VIRY.CZ

Dobrý den,
můžete prosím zkontrolovat log, je to dcery PC a remcá že je nějaký pomalý. Nemělo by tam snad nic být.
zde log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by EN at 2014-11-08 11:29:20
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 240 GB (34%) free of 708 GB
Total RAM: 3959 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:29:29, on 8.11.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17344)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Users\EN\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\EN.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=13415
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro prihlášení k úctu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Family Tree Builder Update] C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\EN\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\EN\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [EPLTarget\P0000000000000002] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE /EPT "EPLTarget\P0000000000000002" /M "XP-205 207 Series"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9424 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe"
"C:\Windows\system32\Dwm.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe" -service
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
szndesktop.exe default start
"C:\Windows\System32\spool\drivers\x64\3\E_IATIILE.EXE" /EPT "EPLTarget\P0000000000000002" /M "XP-205 207 Series"
"C:\Users\EN\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "-189319766-1475455081-70638900619060529001685365344-89731580-543181907-575269468
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe"
C:\Windows\system32\EscSvc64.exe
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe"
WLIDSvcM.exe 2192
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe"
ngservice.exe pipeserver
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe

C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\EN\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\EN\AppData\Roaming\Mozilla\Firefox\Profiles\hrxehnid.default

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "wrc@avast.com:7.0.1474, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL


C:\Users\EN\AppData\Roaming\Mozilla\Firefox\Profiles\hrxehnid.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-11-08 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-08 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{9421DD08-935F-4701-A9CA-22DF90AC4EA6}

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
""=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-12-20 844296]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"cz.seznam.software.szndesktop"=C:\Users\EN\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
"cz.seznam.software.autoupdate"=C:\Users\EN\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-10-30 6501656]
"EPLTarget\P0000000000000002"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE [2012-02-29 283232]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2012-12-20 310280]
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2011-10-31 1058400]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-08 5225064]
"Family Tree Builder Update"=C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2013-12-09 2532864]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.ffds"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-08 11:29:20 ----D---- C:\rsit
2014-11-08 11:29:20 ----D---- C:\Program Files\trend micro
2014-11-08 11:16:18 ----A---- C:\Windows\system32\aswBoot.exe
2014-11-08 11:16:11 ----A---- C:\Windows\avastSS.scr
2014-11-07 19:14:38 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-11-02 12:06:57 ----A---- C:\Windows\explorer.exe
2014-11-02 12:06:56 ----A---- C:\Windows\SYSWOW64\explorer.exe
2014-11-02 12:06:53 ----A---- C:\Windows\system32\ncsi.dll
2014-11-02 12:06:52 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2014-11-02 12:06:52 ----A---- C:\Windows\system32\nlasvc.dll
2014-11-02 12:06:52 ----A---- C:\Windows\system32\netcorehc.dll
2014-11-02 12:06:52 ----A---- C:\Windows\system32\iphlpsvc.dll
2014-11-02 12:06:51 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2014-11-02 12:06:51 ----A---- C:\Windows\SYSWOW64\netcorehc.dll
2014-11-02 12:06:49 ----A---- C:\Windows\system32\nlaapi.dll
2014-11-02 12:06:49 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2014-11-02 12:06:48 ----A---- C:\Windows\SYSWOW64\netevent.dll
2014-11-02 12:06:48 ----A---- C:\Windows\system32\netevent.dll
2014-11-02 12:04:38 ----A---- C:\Windows\system32\esent.dll
2014-11-02 12:04:37 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2014-11-02 12:04:37 ----A---- C:\Windows\SYSWOW64\esent.dll
2014-11-02 12:04:37 ----A---- C:\Windows\system32\fsutil.exe
2014-11-02 12:04:37 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2014-11-02 12:04:37 ----A---- C:\Windows\system32\drivers\amdxata.sys
2014-11-02 12:04:36 ----A---- C:\Windows\system32\drivers\nvstor.sys
2014-11-02 12:04:36 ----A---- C:\Windows\system32\drivers\nvraid.sys
2014-11-02 12:04:36 ----A---- C:\Windows\system32\drivers\amdsata.sys
2014-11-02 12:04:35 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2014-11-02 10:54:54 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2014-11-02 10:54:54 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2014-11-02 10:54:54 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2014-11-02 10:54:54 ----A---- C:\Windows\system32\dhcpcore6.dll
2014-11-02 10:54:47 ----A---- C:\Windows\system32\OxpsConverter.exe
2014-11-02 10:54:08 ----A---- C:\Windows\system32\drivers\RNDISMP.sys
2014-11-02 10:54:08 ----A---- C:\Windows\system32\drivers\ndis.sys
2014-11-02 10:54:07 ----A---- C:\Windows\system32\drivers\bthport.sys
2014-11-02 10:21:59 ----D---- C:\Windows\Migration
2014-11-02 09:45:42 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2014-11-02 09:45:42 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2014-11-02 09:45:42 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-11-02 09:45:42 ----A---- C:\Windows\system32\cryptsvc.dll
2014-11-02 09:45:42 ----A---- C:\Windows\system32\cryptnet.dll
2014-11-02 09:45:42 ----A---- C:\Windows\system32\crypt32.dll
2014-11-02 09:45:32 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2014-11-02 09:45:32 ----A---- C:\Windows\system32\wintrust.dll
2014-11-02 09:45:29 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2014-11-02 09:45:29 ----A---- C:\Windows\system32\drivers\usbcir.sys
2014-11-02 09:45:24 ----A---- C:\Windows\system32\drivers\hidparse.sys
2014-11-02 09:45:24 ----A---- C:\Windows\system32\drivers\hidclass.sys
2014-11-02 09:45:19 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2014-11-02 09:45:19 ----A---- C:\Windows\system32\cryptdlg.dll
2014-11-02 09:45:16 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-11-02 09:45:16 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-02 09:44:47 ----A---- C:\Windows\SYSWOW64\certutil.exe
2014-11-02 09:44:47 ----A---- C:\Windows\system32\certutil.exe
2014-11-02 09:44:46 ----A---- C:\Windows\SYSWOW64\certenc.dll
2014-11-02 09:44:46 ----A---- C:\Windows\system32\certenc.dll
2014-11-02 09:44:28 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-11-02 09:44:16 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2014-11-02 09:44:16 ----A---- C:\Windows\SYSWOW64\credui.dll
2014-11-02 09:44:16 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2014-11-02 09:44:16 ----A---- C:\Windows\system32\credui.dll
2014-11-02 09:44:11 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-11-02 09:44:11 ----A---- C:\Windows\system32\DWrite.dll
2014-11-02 09:44:09 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-11-02 09:44:09 ----A---- C:\Windows\system32\WMPhoto.dll
2014-11-02 09:44:08 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2014-11-02 09:44:08 ----A---- C:\Windows\system32\msieftp.dll
2014-11-02 09:44:07 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2014-11-02 09:44:07 ----A---- C:\Windows\system32\WMVDECOD.DLL
2014-11-02 09:44:00 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2014-11-02 09:44:00 ----A---- C:\Windows\system32\comctl32.dll
2014-11-02 09:43:59 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2014-11-02 09:43:59 ----A---- C:\Windows\system32\imagehlp.dll
2014-11-02 09:43:58 ----A---- C:\Windows\system32\drivers\portcls.sys
2014-11-02 09:43:58 ----A---- C:\Windows\system32\drivers\drmk.sys
2014-11-02 09:43:54 ----A---- C:\Windows\SYSWOW64\lpk.dll
2014-11-02 09:43:54 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2014-11-02 09:43:54 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2014-11-02 09:43:54 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2014-11-02 09:43:54 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2014-11-02 09:43:54 ----A---- C:\Windows\system32\lpk.dll
2014-11-02 09:43:54 ----A---- C:\Windows\system32\fontsub.dll
2014-11-02 09:43:54 ----A---- C:\Windows\system32\dciman32.dll
2014-11-02 09:43:54 ----A---- C:\Windows\system32\atmlib.dll
2014-11-02 09:43:54 ----A---- C:\Windows\system32\atmfd.dll
2014-11-02 09:43:52 ----A---- C:\Windows\system32\drivers\ataport.sys
2014-11-02 09:43:42 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2014-11-02 09:43:42 ----A---- C:\Windows\system32\shdocvw.dll
2014-11-02 09:43:39 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2014-11-02 09:43:39 ----A---- C:\Windows\system32\win32spl.dll
2014-11-02 09:33:48 ----A---- C:\Windows\system32\nshwfp.dll
2014-11-02 09:33:48 ----A---- C:\Windows\system32\IKEEXT.DLL
2014-11-02 09:33:48 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2014-11-02 09:33:47 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2014-11-02 09:33:47 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2014-11-02 09:12:13 ----A---- C:\Windows\system32\drivers\afd.sys
2014-11-02 09:12:12 ----A---- C:\Windows\system32\drivers\partmgr.sys
2014-11-02 09:12:06 ----A---- C:\Windows\system32\usp10.dll
2014-11-02 09:12:05 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-11-02 09:11:49 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-11-02 09:11:49 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-11-02 09:11:49 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-02 09:11:49 ----A---- C:\Windows\system32\msxml6.dll
2014-11-02 09:11:49 ----A---- C:\Windows\system32\msxml3.dll
2014-11-02 09:11:48 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-02 09:11:48 ----A---- C:\Windows\system32\msxml6r.dll
2014-11-02 09:11:48 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-02 09:11:47 ----A---- C:\Windows\system32\dpnet.dll
2014-11-02 09:11:46 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2014-11-02 09:11:24 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-11-02 09:11:23 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-11-02 09:11:23 ----A---- C:\Windows\system32\objsel.dll
2014-11-02 09:11:23 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-11-02 09:11:21 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-11-02 09:11:20 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-11-02 09:11:20 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-11-02 09:11:20 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-11-02 09:11:20 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-11-02 09:11:20 ----A---- C:\Windows\system32\smss.exe
2014-11-02 09:11:20 ----A---- C:\Windows\system32\KernelBase.dll
2014-11-02 09:11:20 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-11-02 09:11:20 ----A---- C:\Windows\system32\dimsroam.dll
2014-11-02 09:11:20 ----A---- C:\Windows\system32\cngprovider.dll
2014-11-02 09:11:20 ----A---- C:\Windows\system32\capiprovider.dll
2014-11-02 09:11:20 ----A---- C:\Windows\system32\adprovider.dll
2014-11-02 09:11:19 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-11-02 09:11:19 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-11-02 09:11:19 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-11-02 09:11:19 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2014-11-02 09:11:19 ----A---- C:\Windows\system32\wincredprovider.dll
2014-11-02 09:11:19 ----A---- C:\Windows\system32\csrsrv.dll
2014-11-02 09:11:19 ----A---- C:\Windows\system32\apisetschema.dll
2014-11-02 09:11:00 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-11-02 09:11:00 ----A---- C:\Windows\system32\d2d1.dll
2014-11-02 09:10:58 ----A---- C:\Windows\system32\drivers\usbport.sys
2014-11-02 09:10:58 ----A---- C:\Windows\system32\drivers\usbehci.sys
2014-11-02 09:10:58 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2014-11-02 09:10:57 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2014-11-02 09:10:57 ----A---- C:\Windows\system32\drivers\usbohci.sys
2014-11-02 09:10:57 ----A---- C:\Windows\system32\drivers\usbhub.sys
2014-11-02 09:10:57 ----A---- C:\Windows\system32\drivers\usbd.sys
2014-11-02 09:10:51 ----A---- C:\Windows\SYSWOW64\osk.exe
2014-11-02 09:10:51 ----A---- C:\Windows\system32\osk.exe
2014-11-02 09:10:48 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-11-02 09:10:48 ----A---- C:\Windows\system32\drivers\netio.sys
2014-11-02 09:10:48 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-11-02 09:10:35 ----A---- C:\Windows\system32\drivers\usb8023.sys
2014-11-02 09:10:31 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-11-02 09:10:31 ----A---- C:\Windows\system32\qedit.dll
2014-11-02 09:10:30 ----A---- C:\Windows\system32\synceng.dll
2014-11-02 09:10:29 ----A---- C:\Windows\SYSWOW64\synceng.dll
2014-11-02 09:04:03 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2014-11-02 09:04:03 ----A---- C:\Windows\SYSWOW64\browcli.dll
2014-11-02 09:04:03 ----A---- C:\Windows\system32\netapi32.dll
2014-11-02 09:04:03 ----A---- C:\Windows\system32\browser.dll
2014-11-02 09:04:03 ----A---- C:\Windows\system32\browcli.dll
2014-11-02 09:03:38 ----A---- C:\Windows\system32\FXSCOVER.exe
2014-11-02 09:01:02 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2014-11-02 09:01:01 ----A---- C:\Windows\system32\msvcrt.dll
2014-10-29 19:03:28 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2014-10-29 19:03:28 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2014-10-29 19:03:28 ----A---- C:\Windows\system32\infocardapi.dll
2014-10-29 19:03:28 ----A---- C:\Windows\system32\icardagt.exe
2014-10-29 19:03:25 ----A---- C:\Windows\SYSWOW64\icardres.dll
2014-10-29 19:03:25 ----A---- C:\Windows\system32\icardres.dll
2014-10-29 19:02:55 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-10-29 19:02:55 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-10-29 19:02:03 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2014-10-29 19:02:03 ----A---- C:\Windows\system32\psisdecd.dll
2014-10-29 19:01:32 ----A---- C:\Windows\system32\quartz.dll
2014-10-29 19:01:30 ----A---- C:\Windows\SYSWOW64\quartz.dll
2014-10-29 19:01:08 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2014-10-29 19:01:08 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2014-10-29 19:01:08 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2014-10-29 19:01:08 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2014-10-29 19:01:08 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-10-29 19:01:08 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-10-29 19:01:08 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-10-29 19:01:08 ----A---- C:\Windows\system32\KBDRU.DLL
2014-10-29 19:01:07 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-10-29 19:01:07 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-10-29 19:00:36 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-10-29 19:00:36 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-10-29 19:00:36 ----A---- C:\Windows\system32\mscories.dll
2014-10-29 19:00:36 ----A---- C:\Windows\system32\mscorier.dll
2014-10-29 19:00:36 ----A---- C:\Windows\system32\dfshim.dll
2014-10-29 19:00:35 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-10-29 19:00:28 ----A---- C:\Windows\SYSWOW64\webio.dll
2014-10-29 19:00:28 ----A---- C:\Windows\system32\webio.dll
2014-10-29 19:00:25 ----A---- C:\Windows\system32\CPFilters.dll
2014-10-29 19:00:23 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2014-10-29 19:00:21 ----A---- C:\Windows\SYSWOW64\sbe.dll
2014-10-29 19:00:21 ----A---- C:\Windows\system32\sbe.dll
2014-10-29 19:00:18 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2014-10-29 19:00:15 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2014-10-29 19:00:15 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2014-10-29 19:00:15 ----A---- C:\Windows\system32\dnsrslvr.dll
2014-10-29 19:00:15 ----A---- C:\Windows\system32\dnscacheugc.exe
2014-10-29 19:00:15 ----A---- C:\Windows\system32\dnsapi.dll
2014-10-29 19:00:11 ----A---- C:\Windows\system32\drivers\srvnet.sys
2014-10-29 19:00:11 ----A---- C:\Windows\system32\drivers\srv2.sys
2014-10-29 19:00:11 ----A---- C:\Windows\system32\drivers\srv.sys
2014-10-29 19:00:03 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2014-10-29 19:00:03 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2014-10-29 19:00:03 ----A---- C:\Windows\system32\odbctrac.dll
2014-10-29 19:00:03 ----A---- C:\Windows\system32\odbccu32.dll
2014-10-29 19:00:03 ----A---- C:\Windows\system32\odbccr32.dll
2014-10-29 19:00:03 ----A---- C:\Windows\system32\odbccp32.dll
2014-10-29 19:00:02 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2014-10-29 19:00:02 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2014-10-29 19:00:02 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2014-10-29 19:00:01 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2014-10-29 19:00:01 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2014-10-29 19:00:01 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2014-10-29 18:59:57 ----A---- C:\Windows\system32\mfc42u.dll
2014-10-29 18:59:57 ----A---- C:\Windows\system32\mfc42.dll
2014-10-29 18:59:56 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2014-10-29 18:59:56 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2014-10-29 18:52:41 ----A---- C:\Windows\SYSWOW64\srclient.dll
2014-10-29 18:52:40 ----A---- C:\Windows\system32\srcore.dll
2014-10-29 18:51:26 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-10-29 18:51:26 ----A---- C:\Windows\system32\inetcomm.dll
2014-10-29 18:49:35 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-10-29 18:49:35 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2014-10-29 18:49:34 ----A---- C:\Windows\system32\oleaut32.dll
2014-10-29 18:49:34 ----A---- C:\Windows\system32\oleacc.dll
2014-10-23 21:26:22 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-10-23 21:26:19 ----A---- C:\Windows\system32\sspisrv.dll
2014-10-23 21:26:19 ----A---- C:\Windows\system32\sspicli.dll
2014-10-23 21:26:19 ----A---- C:\Windows\system32\secur32.dll
2014-10-23 21:26:19 ----A---- C:\Windows\system32\lsass.exe
2014-10-23 21:26:19 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-10-23 21:26:13 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-10-23 21:26:13 ----A---- C:\Windows\system32\packager.dll
2014-10-23 21:26:09 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-10-23 21:26:09 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-10-23 21:26:09 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-10-23 21:26:09 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-10-23 21:26:08 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-10-23 21:26:08 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-10-23 21:26:08 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-10-23 21:26:08 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-10-23 21:26:08 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-10-23 21:26:08 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-23 21:26:08 ----A---- C:\Windows\system32\iernonce.dll
2014-10-23 21:26:08 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-10-23 21:26:08 ----A---- C:\Windows\system32\ie4uinit.exe
2014-10-23 21:26:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-10-23 21:26:06 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-10-23 21:26:06 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-10-23 21:26:06 ----A---- C:\Windows\system32\urlmon.dll
2014-10-23 21:26:06 ----A---- C:\Windows\system32\iedkcs32.dll
2014-10-23 21:26:05 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-10-23 21:26:05 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-10-23 21:26:05 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-10-23 21:26:04 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-10-23 21:26:04 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-10-23 21:26:04 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-10-23 21:26:04 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-23 21:26:04 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-23 21:26:03 ----A---- C:\Windows\system32\iesetup.dll
2014-10-23 21:26:03 ----A---- C:\Windows\system32\iertutil.dll
2014-10-23 21:26:02 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-10-23 21:26:02 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-10-23 21:26:02 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-10-23 21:26:02 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-10-23 21:26:02 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-10-23 21:26:01 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-10-23 21:26:01 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-10-23 21:26:01 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-10-23 21:26:01 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-23 21:26:00 ----A---- C:\Windows\system32\ieui.dll
2014-10-23 21:26:00 ----A---- C:\Windows\system32\ieframe.dll
2014-10-23 21:26:00 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-23 21:25:59 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-10-23 21:25:59 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-23 21:25:59 ----A---- C:\Windows\system32\jscript9diag.dll
2014-10-23 21:25:59 ----A---- C:\Windows\system32\jscript9.dll
2014-10-23 21:25:59 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-23 21:25:58 ----A---- C:\Windows\system32\wininet.dll
2014-10-23 21:25:58 ----A---- C:\Windows\system32\vbscript.dll
2014-10-23 21:25:58 ----A---- C:\Windows\system32\ieapfltr.dll
2014-10-23 21:25:57 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-23 21:25:57 ----A---- C:\Windows\system32\msrating.dll
2014-10-23 21:25:57 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-10-23 21:25:56 ----A---- C:\Windows\system32\mshtml.dll
2014-10-23 21:25:06 ----A---- C:\Windows\system32\rdpcorets.dll
2014-10-23 21:25:05 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-10-23 21:24:40 ----A---- C:\Windows\system32\winlogon.exe
2014-10-23 21:24:40 ----A---- C:\Windows\system32\lsasrv.dll
2014-10-23 21:24:39 ----A---- C:\Windows\system32\kerberos.dll
2014-10-23 21:24:38 ----A---- C:\Windows\system32\termsrv.dll
2014-10-23 21:24:37 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-10-23 21:24:37 ----A---- C:\Windows\system32\winsta.dll
2014-10-23 21:24:36 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2014-10-23 21:24:35 ----A---- C:\Windows\SYSWOW64\winsta.dll
2014-10-23 21:24:35 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-10-23 21:24:35 ----A---- C:\Windows\system32\TSpkg.dll
2014-10-23 21:24:35 ----A---- C:\Windows\system32\rdrmemptylst.exe
2014-10-23 21:24:35 ----A---- C:\Windows\system32\rdpcorekmts.dll
2014-10-23 21:24:34 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-10-23 21:24:34 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-10-23 21:24:34 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-10-23 21:24:34 ----A---- C:\Windows\system32\rdpwsx.dll
2014-10-23 21:24:34 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2014-10-23 21:24:34 ----A---- C:\Windows\system32\credssp.dll
2014-10-23 21:24:24 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-10-23 21:24:24 ----A---- C:\Windows\system32\gdi32.dll
2014-10-23 21:24:20 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2014-10-23 21:24:20 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-10-23 21:24:20 ----A---- C:\Windows\system32\cdd.dll
2014-10-23 21:24:18 ----A---- C:\Windows\SYSWOW64\rastls.dll
2014-10-23 21:24:18 ----A---- C:\Windows\system32\rastls.dll
2014-10-23 21:24:16 ----A---- C:\Windows\system32\win32k.sys
2014-10-23 21:18:47 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-10-23 21:18:47 ----A---- C:\Windows\system32\rpcrt4.dll
2014-10-23 21:05:44 ----D---- C:\Windows\SYSWOW64\Wat
2014-10-23 21:05:44 ----D---- C:\Windows\system32\Wat
2014-10-23 21:00:52 ----A---- C:\Windows\system32\Wdfres.dll
2014-10-23 21:00:52 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-10-23 20:56:41 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-10-23 20:56:41 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-10-23 20:56:03 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2014-10-23 20:56:03 ----A---- C:\Windows\system32\ntshrui.dll
2014-10-23 20:56:01 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2014-10-23 20:56:00 ----A---- C:\Windows\system32\mstscax.dll
2014-10-23 20:55:09 ----A---- C:\Windows\system32\schannel.dll
2014-10-23 20:55:08 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-10-23 20:55:07 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-10-23 20:55:07 ----A---- C:\Windows\system32\msv1_0.dll
2014-10-23 20:55:06 ----A---- C:\Windows\system32\drivers\cng.sys
2014-10-23 20:55:05 ----A---- C:\Windows\system32\ncrypt.dll
2014-10-23 20:55:04 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-10-23 20:55:03 ----A---- C:\Windows\system32\wdigest.dll
2014-10-23 20:55:02 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-10-23 20:54:53 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2014-10-23 20:54:53 ----A---- C:\Windows\system32\qdvd.dll
2014-10-23 20:54:52 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-10-23 20:54:52 ----A---- C:\Windows\system32\d3d10warp.dll
2014-10-23 20:54:46 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-10-23 20:54:46 ----A---- C:\Windows\system32\tzres.dll
2014-10-23 20:54:33 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2014-10-23 20:54:33 ----A---- C:\Windows\system32\tquery.dll
2014-10-23 20:54:33 ----A---- C:\Windows\system32\SearchIndexer.exe
2014-10-23 20:54:33 ----A---- C:\Windows\system32\mssrch.dll
2014-10-23 20:54:32 ----A---- C:\Windows\SYSWOW64\tquery.dll
2014-10-23 20:54:32 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2014-10-23 20:54:32 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2014-10-23 20:54:32 ----A---- C:\Windows\SYSWOW64\mssph.dll
2014-10-23 20:54:32 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2014-10-23 20:54:32 ----A---- C:\Windows\system32\SearchFilterHost.exe
2014-10-23 20:54:32 ----A---- C:\Windows\system32\mssvp.dll
2014-10-23 20:54:32 ----A---- C:\Windows\system32\mssph.dll
2014-10-23 20:54:31 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2014-10-23 20:54:31 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2014-10-23 20:54:31 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2014-10-23 20:54:31 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2014-10-23 20:54:31 ----A---- C:\Windows\system32\mssphtb.dll
2014-10-23 20:54:31 ----A---- C:\Windows\system32\msscntrs.dll
2014-10-23 20:54:11 ----A---- C:\Windows\system32\msi.dll
2014-10-23 20:54:10 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-10-23 20:54:10 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-10-23 20:54:10 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-10-23 20:54:10 ----A---- C:\Windows\system32\msihnd.dll
2014-10-23 20:54:10 ----A---- C:\Windows\system32\consent.exe
2014-10-23 20:54:10 ----A---- C:\Windows\system32\authui.dll
2014-10-23 20:53:56 ----A---- C:\Windows\system32\TSWorkspace.dll
2014-10-23 20:53:55 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2014-10-23 20:53:51 ----A---- C:\Windows\system32\xmllite.dll
2014-10-23 20:53:50 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2014-10-23 20:53:48 ----A---- C:\Windows\system32\poqexec.exe
2014-10-23 20:53:47 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-10-23 20:53:45 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2014-10-23 20:53:45 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2014-10-23 20:53:45 ----A---- C:\Windows\SYSWOW64\devobj.dll
2014-10-23 20:53:45 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2014-10-23 20:53:45 ----A---- C:\Windows\system32\umpnpmgr.dll
2014-10-23 20:53:37 ----A---- C:\Windows\system32\shell32.dll
2014-10-23 20:53:35 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-10-23 20:53:33 ----A---- C:\Windows\system32\winresume.exe
2014-10-23 20:53:33 ----A---- C:\Windows\system32\winload.exe
2014-10-23 20:53:32 ----A---- C:\Windows\system32\kdusb.dll
2014-10-23 20:53:32 ----A---- C:\Windows\system32\kdcom.dll
2014-10-23 20:53:32 ----A---- C:\Windows\system32\kd1394.dll
2014-10-23 20:53:29 ----A---- C:\Windows\system32\profsvc.dll
2014-10-23 20:49:12 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2014-10-23 20:49:12 ----A---- C:\Windows\SYSWOW64\gameux.dll
2014-10-23 20:49:12 ----A---- C:\Windows\system32\Wpc.dll
2014-10-23 20:49:12 ----A---- C:\Windows\system32\gameux.dll
2014-10-23 20:46:26 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2014-10-23 20:46:26 ----A---- C:\Windows\system32\prevhost.exe
2014-10-23 20:46:06 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-10-23 20:46:06 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-10-23 18:30:53 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2014-10-23 18:30:53 ----A---- C:\Windows\system32\wmploc.DLL
2014-10-23 18:30:52 ----A---- C:\Windows\SYSWOW64\wmp.dll
2014-10-23 18:30:50 ----A---- C:\Windows\system32\wmp.dll
2014-10-23 18:28:41 ----A---- C:\Windows\system32\WUDFSvc.dll
2014-10-23 18:28:41 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2014-10-23 18:28:41 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2014-10-23 18:28:40 ----A---- C:\Windows\system32\WUDFPlatform.dll
2014-10-23 18:28:39 ----A---- C:\Windows\system32\WUDFx.dll
2014-10-23 18:28:39 ----A---- C:\Windows\system32\WUDFHost.exe
2014-10-23 18:28:39 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2014-10-23 18:28:08 ----A---- C:\Windows\system32\RMActivate_isv.exe
2014-10-23 18:28:08 ----A---- C:\Windows\system32\RMActivate.exe
2014-10-23 18:28:05 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2014-10-23 18:28:05 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2014-10-23 18:28:05 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2014-10-23 18:28:05 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2014-10-23 18:28:04 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2014-10-23 18:28:04 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2014-10-23 18:28:04 ----A---- C:\Windows\system32\secproc_isv.dll
2014-10-23 18:28:04 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2014-10-23 18:28:03 ----A---- C:\Windows\SYSWOW64\secproc.dll
2014-10-23 18:28:03 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2014-10-23 18:28:03 ----A---- C:\Windows\system32\secproc_ssp.dll
2014-10-23 18:28:03 ----A---- C:\Windows\system32\secproc.dll
2014-10-23 18:28:03 ----A---- C:\Windows\system32\msdrm.dll
2014-10-23 18:28:02 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2014-10-23 18:28:02 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2014-10-23 18:28:01 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2014-10-23 18:27:30 ----A---- C:\Windows\system32\appinfo.dll
2014-10-23 18:27:26 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2014-10-23 18:27:26 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2014-10-23 18:27:26 ----A---- C:\Windows\system32\WebClnt.dll
2014-10-23 18:27:26 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2014-10-23 18:27:26 ----A---- C:\Windows\system32\davclnt.dll
2014-10-23 18:25:37 ----A---- C:\Windows\system32\drivers\fvevol.sys
2014-10-23 18:25:06 ----A---- C:\Windows\system32\scavengeui.dll
2014-10-22 21:05:48 ----D---- C:\Windows\cs
2014-10-22 21:03:55 ----D---- C:\Program Files\Windows Live
2014-10-22 20:56:18 ----D---- C:\Program Files\Microsoft Silverlight
2014-10-22 20:56:18 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-10-22 20:13:51 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-10-22 20:13:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-10-22 20:13:45 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-10-22 20:13:45 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2014-10-22 20:13:44 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2014-10-22 20:13:44 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2014-10-22 20:13:44 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2014-10-22 20:13:44 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2014-10-22 20:13:44 ----A---- C:\Windows\system32\wksprtPS.dll
2014-10-22 20:13:44 ----A---- C:\Windows\system32\wksprt.exe
2014-10-22 20:13:44 ----A---- C:\Windows\system32\TSWbPrxy.exe
2014-10-22 20:13:44 ----A---- C:\Windows\system32\tsgqec.dll
2014-10-22 20:13:44 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2014-10-22 20:13:43 ----A---- C:\Windows\system32\mstsc.exe
2014-10-22 20:13:42 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2014-10-22 20:13:42 ----A---- C:\Windows\system32\rdvidcrl.dll
2014-10-22 20:11:41 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2014-10-22 20:11:41 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2014-10-22 20:11:35 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll
2014-10-22 20:11:34 ----A---- C:\Windows\system32\rdpudd.dll
2014-10-22 20:11:34 ----A---- C:\Windows\system32\rdpendp_winip.dll
2014-10-17 23:19:02 ----D---- C:\Program Files (x86)\SecurityXploded
2014-10-17 23:18:47 ----D---- C:\Program Files (x86)\Techgile
2014-10-17 23:17:58 ----D---- C:\Users\EN\AppData\Roaming\Opera Software
2014-10-17 23:17:42 ----D---- C:\Program Files (x86)\Opera

======List of files/folders modified in the last 1 month======

2014-11-08 11:29:29 ----D---- C:\Windows\Prefetch
2014-11-08 11:29:22 ----D---- C:\Windows\Temp
2014-11-08 11:29:20 ----D---- C:\Program Files
2014-11-08 11:23:20 ----D---- C:\Users\EN\AppData\Roaming\Seznam.cz
2014-11-08 11:22:20 ----D---- C:\Windows\system32\config
2014-11-08 11:17:39 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-08 11:16:38 ----D---- C:\Windows\system32\Tasks
2014-11-08 11:16:18 ----D---- C:\Windows\System32
2014-11-08 11:16:17 ----D---- C:\Windows
2014-11-08 11:08:55 ----RD---- C:\Program Files (x86)
2014-11-04 21:52:00 ----SHD---- C:\Windows\Installer
2014-11-04 21:51:59 ----D---- C:\ProgramData\Microsoft Help
2014-11-03 21:18:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-03 21:18:55 ----D---- C:\Windows\inf
2014-11-02 13:30:16 ----D---- C:\Windows\Microsoft.NET
2014-11-02 13:21:52 ----RSD---- C:\Windows\assembly
2014-11-02 12:40:13 ----D---- C:\Windows\winsxs
2014-11-02 12:37:31 ----D---- C:\Windows\SysWOW64
2014-11-02 12:37:30 ----D---- C:\Windows\SYSWOW64\migration
2014-11-02 12:37:30 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-02 12:37:30 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-02 12:37:30 ----D---- C:\Windows\system32\migration
2014-11-02 12:37:30 ----D---- C:\Windows\system32\en-US
2014-11-02 12:37:30 ----D---- C:\Windows\system32\drivers
2014-11-02 12:37:30 ----D---- C:\Windows\system32\cs-CZ
2014-11-02 12:37:29 ----D---- C:\Windows\system32\DriverStore
2014-11-02 12:15:28 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-11-02 12:06:16 ----D---- C:\Windows\system32\catroot
2014-11-02 12:05:59 ----D---- C:\Windows\system32\catroot2
2014-11-02 11:27:42 ----HD---- C:\ProgramData
2014-11-02 11:11:57 ----D---- C:\Program Files\CCleaner
2014-11-02 10:33:13 ----D---- C:\Windows\AppPatch
2014-11-02 10:33:12 ----D---- C:\Program Files\Windows Defender
2014-11-02 10:33:12 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-02 10:21:59 ----SD---- C:\ProgramData\Microsoft
2014-11-02 09:23:27 ----D---- C:\Program Files\Windows Journal
2014-11-02 09:23:26 ----D---- C:\Windows\ehome
2014-10-31 22:27:00 ----D---- C:\Users\EN\AppData\Roaming\Skype
2014-10-29 19:45:13 ----D---- C:\Program Files\Common Files\System
2014-10-29 19:45:08 ----RSD---- C:\Windows\Fonts
2014-10-28 06:34:58 ----N---- C:\Windows\system32\MpSigStub.exe
2014-10-24 19:14:03 ----D---- C:\ProgramData\Skype
2014-10-23 21:59:14 ----D---- C:\Program Files (x86)\Common Files
2014-10-23 21:39:43 ----D---- C:\Program Files\Internet Explorer
2014-10-23 21:39:43 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-23 21:39:41 ----D---- C:\Windows\PolicyDefinitions
2014-10-23 21:26:59 ----D---- C:\Windows\system32\MRT
2014-10-23 21:05:45 ----D---- C:\Windows\SYSWOW64\Dism
2014-10-23 21:05:45 ----D---- C:\Windows\system32\wbem
2014-10-23 21:05:45 ----D---- C:\Windows\system32\drivers\en-US
2014-10-23 21:05:45 ----D---- C:\Windows\system32\drivers\cs-CZ
2014-10-23 21:05:45 ----D---- C:\Windows\system32\Dism
2014-10-23 21:05:42 ----D---- C:\Windows\system32\Boot
2014-10-23 20:36:21 ----D---- C:\Program Files\Windows Media Player
2014-10-23 20:33:09 ----D---- C:\Program Files (x86)\Windows Media Player
2014-10-22 21:04:02 ----D---- C:\Program Files (x86)\Windows Live
2014-10-22 21:03:13 ----D---- C:\Windows\Logs
2014-10-22 20:47:40 ----D---- C:\Windows\SYSWOW64\wbem
2014-10-22 20:45:17 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-08 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-08 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-10-30 21136]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-08 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-08 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-08 436624]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-10-27 283064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-08 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-08 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-08 116728]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-08 271752]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-01-22 6233088]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-01-22 161280]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl564.sys [2009-12-30 2962672]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-03-14 412712]
S3 AVerFx2hbtv64;AVerMedia USB SW Hybrid Tuner; C:\Windows\system32\drivers\AVerFx2hbtv64.sys [2009-06-10 292224]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\Windows\system32\DRIVERS\ss_bus.sys [2012-06-27 127488]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\Windows\system32\DRIVERS\ss_mdfl.sys [2012-06-27 18944]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\Windows\system32\DRIVERS\ss_mdm.sys [2012-06-27 161280]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2012-09-20 203104]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2014-01-22 206080]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WSDPrintDevice;Podpora tisku WSD prostřednictvím funkce UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
S3 WSDScan;Podpora skenování WSD přes UMB; C:\Windows\system32\DRIVERS\WSDScan.sys [2009-07-14 25088]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-01-22 202752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-08 50344]
R2 AVerRemote;AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [2008-09-10 352256]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [2008-07-15 409600]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc64.exe [2011-12-12 135824]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-08 4012248]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-22 267440]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-09-19 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-11-07 114288]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-10-23 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim

Pokud dcera nepouziva, odinstalujte seznam listicku a seznam software

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

seznam software odinstalován.
zde log:
# AdwCleaner v4.100 - Report created 08/11/2014 at 12:08:32
# DB v2014-11-07.1
# Updated 08/11/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : EN - TRI3227
# Running from : C:\Users\EN\Desktop\adwcleaner_4.100.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\Minibar
Folder Deleted : C:\Users\EN\AppData\LocalLow\Minibar
Folder Deleted : C:\Users\Niky\AppData\Local\AppsHat Mobile Apps
Folder Deleted : C:\Users\Niky\AppData\Local\Minibar
Folder Deleted : C:\Users\Niky\AppData\Roaming\Mozilla\Firefox\Profiles\vecpor5i.default\Extensions\{97A78363-B868-4B48-AC91-A783A31215AF}
File Deleted : C:\Users\EN\AppData\Roaming\Mozilla\Firefox\Profiles\hrxehnid.default\user.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKLM\SOFTWARE\Minibar
Key Deleted : HKLM\SOFTWARE\Myfree Codec
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v33.0.3 (x86 cs)

[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.m2_k1", "0");
[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.m2_k2", "0");
[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.m2_k3", "0");
[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.m2_k4", "1383034642344");
[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.m2_k5", "1382902978598");
[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Apps Hat\",\"description\":\"Apps Hat\",\"button\":{\"tooltip\":\"Visit AppsHat.com\",\"icon\":\"hxxp://www.bigspeedpro.com/button/%af[...]
[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.nero_options", "\"{\\\"m1\\\":{\\\"ads\\\":{\\\"n1\\\":{\\\"url\\\":\\\"//ulayout.com/nero/hatter/google_post_results_728x90.html?aff_slug=appshat\\\",\\\"width\\\"[...]
[vecpor5i.default\prefs.js] - Line Deleted : user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAADlElEQVQ4jb3S3U9adxwG8F/BuooQAQscXj0cOIC8nANUPYjoHDClvqAoZ04gpqsZKmrUV[...]

-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [4518 octets] - [08/11/2014 12:01:46]
AdwCleaner[S0].txt - [4520 octets] - [08/11/2014 12:08:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4580 octets] ##########

Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

tu to je:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-11-2014 01
Ran by EN (administrator) on TRI3227 on 08-11-2014 13:16:59
Running from C:\Users\EN\Desktop
Loaded Profile: EN (Available profiles: EN & Niky)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIILE.EXE
() C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
(AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(MyHeritage) C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(forum.viry.cz) C:\Users\EN\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310280 2012-12-20] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-11-08] (AVAST Software)
HKLM-x32\...\Run: [Family Tree Builder Update] => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [2532864 2013-12-09] (MyHeritage)
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [EPLTarget\P0000000000000002] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
ShortcutTarget: AVer HID Receiver.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
ShortcutTarget: AVerQuick.lnk -> C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe (AVerMedia TECHNOLOGIES, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1001\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1000\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xAB6609681042CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
SearchScopes: HKCU - {663051A3-9E88-4AE6-8E0B-17390E4E963E} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - No File
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

FireFox:
========
FF ProfilePath: C:\Users\EN\AppData\Roaming\Mozilla\Firefox\Profiles\hrxehnid.default
FF Homepage: https://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Seznam lištička - C:\Users\EN\AppData\Roaming\Mozilla\Firefox\Profiles\hrxehnid.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-06-08]
FF Extension: Show my Password - C:\Users\EN\AppData\Roaming\Mozilla\Firefox\Profiles\hrxehnid.default\Extensions\{cd617372-6743-4ee4-bac4-fbf60f35719e}.xpi [2014-11-02]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-23]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-08] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-08] (Avast Software)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [352256 2008-09-10] (AVerMedia) [File not signed]
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [409600 2008-07-15] () [File not signed]
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-08] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-08] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-08] ()
S3 AVerFx2hbtv64; C:\Windows\System32\drivers\AVerFx2hbtv64.sys [292224 2009-06-10] (AVerMedia TECHNOLOGIES, Inc.)
R3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl564.sys [2962672 2009-12-30] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-10-27] (Disc Soft Ltd)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(http://www.devguru.co.kr))
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-08] (Avast Software)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-08 13:16 - 2014-11-08 13:17 - 00013022 _____ () C:\Users\EN\Desktop\FRST.txt
2014-11-08 13:16 - 2014-11-08 13:17 - 00000000 ____D () C:\FRST
2014-11-08 13:15 - 2014-11-08 13:15 - 00112640 _____ (forum.viry.cz) C:\Users\EN\Desktop\FRSTLauncher.exe
2014-11-08 13:11 - 2014-11-08 13:11 - 02115584 _____ (Farbar) C:\Users\EN\Desktop\FRST64.exe
2014-11-08 12:01 - 2014-11-08 12:08 - 00000000 ____D () C:\AdwCleaner
2014-11-08 12:01 - 2014-11-08 12:01 - 02145792 _____ () C:\Users\EN\Desktop\adwcleaner_4.100.exe
2014-11-08 11:29 - 2014-11-08 11:29 - 01222144 _____ () C:\Users\EN\Downloads\RSITx64.exe
2014-11-08 11:29 - 2014-11-08 11:29 - 00000000 ____D () C:\rsit
2014-11-08 11:29 - 2014-11-08 11:29 - 00000000 ____D () C:\Program Files\trend micro
2014-11-08 11:16 - 2014-11-08 11:16 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-11-08 11:16 - 2014-11-08 11:16 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-11-07 19:14 - 2014-11-07 19:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-02 12:45 - 2014-11-02 12:45 - 00000000 _____ () C:\Users\EN\Sti_Trace.log
2014-11-02 12:06 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-11-02 12:06 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-11-02 12:06 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-11-02 12:06 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-11-02 12:06 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-11-02 12:06 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-11-02 12:06 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-11-02 12:06 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-11-02 12:06 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-11-02 12:06 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-11-02 12:06 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-11-02 12:06 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-11-02 12:06 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-11-02 12:04 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-11-02 12:04 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-11-02 12:04 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-11-02 12:04 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-11-02 12:04 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-11-02 12:04 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-11-02 12:04 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-11-02 12:04 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-11-02 12:04 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-11-02 12:04 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-11-02 11:12 - 2014-11-02 11:12 - 00002766 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-11-02 11:11 - 2014-11-02 11:11 - 00000783 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-02 11:10 - 2014-11-02 11:10 - 04976456 _____ (Piriform Ltd) C:\Users\EN\Downloads\ccsetup419.exe
2014-11-02 10:54 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-11-02 10:54 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-11-02 10:54 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-11-02 10:54 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-11-02 10:54 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-11-02 10:54 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-11-02 10:54 - 2012-07-06 21:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-11-02 10:54 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-11-02 09:45 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-11-02 09:45 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-11-02 09:45 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-02 09:45 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-11-02 09:45 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-11-02 09:45 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-11-02 09:45 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-11-02 09:45 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-11-02 09:45 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-11-02 09:45 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-11-02 09:45 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-11-02 09:45 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-11-02 09:45 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-11-02 09:45 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-11-02 09:45 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-11-02 09:45 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-11-02 09:44 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-11-02 09:44 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-11-02 09:44 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-11-02 09:44 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-11-02 09:44 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-11-02 09:44 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-11-02 09:44 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-11-02 09:44 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-11-02 09:44 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-11-02 09:44 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-11-02 09:44 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-11-02 09:44 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-11-02 09:44 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-11-02 09:44 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-11-02 09:44 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-11-02 09:44 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-11-02 09:44 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-11-02 09:44 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-11-02 09:44 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-11-02 09:43 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-11-02 09:43 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-11-02 09:43 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-11-02 09:43 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-11-02 09:43 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-11-02 09:43 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-11-02 09:43 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-11-02 09:43 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-11-02 09:43 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-11-02 09:43 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-11-02 09:43 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-11-02 09:43 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-11-02 09:43 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-11-02 09:43 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-11-02 09:43 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-11-02 09:43 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-11-02 09:43 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-11-02 09:43 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-11-02 09:43 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-11-02 09:33 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-11-02 09:33 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-11-02 09:33 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-11-02 09:33 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-11-02 09:33 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-11-02 09:12 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-11-02 09:12 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-11-02 09:12 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-11-02 09:12 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-11-02 09:11 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-11-02 09:11 - 2014-03-26 15:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-02 09:11 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-11-02 09:11 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-02 09:11 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-11-02 09:11 - 2014-03-26 15:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-02 09:11 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-11-02 09:11 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-02 09:11 - 2014-03-04 10:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-11-02 09:11 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-11-02 09:11 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-11-02 09:11 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-11-02 09:11 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-11-02 09:11 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-11-02 09:11 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-11-02 09:11 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-11-02 09:11 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-11-02 09:11 - 2014-03-04 10:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-11-02 09:11 - 2014-03-04 10:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-11-02 09:11 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-11-02 09:11 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-11-02 09:11 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-11-02 09:11 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-11-02 09:11 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-11-02 09:11 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-11-02 09:11 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-11-02 09:11 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-11-02 09:11 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-11-02 09:11 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-11-02 09:11 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-11-02 09:11 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-11-02 09:11 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-11-02 09:11 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-11-02 09:11 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-11-02 09:11 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-11-02 09:10 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-11-02 09:10 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-11-02 09:10 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-11-02 09:10 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-11-02 09:10 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-11-02 09:10 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-11-02 09:10 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-11-02 09:10 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-11-02 09:10 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-11-02 09:10 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-11-02 09:10 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-11-02 09:10 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-11-02 09:10 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-11-02 09:10 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-11-02 09:10 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-11-02 09:10 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-11-02 09:10 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-11-02 09:04 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-11-02 09:04 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-11-02 09:04 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-11-02 09:04 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-11-02 09:04 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-11-02 09:03 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-11-02 09:01 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-11-02 09:01 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-10-30 22:35 - 2014-10-30 22:35 - 00000000 __SHD () C:\Users\EN\AppData\Local\EmieUserList
2014-10-30 22:35 - 2014-10-30 22:35 - 00000000 __SHD () C:\Users\EN\AppData\Local\EmieSiteList
2014-10-29 19:03 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-10-29 19:03 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-10-29 19:03 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-10-29 19:03 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-10-29 19:03 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-10-29 19:03 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-10-29 19:02 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-10-29 19:02 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-10-29 19:02 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-10-29 19:02 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-10-29 19:02 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-10-29 19:02 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-10-29 19:01 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-29 19:01 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-29 19:01 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-29 19:01 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-29 19:01 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-29 19:01 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-29 19:01 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-29 19:01 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-29 19:01 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-29 19:01 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-29 19:01 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-10-29 19:01 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-29 19:01 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-29 19:01 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-10-29 19:00 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-29 19:00 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-29 19:00 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-29 19:00 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-29 19:00 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-29 19:00 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-29 19:00 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-10-29 19:00 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-10-29 19:00 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-10-29 19:00 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-10-29 19:00 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-10-29 19:00 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-10-29 19:00 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-10-29 19:00 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-10-29 19:00 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-10-29 19:00 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-10-29 19:00 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-10-29 19:00 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-10-29 19:00 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-10-29 19:00 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-10-29 19:00 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-10-29 19:00 - 2011-04-28 04:54 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-10-29 19:00 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-10-29 19:00 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-10-29 19:00 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-10-29 19:00 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-10-29 19:00 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-10-29 19:00 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-10-29 19:00 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-10-29 19:00 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-10-29 19:00 - 2010-12-23 11:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-10-29 19:00 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-10-29 19:00 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-10-29 19:00 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-10-29 19:00 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-10-29 18:59 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-10-29 18:59 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-10-29 18:59 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-10-29 18:59 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-10-29 18:52 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-10-29 18:52 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-10-29 18:51 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-10-29 18:51 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-10-29 18:49 - 2011-08-27 06:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-10-29 18:49 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-10-29 18:49 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-10-29 18:49 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-10-23 21:26 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-23 21:26 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-23 21:26 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-23 21:26 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-23 21:26 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-23 21:26 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-23 21:26 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-23 21:26 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-23 21:26 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-23 21:26 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-23 21:26 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-23 21:26 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-23 21:26 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-23 21:26 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-23 21:26 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-23 21:26 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-23 21:26 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-23 21:26 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-23 21:26 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-23 21:26 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-23 21:26 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-23 21:26 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-23 21:26 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-23 21:26 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-23 21:26 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-23 21:26 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-23 21:26 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-23 21:26 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-23 21:26 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-23 21:26 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-23 21:26 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-23 21:26 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-23 21:26 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-23 21:26 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-23 21:26 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-23 21:26 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-23 21:26 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-23 21:26 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-23 21:26 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-23 21:26 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-23 21:26 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-23 21:26 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-23 21:26 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-23 21:26 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-23 21:26 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-23 21:26 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-23 21:26 - 2014-04-12 03:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-10-23 21:26 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-10-23 21:26 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-10-23 21:26 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-10-23 21:26 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-10-23 21:26 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-10-23 21:25 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-23 21:25 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-23 21:25 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-23 21:25 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-23 21:25 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-23 21:25 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-23 21:25 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-23 21:25 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-23 21:25 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-23 21:25 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-23 21:25 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-23 21:25 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-23 21:25 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-23 21:25 - 2014-05-08 10:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-10-23 21:24 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-23 21:24 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-23 21:24 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-23 21:24 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-10-23 21:24 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-10-23 21:24 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-23 21:24 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-23 21:24 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-23 21:24 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-23 21:24 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-23 21:24 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-23 21:24 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-23 21:24 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-23 21:24 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-23 21:24 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-23 21:24 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-23 21:24 - 2014-07-07 03:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-10-23 21:24 - 2014-07-07 03:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-10-23 21:24 - 2014-07-07 02:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-10-23 21:24 - 2014-07-07 02:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-10-23 21:24 - 2014-07-07 02:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-10-23 21:24 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-10-23 21:24 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-10-23 21:24 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-10-23 21:24 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-10-23 21:24 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-10-23 21:18 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-10-23 21:18 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-10-23 21:00 - 2012-07-26 05:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-10-23 21:00 - 2012-07-26 03:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-10-23 21:00 - 2012-06-02 15:35 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-10-23 20:56 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-23 20:56 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-23 20:56 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-10-23 20:56 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-10-23 20:56 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-10-23 20:56 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-10-23 20:55 - 2014-05-30 09:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-10-23 20:55 - 2014-05-30 09:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-10-23 20:55 - 2014-05-30 09:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-10-23 20:55 - 2014-05-30 09:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-10-23 20:55 - 2014-05-30 08:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-10-23 20:55 - 2014-05-30 08:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-10-23 20:55 - 2014-05-30 08:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-10-23 20:55 - 2014-05-30 08:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-10-23 20:55 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-10-23 20:55 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-10-23 20:55 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-10-23 20:54 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-23 20:54 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-10-23 20:54 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-23 20:54 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-23 20:54 - 2014-09-09 23:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-10-23 20:54 - 2014-09-09 22:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-10-23 20:54 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-10-23 20:54 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-10-23 20:54 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-23 20:54 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-10-23 20:54 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-10-23 20:54 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-10-23 20:54 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-10-23 20:54 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-10-23 20:54 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-10-23 20:54 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-10-23 20:54 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-10-23 20:54 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-10-23 20:54 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-10-23 20:54 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-10-23 20:54 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-10-23 20:54 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-10-23 20:54 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-10-23 20:54 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-10-23 20:54 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-10-23 20:54 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-10-23 20:54 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-10-23 20:54 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-10-23 20:54 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-10-23 20:54 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-10-23 20:54 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-10-23 20:53 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-10-23 20:53 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-10-23 20:53 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-10-23 20:53 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-10-23 20:53 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-10-23 20:53 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-10-23 20:53 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-10-23 20:53 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-10-23 20:53 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-10-23 20:53 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-10-23 20:53 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-10-23 20:53 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-10-23 20:53 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-10-23 20:53 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-10-23 20:53 - 2011-02-05 18:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-10-23 20:53 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-10-23 20:53 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-10-23 20:53 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-10-23 20:53 - 2011-02-05 18:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-23 20:53 - 2011-02-05 18:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-10-23 20:53 - 2011-02-05 18:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-23 20:49 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-10-23 20:49 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-10-23 20:49 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-10-23 20:49 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-10-23 20:49 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-10-23 20:49 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-10-23 20:49 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-10-23 20:49 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-10-23 20:49 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-10-23 20:49 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-10-23 20:49 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-10-23 20:49 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-10-23 20:49 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-10-23 20:49 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-10-23 20:49 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-10-23 20:49 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-10-23 20:49 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-10-23 20:49 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-10-23 20:49 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-10-23 20:46 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-10-23 20:46 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-10-23 20:46 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-10-23 20:46 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-10-23 20:36 - 2014-10-23 20:36 - 00001046 _____ () C:\Users\Public\Desktop\Windows Media Player.lnk
2014-10-23 18:30 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-23 18:30 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-23 18:30 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-10-23 18:30 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-10-23 18:28 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-10-23 18:28 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-10-23 18:28 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-10-23 18:28 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-10-23 18:28 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-10-23 18:28 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-10-23 18:28 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-10-23 18:28 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-10-23 18:28 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-10-23 18:28 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-10-23 18:28 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-10-23 18:28 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-10-23 18:28 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-10-23 18:28 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-10-23 18:28 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-10-23 18:28 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-10-23 18:28 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-10-23 18:28 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-10-23 18:28 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-10-23 18:28 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-10-23 18:28 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-10-23 18:28 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-10-23 18:28 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-10-23 18:28 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-10-23 18:28 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-10-23 18:28 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-10-23 18:27 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-10-23 18:27 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-10-23 18:27 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-10-23 18:27 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-10-23 18:27 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-10-23 18:27 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-10-23 18:25 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-10-23 18:25 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-10-22 21:05 - 2014-10-22 21:05 - 00001306 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-10-22 21:05 - 2014-10-22 21:05 - 00000000 ____D () C:\Windows\cs
2014-10-22 21:03 - 2014-10-22 21:03 - 00000000 ____D () C:\Program Files\Windows Live
2014-10-22 20:57 - 2014-10-22 20:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-10-22 20:56 - 2014-10-22 20:56 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-10-22 20:56 - 2014-10-22 20:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-10-22 20:13 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-10-22 20:13 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-10-22 20:13 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-10-22 20:13 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-10-22 20:13 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-10-22 20:13 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-10-22 20:13 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-10-22 20:13 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-10-22 20:13 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-10-22 20:13 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-10-22 20:13 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-10-22 20:13 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-10-22 20:13 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-10-22 20:13 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-22 20:13 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-10-22 20:13 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-22 20:11 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-10-22 20:11 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-10-22 20:11 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-10-22 20:11 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-10-22 20:11 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-10-22 19:59 - 2014-11-08 11:16 - 00001925 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2014-10-17 23:19 - 2014-10-17 23:31 - 00000000 ____D () C:\Program Files (x86)\SecurityXploded
2014-10-17 23:18 - 2014-10-19 19:17 - 00000000 ____D () C:\Program Files (x86)\Techgile
2014-10-17 23:17 - 2014-10-17 23:25 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-10-17 23:17 - 2014-10-17 23:17 - 00000000 ____D () C:\Users\EN\AppData\Roaming\Opera Software
2014-10-17 23:17 - 2014-10-17 23:17 - 00000000 ____D () C:\Users\EN\AppData\Local\Opera Software
2014-10-14 19:52 - 2014-10-14 19:52 - 00047592 _____ () C:\Users\EN\Downloads\once.upon.a.time.s04e03.hdtv.x264-lol.srt
2014-10-14 19:52 - 2014-10-14 19:52 - 00047592 _____ () C:\Users\EN\Downloads\once.upon.a.time.s04e03.hdtv.x264-lol (1).srt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-08 13:09 - 2013-06-02 11:17 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-08 12:17 - 2009-07-14 05:45 - 00021840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-08 12:17 - 2009-07-14 05:45 - 00021840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-08 12:14 - 2011-08-02 09:00 - 01366894 _____ () C:\Windows\WindowsUpdate.log
2014-11-08 12:09 - 2013-11-24 13:43 - 00116168 _____ () C:\Windows\PFRO.log
2014-11-08 12:09 - 2013-11-01 14:53 - 00042702 _____ () C:\Windows\setupact.log
2014-11-08 12:09 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-08 12:00 - 2013-10-27 18:55 - 00000000 ____D () C:\Users\EN\AppData\Roaming\Seznam.cz
2014-11-08 11:59 - 2013-10-27 17:16 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-11-08 11:17 - 2013-01-23 21:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-08 11:16 - 2014-06-17 18:30 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-11-08 11:16 - 2014-04-06 18:49 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-11-08 11:16 - 2013-04-09 17:12 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-11-08 11:16 - 2013-04-09 17:12 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-11-08 11:16 - 2013-01-23 19:24 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-11-08 11:16 - 2013-01-23 19:24 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-11-08 11:16 - 2013-01-23 19:24 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2014-11-08 11:16 - 2013-01-23 19:24 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-11-08 11:15 - 2013-01-23 19:24 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-11-07 21:25 - 2014-01-22 20:05 - 00000000 ____D () C:\Users\EN\Desktop\Nová složka
2014-11-04 21:51 - 2011-07-21 13:01 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-04 20:45 - 2013-01-27 10:37 - 00000000 ____D () C:\Users\EN\Documents\Referáty
2014-11-04 20:43 - 2013-12-07 16:02 - 00000000 ____D () C:\Users\EN\Documents\obrázky simpsnů
2014-11-03 21:18 - 2011-07-15 11:40 - 00669116 _____ () C:\Windows\system32\perfh005.dat
2014-11-03 21:18 - 2011-07-15 11:40 - 00141744 _____ () C:\Windows\system32\perfc005.dat
2014-11-03 21:18 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-02 12:45 - 2011-07-14 10:03 - 00000000 ____D () C:\Users\EN
2014-11-02 12:15 - 2013-01-24 17:52 - 01568478 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-11-02 11:24 - 2013-02-19 18:32 - 00000931 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk
2014-11-02 11:21 - 2013-02-19 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-11-02 11:11 - 2011-07-14 11:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-02 11:11 - 2011-07-14 11:32 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-02 10:35 - 2009-07-14 05:45 - 00341536 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-02 10:33 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-02 10:33 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-02 09:23 - 2010-11-21 08:17 - 00000000 ____D () C:\Program Files\Windows Journal
2014-10-31 22:27 - 2013-01-24 19:55 - 00000000 ____D () C:\Users\EN\AppData\Roaming\Skype
2014-10-29 19:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-10-28 06:34 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-24 19:14 - 2013-01-24 19:47 - 00000000 ____D () C:\ProgramData\Skype
2014-10-23 21:51 - 2011-07-14 11:18 - 00085752 _____ () C:\Users\EN\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-23 21:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-10-23 21:33 - 2014-04-12 13:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-23 21:14 - 2013-01-23 22:42 - 00001250 __RSH () C:\Users\EN\ntuser.pol
2014-10-23 21:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-10-23 21:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-10-22 21:36 - 2014-06-12 19:13 - 00000000 ____D () C:\Users\EN\Desktop\upirkove
2014-10-22 21:05 - 2013-01-24 17:56 - 00001375 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-10-22 21:04 - 2013-01-24 17:56 - 00001443 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-10-22 21:04 - 2013-01-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-10-22 21:03 - 2013-11-01 19:33 - 00107881 _____ () C:\Windows\DirectX.log
2014-10-22 20:50 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-22 20:45 - 2013-06-02 11:17 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-22 20:45 - 2013-01-24 18:25 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-22 20:45 - 2011-07-14 11:31 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-22 20:14 - 2013-01-27 21:23 - 00001067 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-10-22 20:14 - 2013-01-27 21:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-10-16 19:33 - 2013-01-24 18:27 - 00000000 ____D () C:\Users\EN\AppData\Local\Windows Live

Some content of TEMP:
====================
C:\Users\EN\AppData\Local\Temp\GotClipDownloader__6629_i433038157_il4753234.exe
C:\Users\EN\AppData\Local\Temp\Installmanager.exe
C:\Users\EN\AppData\Local\Temp\Quarantine.exe
C:\Users\EN\AppData\Local\Temp\sqlite3.dll
C:\Users\EN\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Niky\AppData\Local\Temp\appshat-distribution.exe
C:\Users\Niky\AppData\Local\Temp\AskSLib.dll
C:\Users\Niky\AppData\Local\Temp\bitool.dll
C:\Users\Niky\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\Niky\AppData\Local\Temp\~C69.exe
C:\Users\Niky\AppData\Local\Temp\~E3C3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-07 21:06




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (C) (Fixed) (Total:691.79 GB) (Free:234.44 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Available physical RAM: 2512.11 MB
Total physical RAM: 3958.71 MB
Percentage of memory in use: 36%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 698.6 GB) (Disk ID: F99D60D8)
Partition 1: (Active) - (Size=691.8 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\EN\Desktop" je 390 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Pamatujte, ze velikost Plochy by nemela presahovat 200 MB, protoze se pak snizuje rychlost startu pocitace i jeho samotny chod.

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CloseProcesses:
  HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
  HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
  HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
  GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1001\User: Group Policy restriction detected <======= ATTENTION
  GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1000\User: Group Policy restriction detected <======= ATTENTION
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xAB6609681042CC01
  HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
  BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> No File
  Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
  Toolbar: HKLM - No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - No File
  FF Plugin: @microsoft.com/GENUINE -> disabled No File
  FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  2014-11-08 11:29 - 2014-11-08 11:29 - 00000000 ____D () C:\Program Files\trend micro
  2014-11-02 11:10 - 2014-11-02 11:10 - 04976456 _____ (Piriform Ltd) C:\Users\EN\Downloads\ccsetup419.exe
  2014-11-08 12:00 - 2013-10-27 18:55 - 00000000 ____D () C:\Users\EN\AppData\Roaming\Seznam.cz
  2014-11-08 11:59 - 2013-10-27 17:16 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
  Hosts:
  EmptyTemp:
  End

o té ploše jsem jí to už říkal dříve, ale to je jako když mluvim do dubu

tady log:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-11-2014 01
Ran by EN at 2014-11-08 13:48:02 Run:1
Running from C:\Users\EN\Desktop
Loaded Profile: EN (Available profiles: EN & Niky)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1001\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1000\User: Group Policy restriction detected <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xAB6609681042CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
BHO: No Name -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
2014-11-08 11:29 - 2014-11-08 11:29 - 00000000 ____D () C:\Program Files\trend micro
2014-11-02 11:10 - 2014-11-02 11:10 - 04976456 _____ (Piriform Ltd) C:\Users\EN\Downloads\ccsetup419.exe
2014-11-08 12:00 - 2013-10-27 18:55 - 00000000 ____D () C:\Users\EN\AppData\Roaming\Seznam.cz
2014-11-08 11:59 - 2013-10-27 17:16 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-1102241445-46629876-2974750587-1000\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1001\User => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Windows\system32\GroupPolicyUsers\S-1-5-21-1102241445-46629876-2974750587-1000\User => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache => value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP => value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}" => Key deleted successfully.
"HKCR\CLSID\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully.
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} => value deleted successfully.
"HKCR\CLSID\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}" => Key not found.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\EN\Downloads\ccsetup419.exe => Moved successfully.
C:\Users\EN\AppData\Roaming\Seznam.cz => Moved successfully.
C:\Program Files (x86)\Seznam.cz => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 1.3 GB temporary data.


The system needed a reboot.

==== End of Fixlog ====

Opakovani je matka moudrosti

Takze jeste uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

Děkuji mockrát.
Takže tam bylo něco v nepořádku ?

Jen par adwaru a zbytecnosti. Nic vylozene zakerneho v logu nebylo

Doporucuji cca jednou tydne pouzit CCleaner.

díky a naschle

Nemate zac, rad jsem pomohl


Preju prijemny vikend. Mejte se