDesktop"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-09-02 06:25:21 ----D---- C:\rsit
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\xvidvfw.dll
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\xvidcore.dll
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\x264vfw.dll
2014-09-02 03:08:41 ----A---- C:\Windows\SYSWOW64\lagarith.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\xvidvfw.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\xvidcore.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\x264vfw64.dll
2014-09-02 03:08:41 ----A---- C:\Windows\system32\lagarith.dll
2014-09-02 03:08:40 ----A---- C:\Windows\SYSWOW64\unrar.dll
2014-09-02 03:08:40 ----A---- C:\Windows\system32\unrar64.dll
2014-09-02 03:08:36 ----A---- C:\Windows\SYSWOW64\ff_vfw.dll
2014-09-02 03:08:31 ----D---- C:\Program Files (x86)\K-Lite Codec Pack
2014-09-02 01:22:28 ----D---- C:\Windows\SoftwareDistribution
2014-09-01 23:55:43 ----D---- C:\Windows\softwaredistribution.bak3
2014-09-01 23:54:50 ----D---- C:\Windows\softwaredistribution.bak2
2014-09-01 23:49:07 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2014-09-01 23:25:39 ----D---- C:\Program Files (x86)\Acer
2014-09-01 21:52:20 ----D---- C:\Windows\softwaredistribution.bak1
2014-09-01 21:32:09 ----D---- C:\Windows\softwaredistribution.bak
2014-08-31 22:34:02 ----D---- C:\Users\frantacer\AppData\Roaming\Dropbox
2014-08-30 10:33:35 ----D---- C:\Windows\LastGood.Tmp
2014-08-30 10:33:34 ----A---- C:\Windows\system32\drivers\btfilter.sys
2014-08-29 13:59:57 ----D---- C:\Users\frantacer\AppData\Roaming\sMedio
2014-08-27 23:28:13 ----A---- C:\Windows\system32\win32k.sys
2014-08-27 16:23:47 ----D---- C:\Windows\smFile
2014-08-27 16:23:46 ----D---- C:\Program Files (x86)\USB2.0 UVC WebCam
2014-08-26 04:12:21 ----D---- C:\Program Files\Synaptics
2014-08-26 04:11:37 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2014-08-26 04:00:10 ----A---- C:\DelFix.txt
2014-08-26 03:03:36 ----A---- C:\Windows\system32\drivers\TrueSight.sys
2014-08-26 03:03:34 ----D---- C:\ProgramData\RogueKiller
2014-08-25 04:02:25 ----D---- C:\ProgramData\unzip
2014-08-25 03:41:51 ----A---- C:\Windows\system32\plkmon64.dll
2014-08-25 03:41:49 ----D---- C:\Program Files\priPrinter
2014-08-25 03:27:19 ----D---- C:\Users\frantacer\AppData\Roaming\Pelikan Software KFT
2014-08-22 03:25:19 ----D---- C:\AX88772C_772B_772A_772_Win8.x_64bit_Driver_v3.16.8.0_WHCK
2014-08-22 02:27:49 ----A---- C:\Windows\system32\drivers\ax88772.sys
2014-08-21 23:54:30 ----D---- C:\ProgramData\sMedio
2014-08-21 23:54:23 ----D---- C:\Program Files (x86)\sMedio
2014-08-21 23:54:21 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2014-08-19 04:43:48 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2014-08-19 04:43:48 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2014-08-19 04:43:48 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-08-19 04:43:48 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-08-19 04:43:47 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2014-08-19 04:43:47 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2014-08-19 04:43:47 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2014-08-19 04:43:47 ----A---- C:\Windows\system32\xinput1_3.dll
2014-08-19 04:43:47 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-08-19 04:43:47 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-08-19 04:43:46 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2014-08-19 04:43:46 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2014-08-19 04:43:46 ----A---- C:\Windows\system32\xinput1_2.dll
2014-08-19 04:43:46 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-08-19 04:43:45 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2014-08-19 04:43:45 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2014-08-19 04:43:45 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2014-08-19 04:43:45 ----A---- C:\Windows\system32\xinput1_1.dll
2014-08-19 04:43:45 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-08-19 04:43:45 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-08-19 04:43:43 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2014-08-19 04:43:43 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2014-08-19 04:43:42 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-08-19 04:43:42 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-08-19 04:43:41 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2014-08-19 04:43:41 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2014-08-19 04:43:41 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2014-08-19 04:43:41 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-08-19 04:43:41 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-08-19 04:43:41 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-08-19 04:43:40 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2014-08-19 04:43:40 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-08-16 16:16:33 ----D---- C:\Program Files (x86)\Commercial Service
2014-08-15 02:34:00 ----DC---- C:\Windows\system32\DRVSTORE
2014-08-15 02:09:45 ----D---- C:\ProgramData\XDMessagingv4
2014-08-15 02:09:19 ----D---- C:\Users\frantacer\AppData\Roaming\Abelssoft
2014-08-13 01:58:55 ----D---- C:\Users\frantacer\AppData\Roaming\PlatinumHideIP
2014-08-13 01:58:55 ----D---- C:\ProgramData\PlatinumHideIP
2014-08-13 01:53:59 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2014-08-13 01:53:59 ----A---- C:\Windows\system32\shell32.dll
2014-08-13 01:53:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2014-08-13 01:53:58 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-08-13 01:53:57 ----A---- C:\Windows\system32\Windows.UI.Search.dll
2014-08-13 01:53:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-08-13 01:53:57 ----A---- C:\Windows\system32\mstscax.dll
2014-08-13 01:53:56 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-08-13 01:53:56 ----A---- C:\Windows\system32\twinui.dll
2014-08-13 01:53:56 ----A---- C:\Windows\system32\SettingsHandlers.dll
2014-08-13 01:53:56 ----A---- C:\Windows\system32\d3d10warp.dll
2014-08-13 01:53:55 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2014-08-13 01:53:55 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\mfcore.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\gpsvc.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-08-13 01:53:55 ----A---- C:\Windows\system32\authui.dll
2014-08-13 01:53:55 ----A---- C:\Windows\system32\actxprxy.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.Search.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\twinui.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2014-08-13 01:53:54 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\workfolderssvc.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\wlansvc.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\Windows.Media.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\localspl.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-08-13 01:53:54 ----A---- C:\Windows\system32\drivers\srv.sys
2014-08-13 01:53:53 ----AC---- C:\Windows\system32\drivers\bthport.sys
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\mispace.dll
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2014-08-13 01:53:53 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\XpsPrint.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\wuaueng.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\WorkfoldersControl.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-08-13 01:53:53 ----A---- C:\Windows\system32\SRH.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\printui.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\netcfgx.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\mispace.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\mfplat.dll
2014-08-13 01:53:53 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-08-13 01:53:53 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-08-13 01:53:53 ----A---- C:\Windows\system32\drivers\netio.sys
2014-08-13 01:53:53 ----A---- C:\Windows\system32\AppxPackaging.dll
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\volsnap.sys
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\USBHUB3.SYS
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\usbccgp.sys
2014-08-13 01:53:52 ----AC---- C:\Windows\system32\drivers\spaceport.sys
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\SRH.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\printui.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\mftranscode.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\AppxPackaging.dll
2014-08-13 01:53:52 ----A---- C:\Windows\SYSWOW64\aclui.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wuapi.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wsecedit.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\WSDMon.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wlanmsm.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\wisp.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\winresume.exe
2014-08-13 01:53:52 ----A---- C:\Windows\system32\winload.exe
2014-08-13 01:53:52 ----A---- C:\Windows\system32\WebClnt.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\usbmon.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\uDWM.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\storagewmi.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\srvsvc.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\spoolsv.exe
2014-08-13 01:53:52 ----A---- C:\Windows\system32\SHCore.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\puiobj.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\mftranscode.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\mfreadwrite.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\lsasrv.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-08-13 01:53:52 ----A---- C:\Windows\system32\defragsvc.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\comdlg32.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\clusapi.dll
2014-08-13 01:53:52 ----A---- C:\Windows\system32\aclui.dll
2014-08-13 01:53:51 ----AC---- C:\Windows\system32\drivers\usbhub.sys
2014-08-13 01:53:51 ----AC---- C:\Windows\system32\drivers\hdaudbus.sys
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\wlanapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\wisp.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\winmmbase.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\storagewmi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\Display.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2014-08-13 01:53:51 ----A---- C:\Windows\SYSWOW64\AppxSip.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\wucltux.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WSShared.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\wpdbusenum.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WorkFoldersGPExt.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\winmmbase.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\winmm.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\Windows.Networking.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\win32spl.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\WiFiDisplay.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\VAN.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\user32.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\twinapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\SndVol.exe
2014-08-13 01:53:51 ----A---- C:\Windows\system32\SettingSync.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\rdpcorets.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\profsvc.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\osk.exe
2014-08-13 01:53:51 ----A---- C:\Windows\system32\mfps.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\httpprxm.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\dwmapi.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\nwifi.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\NdisImPlatform.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\msgpioclx.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\drivers\bridge.sys
2014-08-13 01:53:51 ----A---- C:\Windows\system32\Display.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\DafPrintProvider.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\conhost.exe
2014-08-13 01:53:51 ----A---- C:\Windows\system32\bcryptprimitives.dll
2014-08-13 01:53:51 ----A---- C:\Windows\system32\AppxSip.dll
2014-08-13 01:53:50 ----AC---- C:\Windows\system32\drivers\pci.sys
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\WSShared.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\wsecedit.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\winmm.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\VAN.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\SettingSync.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\rsaenh.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\puiapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\prnntfy.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\iasnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\gpedit.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wwanconn.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wups2.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wups.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wuauclt.exe
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wshbth.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\WorkFoldersShell.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wlanapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\wcmcsp.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-08-13 01:53:50 ----A---- C:\Windows\system32\stobject.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\schannel.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\SearchFolder.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\rsaenh.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\puiapi.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\prnntfy.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\PrintDialogs.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\ppcsnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\pmcsnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\iasnap.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\gpedit.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\GdiPlus.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\drivers\ks.sys
2014-08-13 01:53:50 ----A---- C:\Windows\system32\dab.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\browser.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\AppxSysprep.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\adhsvc.dll
2014-08-13 01:53:50 ----A---- C:\Windows\system32\ActionCenter.dll
2014-08-13 01:53:49 ----AC---- C:\Windows\system32\drivers\bthpan.sys
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\wups.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\user32.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\stobject.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\PrintDialogs.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDRUM.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\certcli.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\BluetoothApis.dll
2014-08-13 01:53:49 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\wwanmm.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\wlansvcpal.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\wlansec.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\SndVolSSO.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\rdpudd.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDRUM.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDRU.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-08-13 01:53:49 ----A---- C:\Windows\system32\Defrag.exe
2014-08-13 01:53:49 ----A---- C:\Windows\system32\compstui.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\certcli.dll
2014-08-13 01:53:49 ----A---- C:\Windows\system32\BluetoothApis.dll
2014-08-13 01:53:48 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2014-08-13 01:53:48 ----A---- C:\Windows\SYSWOW64\KBDTT102.DLL
2014-08-13 01:53:48 ----A---- C:\Windows\system32\wudriver.dll
2014-08-13 01:53:48 ----A---- C:\Windows\system32\KBDTT102.DLL
2014-08-13 01:49:16 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-08-13 01:49:16 ----A---- C:\Windows\explorer.exe
2014-08-13 00:43:57 ----A---- C:\Windows\SYSWOW64\SQSRVRES.DLL
2014-08-13 00:43:57 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$ELISOFT-sqlctr10.52.4033.0.dll
2014-08-12 23:22:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-12 23:22:49 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-12 23:22:49 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-12 23:22:49 ----A---- C:\Windows\system32\urlmon.dll
2014-08-12 23:22:48 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-12 23:22:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-12 23:22:48 ----A---- C:\Windows\system32\iertutil.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-12 23:22:47 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-12 23:22:47 ----A---- C:\Windows\system32\ieframe.dll
2014-08-12 23:22:47 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\mshtml.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\jscript9.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-12 23:22:46 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-12 23:22:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-12 23:22:45 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-12 23:22:45 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-12 23:22:38 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\wininet.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-12 23:22:38 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-12 23:22:37 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-12 23:22:37 ----A---- C:\Windows\system32\vbscript.dll
2014-08-12 23:21:49 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-08-12 23:21:49 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-12 23:21:42 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-12 23:21:42 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-12 23:20:48 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-12 23:20:48 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\msihnd.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\msi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\dxgi.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\dwmcore.dll
2014-08-12 23:20:48 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-12 23:20:48 ----A---- C:\Windows\system32\consent.exe
2014-08-12 23:20:46 ----A---- C:\Windows\system32\Wpc.dll
2014-08-12 23:20:46 ----A---- C:\Windows\system32\MrmCoreR.dll
2014-08-12 23:20:45 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-08-12 23:20:45 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-12 23:20:45 ----A---- C:\Windows\system32\WpcWebSync.dll
2014-08-12 23:20:45 ----A---- C:\Windows\system32\WpcMon.exe
2014-08-12 23:20:45 ----A---- C:\Windows\system32\gdi32.dll
2014-08-12 23:20:33 ----A---- C:\Windows\system32\MDMAgent.exe
2014-08-12 04:30:48 ----D---- C:\ProgramData\CommServ
2014-08-12 04:30:30 ----D---- C:\Program Files (x86)\MSECache
2014-08-12 01:57:31 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-12 01:57:28 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-08-11 18:27:09 ----D---- C:\ProgramData\LangSoft
2014-08-11 10:14:14 ----D---- C:\Users\frantacer\AppData\Roaming\LangSoft
2014-08-11 03:08:19 ----D---- C:\Program Files (x86)\ESET
2014-08-11 00:10:52 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-08-10 19:18:43 ----D---- C:\ProgramData\boost_interprocess
2014-08-10 03:26:03 ----D---- C:\Windows\system32\appmgmt
2014-08-10 02:16:08 ----D---- C:\ProgramData\Malwarebytes
2014-08-10 00:14:30 ----D---- C:\ProgramData\DonationCoder
2014-08-10 00:14:30 ----D---- C:\Program Files (x86)\DesktopCoral
2014-08-10 00:04:19 ----D---- C:\Users\frantacer\AppData\Roaming\Rainmeter
2014-08-10 00:04:09 ----D---- C:\Program Files\Rainmeter
2014-08-09 23:01:44 ----D---- C:\Program Files (x86)\Rainlendar2
2014-08-09 17:42:51 ----A---- C:\Windows\system32\drivers\ggsomc.sys
2014-08-09 17:42:51 ----A---- C:\Windows\system32\drivers\ggflt.sys
2014-08-08 23:32:22 ----D---- C:\Program Files\Elantech
2014-08-08 23:22:18 ----D---- C:\Program Files\Realtek
2014-08-08 23:22:17 ----D---- C:\Windows\SYSWOW64\RTCOM
2014-08-08 23:20:59 ----A---- C:\Windows\system32\WavesGUILib64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSWOW64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSTSX64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSTSH64.dll
2014-08-08 23:20:59 ----A---- C:\Windows\system32\SRSHP64.dll
2014-08-08 23:20:58 ----A---- C:\Windows\system32\SFSS_APO.dll
2014-08-08 23:20:57 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\SFNHK64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\SFCOM64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\SFAPO64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\RtPgEx64.dll
2014-08-08 23:20:57 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkGuiCompLib.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkCfg64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtkApi64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEEP64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEEL64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEEG64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RTEED64A.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\RtDataProc64.dll
2014-08-08 23:20:56 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RTCOM64.dll
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RP3DHT64.dll
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RP3DAA64.dll
2014-08-08 23:20:55 ----A---- C:\Windows\system32\RltkAPO64.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\RCoInstII64.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEP64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEL64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEG64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EED64A.dll
2014-08-08 23:20:54 ----A---- C:\Windows\system32\R4EEA64A.dll
2014-08-08 23:20:53 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-08-08 23:20:51 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll
2014-08-08 23:20:51 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2014-08-08 23:20:50 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\FMAPO64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2014-08-08 23:20:46 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPP64A.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPO64A.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPD64A.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\DDPA64.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\AERTAR64.dll
2014-08-08 23:20:45 ----A---- C:\Windows\system32\AERTAC64.dll
2014-08-08 23:20:42 ----HD---- C:\Program Files (x86)\Temp
2014-08-08 23:20:41 ----A---- C:\Windows\RtlExUpd.dll
2014-08-08 01:27:32 ----D---- C:\Windows\SYSWOW64\sda
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsUVStor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsPStor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsPer.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsP2Stor.sys
2014-08-08 01:27:19 ----A---- C:\Windows\system32\drivers\RtsBaStor.sys
2014-08-08 01:27:18 ----A---- C:\Windows\SYSWOW64\RsCRIcon.dll
2014-08-08 01:27:17 ----D---- C:\Program Files (x86)\Realtek
2014-08-08 01:12:14 ----A---- C:\Windows\Language_trs.ini
2014-08-07 23:52:48 ----D---- C:\Users\frantacer\AppData\Roaming\Easeware
2014-08-07 19:32:49 ----D---- C:\InvoiceMan20
2014-08-06 21:33:04 ----D---- C:\ProgramData\Ralink
2014-08-06 21:33:03 ----D---- C:\Users\frantacer\AppData\Roaming\TP-LINK
2014-08-06 21:32:49 ----A---- C:\Windows\SYSWOW64\jswscsup.dll
2014-08-06 21:32:49 ----A---- C:\Windows\system32\drivers\jswpslwfx.sys
2014-08-06 21:32:46 ----A---- C:\Windows\SYSWOW64\RaCertMgr.dll
2014-08-06 21:32:45 ----D---- C:\Program Files (x86)\TP-LINK
2014-08-06 21:27:00 ----A---- C:\Windows\system32\RaCoInstx.dll
2014-08-06 21:27:00 ----A---- C:\Windows\system32\netr28ux.sys
2014-08-06 21:27:00 ----A---- C:\Windows\system32\drivers\netr28ux.sys
2014-08-06 21:26:47 ----D---- C:\ProgramData\TP-LINK
2014-08-06 15:53:09 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-08-06 15:53:08 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-08-06 15:53:08 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-08-06 15:53:08 ----A---- C:\Windows\SYSWOW64\java.exe
2014-08-06 15:53:04 ----D---- C:\Program Files (x86)\Java
2014-08-04 14:44:17 ----A---- C:\Windows\iun6002.exe
2014-08-04 14:44:15 ----D---- C:\Program Files (x86)\mb
2014-08-04 14:36:04 ----A---- C:\Windows\RfBtnSvc64.exe
2014-08-04 14:36:03 ----D---- C:\Program Files (x86)\RadioController
2014-08-04 14:35:59 ----A---- C:\Windows\UnInstRfBtn.EXE
2014-08-04 14:35:59 ----A---- C:\Windows\system32\drivers\aPs2Kb2Hid.sys