Preventivka - prosím

[Jimmy7CZ]

Zdravím, nemám žádný problém, jen po dlouhé době prosím o preventivní kontrolu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2014-11-16 17:31:41
Microsoft Windows 8.1
System drive C: has 726 GB (76%) free of 953 GB
Total RAM: 8146 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:31:52, on 16. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera_crashreporter.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - http://www.battlefieldheroes.com/static ... .203.0.cab
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.96.0.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Games\Smite\HiPatchService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @oem10.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\WINDOWS\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8397 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
dashost.exe {ef4a839a-8e80-4210-9d1893bdef5ff850}
C:\Games\Smite\HiPatchService.exe
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\system32\viakaraokesrv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1e196230-dfd4-49fe-91e0-86b0fc66ad90 -SystemEventPortName:HostProcess-d2568b78-7d6a-4c5c-bffe-bf2d66d2c5d2 -IoCancelEventPortName:HostProcess-37792a7c-fcd4-43f7-a477-aae378a57aab -NonStateChangingEventPortName:HostProcess-5d5a54ed-c94b-42ef-92d2-c7c71894c533 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:dc0e407a-5008-47f6-8223-16fa73aec7d7 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskhost.exe $(Arg0)

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
atieclxx
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\skydrive.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
taskhostex.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
raptr_im.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Raptr\raptr_ep64.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --ran-launcher /crash-reporter-parent-id=6060
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=gpu-process --channel="6060.0.160914323\1787710378" --enable-proprietary-media-types-playback --crash-reporter-pid=4732 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16 --gpu-vendor-id=0x1002 --gpu-device-id=0x6758 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.251.9001.1001 --enable-proprietary-media-types-playback --crash-reporter-pid=4732 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.2.63450462\374439903" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.4.2001065837\1631883921" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.5.877527270\2000211003" /prefetch:673131151
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.6.1739165701\1187466" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.7.435197184\1538381388" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=plugin --plugin-path="C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll" --disable-direct-npapi-requests --lang=cs --channel="6060.8.840679857\177980472" --enable-proprietary-media-types-playback --crash-reporter-pid=4732 /prefetch:-390060480
C:\WINDOWS\system32\AUDIODG.EXE 0xe58
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.11.1574920117\1253994529" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.12.1619615645\1270424059" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.30.1300455866\1993363650" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe112_ Global\UsGthrCtrlFltPipeMssGthrPipe112 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 588 592 600 65536 596
"C:\Users\uzivatel\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-13 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-13 457712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Raptr"=C:\PROGRA~2\Raptr\raptrstub.exe [2014-10-17 55568]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2014-03-13 779776]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-08-16 5264016]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-14 4085896]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-07-04 766688]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-16 17:31:41 ----D---- C:\rsit
2014-11-12 15:44:27 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\system32\schannel.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-11-12 15:44:26 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-12 15:44:24 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-12 15:44:24 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-12 15:44:24 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-12 15:44:16 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-11-12 15:44:16 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-11-12 15:44:14 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-11-12 15:44:14 ----A---- C:\WINDOWS\system32\msi.dll
2014-11-12 15:44:14 ----A---- C:\WINDOWS\system32\authui.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\system32\consent.exe
2014-11-12 15:44:13 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-11-12 15:44:10 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-11-12 15:44:09 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-11-12 15:44:09 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-11-12 15:44:09 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wups2.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wups.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-11-12 15:44:07 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-11-12 15:44:07 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-11-12 15:44:07 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-11-12 15:43:26 ----A---- C:\WINDOWS\system32\user32.dll
2014-11-12 15:43:25 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-11-12 15:43:24 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-11-12 15:43:24 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-11-12 15:43:23 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-11-12 15:43:21 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2014-11-12 15:43:21 ----A---- C:\WINDOWS\system32\winshfhc.dll
2014-11-12 15:42:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-12 15:42:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-12 15:42:18 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-12 15:42:13 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-12 15:42:08 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-12 15:42:06 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-12 15:42:04 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-11-12 15:42:04 ----A---- C:\WINDOWS\system32\wininet.dll
2014-11-12 15:42:04 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-11-12 15:42:02 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-12 15:42:02 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 15:41:57 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-12 15:41:57 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-12 15:41:57 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\url.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 15:41:53 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-12 15:41:31 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-12 15:41:31 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-12 15:41:30 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-12 15:41:30 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-12 15:41:30 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-12 15:41:28 ----A---- C:\WINDOWS\system32\devinv.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\generaltel.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\aepic.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-11-12 15:41:25 ----A---- C:\WINDOWS\system32\shell32.dll
2014-11-12 15:41:25 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-11-12 15:41:24 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-11-12 15:41:23 ----A---- C:\WINDOWS\system32\twinui.dll
2014-11-12 15:41:23 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-12 15:41:23 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-11-12 15:41:22 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-11-12 15:41:22 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-12 15:41:22 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-12 15:41:22 ----A---- C:\WINDOWS\system32\localspl.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-11-12 15:41:20 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\untfs.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-11-12 15:41:19 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-12 15:41:19 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 15:41:18 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-11-01 22:46:57 ----D---- C:\Users\uzivatel\AppData\Roaming\.mono
2014-10-17 17:39:53 ----D---- C:\Program Files (x86)\NVIDIA Corporation

======List of files/folders modified in the last 1 month======

2014-11-16 17:31:47 ----D---- C:\Program Files\trend micro
2014-11-16 17:31:37 ----D---- C:\WINDOWS\Prefetch
2014-11-16 17:21:11 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2014-11-16 17:02:00 ----D---- C:\WINDOWS\system32\sru
2014-11-16 16:41:25 ----D---- C:\WINDOWS\Temp
2014-11-16 14:42:12 ----D---- C:\Users\uzivatel\AppData\Roaming\Raptr
2014-11-16 14:39:25 ----D---- C:\WINDOWS\system32\config
2014-11-16 14:30:04 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-16 14:27:46 ----D---- C:\WINDOWS\WinSxS
2014-11-16 14:22:03 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-16 14:20:10 ----RSD---- C:\WINDOWS\assembly
2014-11-15 20:57:29 ----D---- C:\Program Files (x86)\Steam
2014-11-15 12:27:06 ----SHD---- C:\System Volume Information
2014-11-14 14:24:05 ----HD---- C:\Program Files\WindowsApps
2014-11-14 14:24:05 ----D---- C:\WINDOWS\AppReadiness
2014-11-13 14:55:03 ----D---- C:\WINDOWS\system32\catroot
2014-11-13 14:52:44 ----RD---- C:\WINDOWS\System32
2014-11-13 14:52:44 ----D---- C:\WINDOWS\Inf
2014-11-13 14:52:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-12 23:32:46 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-11-12 23:32:46 ----D---- C:\WINDOWS\SysWOW64
2014-11-12 23:32:46 ----D---- C:\WINDOWS\system32\drivers
2014-11-12 23:32:46 ----D---- C:\WINDOWS\system32\cs-CZ
2014-11-12 23:32:45 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-12 23:32:45 ----D---- C:\WINDOWS\system32\migration
2014-11-12 23:32:45 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-12 23:32:42 ----SD---- C:\WINDOWS\system32\CompatTel
2014-11-12 23:32:42 ----D---- C:\Program Files\Internet Explorer
2014-11-12 23:32:41 ----RD---- C:\WINDOWS\ToastData
2014-11-12 23:32:41 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-11-12 23:32:41 ----D---- C:\WINDOWS\apppatch
2014-11-12 23:32:40 ----D---- C:\Program Files\Windows Defender
2014-11-12 23:32:40 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-12 16:57:14 ----D---- C:\WINDOWS\CbsTemp
2014-11-12 16:57:08 ----SHD---- C:\WINDOWS\Installer
2014-11-12 16:57:08 ----D---- C:\ProgramData\Microsoft Help
2014-11-12 16:56:54 ----D---- C:\WINDOWS\system32\wbem
2014-11-12 15:39:39 ----D---- C:\WINDOWS\system32\catroot2
2014-11-11 16:31:05 ----D---- C:\WINDOWS\debug
2014-11-09 21:11:40 ----D---- C:\Users\uzivatel\AppData\Roaming\TS3Client
2014-11-08 10:49:05 ----D---- C:\WINDOWS\SoftwareDistribution
2014-11-08 10:49:05 ----D---- C:\Windows
2014-11-08 00:29:05 ----D---- C:\WINDOWS\Logs
2014-10-30 20:47:02 ----D---- C:\WINDOWS\system32\Tasks
2014-10-30 20:47:02 ----D---- C:\Program Files (x86)\Opera
2014-10-30 16:52:33 ----D---- C:\WINDOWS\rescache
2014-10-30 01:55:02 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-10-28 22:41:53 ----D---- C:\ProgramData\Origin
2014-10-28 22:40:17 ----D---- C:\Program Files (x86)\Origin
2014-10-28 10:50:51 ----D---- C:\Games
2014-10-20 16:27:44 ----SD---- C:\Users\uzivatel\AppData\Roaming\Microsoft
2014-10-19 07:52:06 ----D---- C:\Programy
2014-10-19 07:49:57 ----RD---- C:\Program Files (x86)
2014-10-19 07:48:49 ----RSD---- C:\WINDOWS\Fonts
2014-10-18 18:03:15 ----D---- C:\Program Files (x86)\Raptr
2014-10-17 21:51:34 ----D---- C:\WINDOWS\MediaViewer
2014-10-17 21:51:33 ----D---- C:\WINDOWS\FileManager
2014-10-17 21:51:33 ----D---- C:\WINDOWS\Camera
2014-10-17 18:01:06 ----D---- C:\WINDOWS\system32\MRT
2014-10-17 17:58:13 ----N---- C:\WINDOWS\system32\MRT.exe
2014-10-17 17:39:50 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-07-13 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-07-13 224896]
R0 Wof;Windows Overlay File System Filter Driver; C:\WINDOWS\system32\drivers\Wof.sys [2014-03-13 157016]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2013-03-07 22600]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-07-13 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-07-13 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-13 427360]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [2014-09-02 31648]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-13 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-13 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-07-13 92008]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 AtiHDAudioService;@oem25.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWB6.sys [2014-03-11 222720]
R3 MEIx64;@oem2.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-19 56344]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 VIAHdAudAddService;@oem10.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2012-08-14 2206352]
R3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\WINDOWS\System32\drivers\WUDFRd.sys [2014-05-31 227840]
R3 WUDFWpdFs;WUDFWpdFs; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
R3 WUDFWpdMtp;WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
S0 amdkmafd;@oem23.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S3 EagleX64;EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys []
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-13 50344]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Games\Smite\HiPatchService.exe [2014-08-22 9216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2014-08-26 76152]
R2 VIAKaraokeService;@oem10.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service; C:\WINDOWS\system32\viakaraokesrv.exe [2012-08-14 27792]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-11 267440]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-11-12 833728]

-----------------EOF-----------------

[altrok]

Dobry vecer

Spustte jako spravce C:\Program Files\trend micro\uzivatel.exe

• kliknete na Do a system scan only
• zatrhnete (udelejte fajfku) nasledujici polozky
  • O15 - Trusted Zone: *.clonewarsadventures.com
    O15 - Trusted Zone: *.freerealms.com
    O15 - Trusted Zone: *.soe.com
    O15 - Trusted Zone: *.sony.com
• kliknete na Fix checked

Jinak v logu nic spatneho nevidim, ale pokud mate zajem,

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Pak vlozte log FRST (nikoli RSIT) a rychle preventivku dodelame

[Jimmy7CZ]

Dobrý večer, v tom AdwCleaneru jsem klikl na Scan a teď to píše: "Pending. Please uncheck elements you don't want to remove." Teď mám kliknout na clean?
Předem děkuji za odpověď.

[altrok]

Ano, ted kliknete na Clean. Pak poslete log (viz navod vyse).

[Jimmy7CZ]

Díky, tady je ten log, do další odpovědi dám ten log FRST.

# AdwCleaner v4.101 - Report created 16/11/2014 at 19:15:03
# Updated 09/11/2014 by Xplode
# Database : 2014-11-16.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : uzivatel - PC
# Running from : C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\uzivatel\AppData\Local\CrashRpt

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Opera v25.0.1614.68


*************************

AdwCleaner[R1].txt - [774 octets] - [16/11/2014 18:54:38]
AdwCleaner[S1].txt - [698 octets] - [16/11/2014 19:15:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [757 octets] ##########

[Jimmy7CZ]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-11-2014 03
Ran by uzivatel (administrator) on PC on 16-11-2014 19:26:11
Running from C:\Users\uzivatel\Desktop
Loaded Profile: uzivatel (Available profiles: uzivatel)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hi-Rez Studios) C:\Games\Smite\HiPatchService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
() C:\Program Files (x86)\Opera\25.0.1614.68\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5264016 2012-08-16] (VIA)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-14] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-10-17] (Raptr, Inc)
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-711187828-1467515366-2434451568-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/search?q={searchT ... d=ie7&rlz=
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} http://www.battlefieldheroes.com/static ... .203.0.cab
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/stati ... 0.96.0.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-711187828-1467515366-2434451568-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-09]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-13] (AVAST Software)
R2 HiPatchService; C:\Games\Smite\HiPatchService.exe [9216 2014-08-22] (Hi-Rez Studios) [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2014-08-26] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-14] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-13] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-13] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-13] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [31648 2014-09-02] (REALiX(tm))
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-16 19:26 - 2014-11-16 19:26 - 00009572 _____ () C:\Users\uzivatel\Desktop\FRST.txt
2014-11-16 19:25 - 2014-11-16 19:26 - 00000000 ____D () C:\FRST
2014-11-16 19:23 - 2014-11-16 19:23 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
2014-11-16 19:21 - 2014-11-16 19:21 - 02117120 _____ (Farbar) C:\Users\uzivatel\Desktop\FRST64.exe
2014-11-16 19:16 - 2014-11-16 19:16 - 00003554 _____ () C:\WINDOWS\PFRO.log
2014-11-16 18:54 - 2014-11-16 19:15 - 00000000 ____D () C:\AdwCleaner
2014-11-16 18:53 - 2014-11-16 18:53 - 02140160 _____ () C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe
2014-11-16 17:31 - 2014-11-16 17:32 - 00000000 ____D () C:\rsit
2014-11-16 17:31 - 2014-11-16 17:31 - 01222144 _____ () C:\Users\uzivatel\Downloads\RSITx64.exe
2014-11-12 15:44 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-12 15:44 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-12 15:44 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-12 15:44 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-12 15:44 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-12 15:44 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-12 15:44 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-12 15:44 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-12 15:44 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-12 15:44 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-12 15:44 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-12 15:44 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-12 15:44 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-12 15:44 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-12 15:44 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-12 15:44 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-12 15:44 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-12 15:44 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-12 15:44 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-12 15:44 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-12 15:44 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-12 15:44 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-12 15:44 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-12 15:44 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-12 15:44 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-12 15:44 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-12 15:44 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-12 15:44 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-12 15:44 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 15:44 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-12 15:44 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-12 15:44 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-12 15:44 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-12 15:44 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-12 15:44 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-12 15:44 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-12 15:44 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-12 15:44 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 15:44 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-12 15:44 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-12 15:44 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-12 15:44 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-12 15:44 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-12 15:44 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-12 15:43 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-12 15:43 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-12 15:43 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-12 15:43 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-12 15:43 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-12 15:43 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-12 15:43 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-12 15:42 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-12 15:42 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-12 15:42 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-12 15:42 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-12 15:42 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-12 15:42 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 15:42 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-12 15:42 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-12 15:42 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-12 15:42 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-12 15:42 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-12 15:42 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-12 15:42 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-12 15:42 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-12 15:42 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-12 15:42 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-12 15:42 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-12 15:42 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-12 15:42 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-12 15:41 - 2014-11-05 00:38 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-11-12 15:41 - 2014-11-04 01:10 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-11-12 15:41 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-12 15:41 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-12 15:41 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-12 15:41 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-12 15:41 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 15:41 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-12 15:41 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-12 15:41 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-12 15:41 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 15:41 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-12 15:41 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 15:41 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-12 15:41 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-12 15:41 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 15:41 - 2014-10-31 05:53 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-11-12 15:41 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-12 15:41 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 15:41 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 15:41 - 2014-10-31 05:49 - 00537088 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-11-12 15:41 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-12 15:41 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 15:41 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 15:41 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-12 15:41 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-12 15:41 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-12 15:41 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-12 15:41 - 2014-10-31 05:24 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-11-12 15:41 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-12 15:41 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 15:41 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-12 15:41 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-12 15:41 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-12 15:41 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-12 15:41 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 15:41 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-12 15:41 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 15:41 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-12 15:41 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-12 15:41 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-12 15:41 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-12 15:41 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-12 15:41 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-12 15:41 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-12 15:41 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-12 15:41 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-12 15:41 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-12 15:41 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-12 15:41 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-12 15:41 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-12 15:41 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 15:41 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-12 15:41 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-12 15:41 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-12 15:41 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-12 15:41 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-12 15:41 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-12 15:41 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-12 15:41 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-12 15:41 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-12 15:41 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 15:41 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-12 15:41 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-12 15:41 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-12 15:41 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-12 15:41 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-12 15:41 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-12 15:41 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-12 15:41 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-12 15:41 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-12 15:41 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-12 15:41 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-12 15:41 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-12 15:41 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-12 15:41 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-12 15:41 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-12 15:41 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-12 15:41 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-12 15:41 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-12 15:41 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-12 15:41 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-12 15:41 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 15:41 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-12 15:41 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-12 15:41 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-12 15:41 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-12 15:41 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-12 15:41 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-12 15:41 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 15:41 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-12 15:41 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-12 15:41 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-12 15:41 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-12 15:41 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-12 15:41 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-12 15:41 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-12 15:41 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-12 15:41 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-12 15:41 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-12 15:41 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-12 15:41 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-12 15:41 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-12 15:41 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-12 15:41 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-12 15:41 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 15:41 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-12 15:41 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-12 15:41 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-12 15:41 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-12 15:41 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-12 15:41 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-12 15:41 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-12 15:41 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-12 15:41 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-12 15:41 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-12 15:41 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-12 15:41 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-12 15:41 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-08 10:49 - 2014-11-16 19:19 - 01054151 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-01 22:46 - 2014-11-01 22:46 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\.mono
2014-10-28 10:53 - 2014-10-28 10:53 - 00001637 _____ () C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
2014-10-28 10:53 - 2014-10-28 10:53 - 00001628 _____ () C:\Users\Public\Desktop\Smite.lnk
2014-10-26 19:39 - 2014-10-26 19:39 - 00000110 ____H () C:\Users\uzivatel\Downloads\tru_2830_decals (1)1.jpg.uid-zps
2014-10-26 19:25 - 2014-10-26 19:39 - 00035328 ___SH () C:\Users\uzivatel\Downloads\Thumbs.db
2014-10-26 19:22 - 2014-10-26 19:22 - 00000110 ____H () C:\Users\uzivatel\Downloads\tru_2830_decals.jpg.uid-zps
2014-10-17 17:42 - 2014-10-17 17:42 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\PAYDAY
2014-10-17 17:39 - 2014-10-17 17:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-17 17:01 - 2014-10-17 17:01 - 00000221 _____ () C:\Users\uzivatel\Desktop\PAYDAY The Heist.url

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-16 19:17 - 2014-07-17 20:34 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Raptr
2014-11-16 19:17 - 2013-10-17 15:45 - 00000000 ___DO () C:\Users\uzivatel\SkyDrive
2014-11-16 19:16 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-16 19:15 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-16 19:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-16 18:54 - 2014-08-02 19:14 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Skype
2014-11-16 18:52 - 2014-07-29 21:34 - 00000000 ____D () C:\Program Files\trend micro
2014-11-16 18:49 - 2014-05-07 13:26 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-16 17:10 - 2013-10-17 15:55 - 00003958 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FFC9F812-5A61-4A98-B27D-22720A728108}
2014-11-16 14:19 - 2012-11-26 09:28 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-711187828-1467515366-2434451568-1001
2014-11-15 20:57 - 2013-12-10 18:13 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-15 12:27 - 2013-12-03 18:10 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-14 14:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-11-13 14:52 - 2013-10-17 15:25 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-13 14:52 - 2013-09-30 04:56 - 00738682 _____ () C:\WINDOWS\system32\perfh005.dat
2014-11-13 14:52 - 2013-09-30 04:56 - 00151404 _____ () C:\WINDOWS\system32\perfc005.dat
2014-11-13 14:46 - 2013-08-22 15:44 - 00485208 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-12 23:32 - 2014-07-11 00:49 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-12 16:57 - 2014-08-19 15:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 16:57 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-11 21:49 - 2014-05-07 13:26 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-11 17:22 - 2013-07-17 18:37 - 00343552 ___SH () C:\Users\uzivatel\Desktop\Thumbs.db
2014-11-09 21:11 - 2014-08-27 18:44 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\TS3Client
2014-11-08 00:24 - 2014-08-28 11:27 - 00000000 ____D () C:\Users\uzivatel\Documents\Zálohy registrů
2014-10-31 23:35 - 2014-10-02 15:16 - 00010801 _____ () C:\Users\uzivatel\Desktop\TERA-Excel.xlsx
2014-10-30 20:47 - 2014-08-19 21:53 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1408481574
2014-10-30 20:47 - 2014-08-19 21:52 - 00001057 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-10-30 20:47 - 2014-08-19 21:52 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-10-30 16:52 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-10-30 01:55 - 2013-08-22 16:38 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-10-30 01:55 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-28 22:41 - 2013-11-29 17:34 - 00000000 ____D () C:\ProgramData\Origin
2014-10-28 22:40 - 2014-05-29 13:18 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-10-28 14:44 - 2013-04-19 14:35 - 00000000 ____D () C:\Users\uzivatel\Documents\My Games
2014-10-28 10:53 - 2014-08-15 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2014-10-28 10:50 - 2012-11-27 15:51 - 00000000 ____D () C:\Games
2014-10-25 23:58 - 2014-07-09 22:14 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\CrashDumps
2014-10-20 16:25 - 2014-08-19 16:34 - 00000000 ____D () C:\Users\uzivatel\Documents\Poznámkové bloky aplikace OneNote
2014-10-19 07:52 - 2014-09-17 13:05 - 00000000 ____D () C:\Programy
2014-10-19 07:26 - 2014-04-09 08:29 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-10-18 18:03 - 2014-07-17 20:34 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-10-17 21:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-10-17 21:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-10-17 21:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-10-17 18:01 - 2013-08-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-10-17 17:58 - 2012-12-20 14:55 - 103265616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\uzivatel\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\uzivatel\AppData\Local\Temp\Quarantine.exe
C:\Users\uzivatel\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 00:54




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:930.71 GB) (Free:708.55 GB) NTFS

Available physical RAM: 6328.35 MB
Total physical RAM: 8146.36 MB
Percentage of memory in use: 22%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9CAA1C66)
Partition 1: (Active) - (Size=817 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\uzivatel\SkyDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\uzivatel\Desktop" je 11 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[altrok]

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CloseProcesses:
  HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
  HKU\S-1-5-21-711187828-1467515366-2434451568-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
  S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
  2014-11-16 19:23 - 2014-11-16 19:23 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
  2014-11-16 18:54 - 2014-11-16 19:15 - 00000000 ____D () C:\AdwCleaner
  2014-11-16 18:53 - 2014-11-16 18:53 - 02140160 _____ () C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe
  2014-11-16 17:31 - 2014-11-16 17:32 - 00000000 ____D () C:\rsit
  2014-11-16 17:31 - 2014-11-16 17:31 - 01222144 _____ () C:\Users\uzivatel\Downloads\RSITx64.exe
  C:\Program Files\trend micro
  Hosts:
  EmptyTemp:
  End
  

[Jimmy7CZ]

A co mám spustit? FRST64 nebo FRSTLauncher?

[altrok]

FRST64.exe

[Jimmy7CZ]

Nejde mi to spustit, ikdyž to spustím jako správce, napíše to: "Systém Windows ochránil váš počítač. Filtr Windows SmartScreen zabránil spuštění nerozpoznané aplikace. Spuštění této aplikace by mohlo ohrozit počítač."

[altrok]

Moznost jako povolit vyjimku tam nikde neni?

Spustte kdyztak FRST64.exe obycejne dvojklikem a z fixlogu uvidime, jak se pocitac zachoval.

[Jimmy7CZ]

Ajo, už mi to jde, bylo tam povolit výjimku, máte pravdu. Takže jsem zkopíroval obsah toho bílého pole, uložil to jako textový dokument na plochu a pojmenoval jako fixlist. Teď, když jsem zapl FRST, mám dát fajfku na políčko Addition.txt jako předtím když jsem dělal ten log?

[altrok]

Ted uz fajfku nikde delat nemusite, protoze nic nebudeme skenovat, ale jen opravovat, takze klik na Fix a po restartu poslete fixlog

[Jimmy7CZ]

Po restartu se nespustil, byl na ploše, tak doufám, že je to to, co požadujete.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-11-2014 03
Ran by uzivatel at 2014-11-16 20:01:10 Run:1
Running from C:\Users\uzivatel\Desktop
Loaded Profile: uzivatel (Available profiles: uzivatel)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
2014-11-16 19:23 - 2014-11-16 19:23 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
2014-11-16 18:54 - 2014-11-16 19:15 - 00000000 ____D () C:\AdwCleaner
2014-11-16 18:53 - 2014-11-16 18:53 - 02140160 _____ () C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe
2014-11-16 17:31 - 2014-11-16 17:32 - 00000000 ____D () C:\rsit
2014-11-16 17:31 - 2014-11-16 17:31 - 01222144 _____ () C:\Users\uzivatel\Downloads\RSITx64.exe
C:\Program Files\trend micro
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value deleted successfully.
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value deleted successfully.
EagleX64 => Service deleted successfully.
C:\Users\uzivatel\Desktop\FRSTLauncher.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\uzivatel\Downloads\RSITx64.exe => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 21.3 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

[altrok]

Ano, je to presne, co jsem potreboval Pocitac mate cisty, takze jeste pouzite nacini uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.