VIRY.CZ

Zdravím, nemám žádný problém, jen po dlouhé době prosím o preventivní kontrolu.

Logfile of random's system information tool 1.10 (written by random/random)
Run by uzivatel at 2014-11-16 17:31:41
Microsoft Windows 8.1
System drive C: has 726 GB (76%) free of 953 GB
Total RAM: 8146 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:31:52, on 16. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera_crashreporter.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - http://www.battlefieldheroes.com/static ... .203.0.cab
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.96.0.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Games\Smite\HiPatchService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @oem10.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\WINDOWS\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8397 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
dashost.exe {ef4a839a-8e80-4210-9d1893bdef5ff850}
C:\Games\Smite\HiPatchService.exe
C:\WINDOWS\SysWOW64\PnkBstrA.exe
C:\WINDOWS\system32\viakaraokesrv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-1e196230-dfd4-49fe-91e0-86b0fc66ad90 -SystemEventPortName:HostProcess-d2568b78-7d6a-4c5c-bffe-bf2d66d2c5d2 -IoCancelEventPortName:HostProcess-37792a7c-fcd4-43f7-a477-aae378a57aab -NonStateChangingEventPortName:HostProcess-5d5a54ed-c94b-42ef-92d2-c7c71894c533 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:dc0e407a-5008-47f6-8223-16fa73aec7d7 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
taskhost.exe $(Arg0)

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
-hiberboot
atieclxx
C:\WINDOWS\Explorer.EXE
C:\Windows\System32\skydrive.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
taskhostex.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe"
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\PROGRA~2\Raptr\raptr.exe" --log_to_file --from_stub --startup
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
raptr_im.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Raptr\raptr_ep64.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --ran-launcher /crash-reporter-parent-id=6060
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=gpu-process --channel="6060.0.160914323\1787710378" --enable-proprietary-media-types-playback --crash-reporter-pid=4732 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16 --gpu-vendor-id=0x1002 --gpu-device-id=0x6758 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.251.9001.1001 --enable-proprietary-media-types-playback --crash-reporter-pid=4732 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --extension-process --enable-webrtc-hw-h264-encoding --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.2.63450462\374439903" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.4.2001065837\1631883921" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.5.877527270\2000211003" /prefetch:673131151
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Windows\System32\WWAHost.exe" -ServerName:Windows.Store
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.6.1739165701\1187466" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.7.435197184\1538381388" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=plugin --plugin-path="C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll" --disable-direct-npapi-requests --lang=cs --channel="6060.8.840679857\177980472" --enable-proprietary-media-types-playback --crash-reporter-pid=4732 /prefetch:-390060480
C:\WINDOWS\system32\AUDIODG.EXE 0xe58
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.11.1574920117\1253994529" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.12.1619615645\1270424059" /prefetch:673131151
"C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe" --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --lang=cs --enable-proprietary-media-types-playback --disable-client-side-phishing-detection --with-feature:enhanced-autofill --crash-reporter-pid=4732 --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="6060.30.1300455866\1993363650" /prefetch:673131151
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe112_ Global\UsGthrCtrlFltPipeMssGthrPipe112 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 588 592 600 65536 596
"C:\Users\uzivatel\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-13 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-13 457712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Raptr"=C:\PROGRA~2\Raptr\raptrstub.exe [2014-10-17 55568]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2014-03-13 779776]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2012-08-16 5264016]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-14 4085896]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-07-04 766688]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.yuy2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"vidc.yvyu"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"vidc.uyvy"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-16 17:31:41 ----D---- C:\rsit
2014-11-12 15:44:27 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\system32\schannel.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\system32\ncryptsslp.dll
2014-11-12 15:44:27 ----A---- C:\WINDOWS\system32\dpapisrv.dll
2014-11-12 15:44:26 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-12 15:44:25 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-12 15:44:24 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-12 15:44:24 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-12 15:44:24 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-12 15:44:16 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2014-11-12 15:44:16 ----A---- C:\WINDOWS\system32\oleaut32.dll
2014-11-12 15:44:14 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-11-12 15:44:14 ----A---- C:\WINDOWS\system32\msi.dll
2014-11-12 15:44:14 ----A---- C:\WINDOWS\system32\authui.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\system32\msihnd.dll
2014-11-12 15:44:13 ----A---- C:\WINDOWS\system32\consent.exe
2014-11-12 15:44:13 ----A---- C:\WINDOWS\system32\appinfo.dll
2014-11-12 15:44:10 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-11-12 15:44:09 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-11-12 15:44:09 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-11-12 15:44:09 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wups2.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wups.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-11-12 15:44:08 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-11-12 15:44:07 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-11-12 15:44:07 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-11-12 15:44:07 ----A---- C:\WINDOWS\system32\wuaext.dll
2014-11-12 15:43:26 ----A---- C:\WINDOWS\system32\user32.dll
2014-11-12 15:43:25 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-11-12 15:43:24 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys
2014-11-12 15:43:24 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys
2014-11-12 15:43:23 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys
2014-11-12 15:43:21 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll
2014-11-12 15:43:21 ----A---- C:\WINDOWS\system32\winshfhc.dll
2014-11-12 15:42:47 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-12 15:42:46 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-12 15:42:18 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-12 15:42:13 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-12 15:42:08 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-12 15:42:06 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-12 15:42:04 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-11-12 15:42:04 ----A---- C:\WINDOWS\system32\wininet.dll
2014-11-12 15:42:04 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-11-12 15:42:03 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-11-12 15:42:02 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-12 15:42:02 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-12 15:42:00 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-12 15:41:59 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-12 15:41:58 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 15:41:57 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-12 15:41:57 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-12 15:41:57 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 15:41:56 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-12 15:41:55 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\url.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-12 15:41:54 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 15:41:53 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-12 15:41:53 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-12 15:41:31 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-12 15:41:31 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-12 15:41:30 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-12 15:41:30 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-12 15:41:30 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 15:41:29 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-12 15:41:28 ----A---- C:\WINDOWS\system32\devinv.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\generaltel.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\aepic.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-11-12 15:41:27 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-11-12 15:41:25 ----A---- C:\WINDOWS\system32\shell32.dll
2014-11-12 15:41:25 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-11-12 15:41:24 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-11-12 15:41:23 ----A---- C:\WINDOWS\system32\twinui.dll
2014-11-12 15:41:23 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-12 15:41:23 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-11-12 15:41:22 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-11-12 15:41:22 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-12 15:41:22 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-12 15:41:22 ----A---- C:\WINDOWS\system32\localspl.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-11-12 15:41:21 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-11-12 15:41:20 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\untfs.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-11-12 15:41:20 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-11-12 15:41:19 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-12 15:41:19 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 15:41:18 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-11-01 22:46:57 ----D---- C:\Users\uzivatel\AppData\Roaming\.mono
2014-10-17 17:39:53 ----D---- C:\Program Files (x86)\NVIDIA Corporation

======List of files/folders modified in the last 1 month======

2014-11-16 17:31:47 ----D---- C:\Program Files\trend micro
2014-11-16 17:31:37 ----D---- C:\WINDOWS\Prefetch
2014-11-16 17:21:11 ----D---- C:\Users\uzivatel\AppData\Roaming\Skype
2014-11-16 17:02:00 ----D---- C:\WINDOWS\system32\sru
2014-11-16 16:41:25 ----D---- C:\WINDOWS\Temp
2014-11-16 14:42:12 ----D---- C:\Users\uzivatel\AppData\Roaming\Raptr
2014-11-16 14:39:25 ----D---- C:\WINDOWS\system32\config
2014-11-16 14:30:04 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-16 14:27:46 ----D---- C:\WINDOWS\WinSxS
2014-11-16 14:22:03 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-16 14:20:10 ----RSD---- C:\WINDOWS\assembly
2014-11-15 20:57:29 ----D---- C:\Program Files (x86)\Steam
2014-11-15 12:27:06 ----SHD---- C:\System Volume Information
2014-11-14 14:24:05 ----HD---- C:\Program Files\WindowsApps
2014-11-14 14:24:05 ----D---- C:\WINDOWS\AppReadiness
2014-11-13 14:55:03 ----D---- C:\WINDOWS\system32\catroot
2014-11-13 14:52:44 ----RD---- C:\WINDOWS\System32
2014-11-13 14:52:44 ----D---- C:\WINDOWS\Inf
2014-11-13 14:52:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-12 23:32:46 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-11-12 23:32:46 ----D---- C:\WINDOWS\SysWOW64
2014-11-12 23:32:46 ----D---- C:\WINDOWS\system32\drivers
2014-11-12 23:32:46 ----D---- C:\WINDOWS\system32\cs-CZ
2014-11-12 23:32:45 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-12 23:32:45 ----D---- C:\WINDOWS\system32\migration
2014-11-12 23:32:45 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-12 23:32:42 ----SD---- C:\WINDOWS\system32\CompatTel
2014-11-12 23:32:42 ----D---- C:\Program Files\Internet Explorer
2014-11-12 23:32:41 ----RD---- C:\WINDOWS\ToastData
2014-11-12 23:32:41 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-11-12 23:32:41 ----D---- C:\WINDOWS\apppatch
2014-11-12 23:32:40 ----D---- C:\Program Files\Windows Defender
2014-11-12 23:32:40 ----D---- C:\Program Files (x86)\Windows Defender
2014-11-12 16:57:14 ----D---- C:\WINDOWS\CbsTemp
2014-11-12 16:57:08 ----SHD---- C:\WINDOWS\Installer
2014-11-12 16:57:08 ----D---- C:\ProgramData\Microsoft Help
2014-11-12 16:56:54 ----D---- C:\WINDOWS\system32\wbem
2014-11-12 15:39:39 ----D---- C:\WINDOWS\system32\catroot2
2014-11-11 16:31:05 ----D---- C:\WINDOWS\debug
2014-11-09 21:11:40 ----D---- C:\Users\uzivatel\AppData\Roaming\TS3Client
2014-11-08 10:49:05 ----D---- C:\WINDOWS\SoftwareDistribution
2014-11-08 10:49:05 ----D---- C:\Windows
2014-11-08 00:29:05 ----D---- C:\WINDOWS\Logs
2014-10-30 20:47:02 ----D---- C:\WINDOWS\system32\Tasks
2014-10-30 20:47:02 ----D---- C:\Program Files (x86)\Opera
2014-10-30 16:52:33 ----D---- C:\WINDOWS\rescache
2014-10-30 01:55:02 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-10-28 22:41:53 ----D---- C:\ProgramData\Origin
2014-10-28 22:40:17 ----D---- C:\Program Files (x86)\Origin
2014-10-28 10:50:51 ----D---- C:\Games
2014-10-20 16:27:44 ----SD---- C:\Users\uzivatel\AppData\Roaming\Microsoft
2014-10-19 07:52:06 ----D---- C:\Programy
2014-10-19 07:49:57 ----RD---- C:\Program Files (x86)
2014-10-19 07:48:49 ----RSD---- C:\WINDOWS\Fonts
2014-10-18 18:03:15 ----D---- C:\Program Files (x86)\Raptr
2014-10-17 21:51:34 ----D---- C:\WINDOWS\MediaViewer
2014-10-17 21:51:33 ----D---- C:\WINDOWS\FileManager
2014-10-17 21:51:33 ----D---- C:\WINDOWS\Camera
2014-10-17 18:01:06 ----D---- C:\WINDOWS\system32\MRT
2014-10-17 17:58:13 ----N---- C:\WINDOWS\system32\MRT.exe
2014-10-17 17:39:50 ----D---- C:\Program Files (x86)\Common Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-07-13 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-07-13 224896]
R0 Wof;Windows Overlay File System Filter Driver; C:\WINDOWS\system32\drivers\Wof.sys [2014-03-13 157016]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2013-03-07 22600]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-07-13 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-07-13 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-13 427360]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [2014-09-02 31648]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-13 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-13 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-07-13 92008]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2014-07-21 13209088]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2014-07-21 626688]
R3 AtiHDAudioService;@oem25.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWB6.sys [2014-03-11 222720]
R3 MEIx64;@oem2.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2010-10-19 56344]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 VIAHdAudAddService;@oem10.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2012-08-14 2206352]
R3 WUDFSensorLP;@locationprovider.inf,%WudfLocationProviderDisplayName%;Služba Reflektor UMDF pro zprostředkovatele umístění (LocationProvider); C:\WINDOWS\System32\drivers\WUDFRd.sys [2014-05-31 227840]
R3 WUDFWpdFs;WUDFWpdFs; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
R3 WUDFWpdMtp;WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
S0 amdkmafd;@oem23.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S3 EagleX64;EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys []
S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2014-07-21 239616]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-13 50344]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; C:\Games\Smite\HiPatchService.exe [2014-08-22 9216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2014-08-26 76152]
R2 VIAKaraokeService;@oem10.inf,%ViaKaraokeSrv.SvcDesc%;VIA Karaoke digital mixer Service; C:\WINDOWS\system32\viakaraokesrv.exe [2012-08-14 27792]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-11 267440]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-11-12 833728]

-----------------EOF-----------------

Dobry vecer

Spustte jako spravce C:\Program Files\trend micro\uzivatel.exe

• kliknete na Do a system scan only
• zatrhnete (udelejte fajfku) nasledujici polozky
  • O15 - Trusted Zone: *.clonewarsadventures.com
    O15 - Trusted Zone: *.freerealms.com
    O15 - Trusted Zone: *.soe.com
    O15 - Trusted Zone: *.sony.com
• kliknete na Fix checked

Jinak v logu nic spatneho nevidim, ale pokud mate zajem,

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Pak vlozte log FRST (nikoli RSIT) a rychle preventivku dodelame

Dobrý večer, v tom AdwCleaneru jsem klikl na Scan a teď to píše: "Pending. Please uncheck elements you don't want to remove." Teď mám kliknout na clean?
Předem děkuji za odpověď.

Ano, ted kliknete na Clean. Pak poslete log (viz navod vyse).

Díky, tady je ten log, do další odpovědi dám ten log FRST.

# AdwCleaner v4.101 - Report created 16/11/2014 at 19:15:03
# Updated 09/11/2014 by Xplode
# Database : 2014-11-16.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : uzivatel - PC
# Running from : C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\uzivatel\AppData\Local\CrashRpt

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Opera v25.0.1614.68


*************************

AdwCleaner[R1].txt - [774 octets] - [16/11/2014 18:54:38]
AdwCleaner[S1].txt - [698 octets] - [16/11/2014 19:15:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [757 octets] ##########

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-11-2014 03
Ran by uzivatel (administrator) on PC on 16-11-2014 19:26:11
Running from C:\Users\uzivatel\Desktop
Loaded Profile: uzivatel (Available profiles: uzivatel)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hi-Rez Studios) C:\Games\Smite\HiPatchService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
() C:\Program Files (x86)\Opera\25.0.1614.68\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\25.0.1614.68\opera.exe
(forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5264016 2012-08-16] (VIA)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-14] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-10-17] (Raptr, Inc)
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-711187828-1467515366-2434451568-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/search?q={searchT ... d=ie7&rlz=
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} http://www.battlefieldheroes.com/static ... .203.0.cab
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/stati ... 0.96.0.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-711187828-1467515366-2434451568-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-09]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-13] (AVAST Software)
R2 HiPatchService; C:\Games\Smite\HiPatchService.exe [9216 2014-08-22] (Hi-Rez Studios) [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2014-08-26] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-14] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-13] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-13] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-13] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [31648 2014-09-02] (REALiX(tm))
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-16 19:26 - 2014-11-16 19:26 - 00009572 _____ () C:\Users\uzivatel\Desktop\FRST.txt
2014-11-16 19:25 - 2014-11-16 19:26 - 00000000 ____D () C:\FRST
2014-11-16 19:23 - 2014-11-16 19:23 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
2014-11-16 19:21 - 2014-11-16 19:21 - 02117120 _____ (Farbar) C:\Users\uzivatel\Desktop\FRST64.exe
2014-11-16 19:16 - 2014-11-16 19:16 - 00003554 _____ () C:\WINDOWS\PFRO.log
2014-11-16 18:54 - 2014-11-16 19:15 - 00000000 ____D () C:\AdwCleaner
2014-11-16 18:53 - 2014-11-16 18:53 - 02140160 _____ () C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe
2014-11-16 17:31 - 2014-11-16 17:32 - 00000000 ____D () C:\rsit
2014-11-16 17:31 - 2014-11-16 17:31 - 01222144 _____ () C:\Users\uzivatel\Downloads\RSITx64.exe
2014-11-12 15:44 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-12 15:44 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-12 15:44 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-12 15:44 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-12 15:44 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-12 15:44 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-12 15:44 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-12 15:44 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-12 15:44 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-12 15:44 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-12 15:44 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-12 15:44 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-12 15:44 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-12 15:44 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-12 15:44 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-12 15:44 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-12 15:44 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-12 15:44 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-12 15:44 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-12 15:44 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-12 15:44 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-12 15:44 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-12 15:44 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-12 15:44 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-12 15:44 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-12 15:44 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-12 15:44 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-12 15:44 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-12 15:44 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 15:44 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-12 15:44 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-12 15:44 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-12 15:44 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-12 15:44 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-12 15:44 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-12 15:44 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-12 15:44 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-12 15:44 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 15:44 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-12 15:44 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-12 15:44 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-12 15:44 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-12 15:44 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-12 15:44 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-12 15:43 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-12 15:43 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-12 15:43 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-12 15:43 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-12 15:43 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-12 15:43 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-12 15:43 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-12 15:42 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-12 15:42 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-12 15:42 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-12 15:42 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-12 15:42 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-12 15:42 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 15:42 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-12 15:42 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-12 15:42 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-12 15:42 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-12 15:42 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-12 15:42 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-12 15:42 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-12 15:42 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-12 15:42 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-12 15:42 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-12 15:42 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-12 15:42 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-12 15:42 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-12 15:41 - 2014-11-05 00:38 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-11-12 15:41 - 2014-11-04 01:10 - 00304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-11-12 15:41 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-12 15:41 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-12 15:41 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-12 15:41 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-12 15:41 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 15:41 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-12 15:41 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-12 15:41 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-12 15:41 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 15:41 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-12 15:41 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 15:41 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-12 15:41 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-12 15:41 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 15:41 - 2014-10-31 05:53 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-11-12 15:41 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-12 15:41 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 15:41 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 15:41 - 2014-10-31 05:49 - 00537088 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-11-12 15:41 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-12 15:41 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 15:41 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 15:41 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-12 15:41 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-12 15:41 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-12 15:41 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-12 15:41 - 2014-10-31 05:24 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-11-12 15:41 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-12 15:41 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 15:41 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-12 15:41 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-12 15:41 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-12 15:41 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-12 15:41 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 15:41 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-12 15:41 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 15:41 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-12 15:41 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-12 15:41 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-12 15:41 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-12 15:41 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-12 15:41 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-12 15:41 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-12 15:41 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-12 15:41 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-12 15:41 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-12 15:41 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-12 15:41 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-12 15:41 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-12 15:41 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 15:41 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-12 15:41 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-12 15:41 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-12 15:41 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-12 15:41 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-12 15:41 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-12 15:41 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-12 15:41 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-12 15:41 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-12 15:41 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 15:41 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-12 15:41 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-12 15:41 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-12 15:41 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-12 15:41 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-12 15:41 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-12 15:41 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-12 15:41 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-12 15:41 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-12 15:41 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-12 15:41 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-12 15:41 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-12 15:41 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-12 15:41 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-12 15:41 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-12 15:41 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-12 15:41 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-12 15:41 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-12 15:41 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-12 15:41 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-12 15:41 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 15:41 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-12 15:41 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-12 15:41 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-12 15:41 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-12 15:41 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-12 15:41 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-12 15:41 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 15:41 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-12 15:41 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-12 15:41 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-12 15:41 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-12 15:41 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-12 15:41 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-12 15:41 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-12 15:41 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-12 15:41 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-12 15:41 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-12 15:41 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-12 15:41 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-12 15:41 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-12 15:41 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-12 15:41 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-12 15:41 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-12 15:41 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-12 15:41 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-12 15:41 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-12 15:41 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-12 15:41 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-12 15:41 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-12 15:41 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-12 15:41 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-12 15:41 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-12 15:41 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-12 15:41 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-12 15:41 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-12 15:41 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-08 10:49 - 2014-11-16 19:19 - 01054151 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-01 22:46 - 2014-11-01 22:46 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\.mono
2014-10-28 10:53 - 2014-10-28 10:53 - 00001637 _____ () C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
2014-10-28 10:53 - 2014-10-28 10:53 - 00001628 _____ () C:\Users\Public\Desktop\Smite.lnk
2014-10-26 19:39 - 2014-10-26 19:39 - 00000110 ____H () C:\Users\uzivatel\Downloads\tru_2830_decals (1)1.jpg.uid-zps
2014-10-26 19:25 - 2014-10-26 19:39 - 00035328 ___SH () C:\Users\uzivatel\Downloads\Thumbs.db
2014-10-26 19:22 - 2014-10-26 19:22 - 00000110 ____H () C:\Users\uzivatel\Downloads\tru_2830_decals.jpg.uid-zps
2014-10-17 17:42 - 2014-10-17 17:42 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\PAYDAY
2014-10-17 17:39 - 2014-10-17 17:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-10-17 17:01 - 2014-10-17 17:01 - 00000221 _____ () C:\Users\uzivatel\Desktop\PAYDAY The Heist.url

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-16 19:17 - 2014-07-17 20:34 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Raptr
2014-11-16 19:17 - 2013-10-17 15:45 - 00000000 ___DO () C:\Users\uzivatel\SkyDrive
2014-11-16 19:16 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-16 19:15 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-16 19:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-16 18:54 - 2014-08-02 19:14 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Skype
2014-11-16 18:52 - 2014-07-29 21:34 - 00000000 ____D () C:\Program Files\trend micro
2014-11-16 18:49 - 2014-05-07 13:26 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-16 17:10 - 2013-10-17 15:55 - 00003958 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FFC9F812-5A61-4A98-B27D-22720A728108}
2014-11-16 14:19 - 2012-11-26 09:28 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-711187828-1467515366-2434451568-1001
2014-11-15 20:57 - 2013-12-10 18:13 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-15 12:27 - 2013-12-03 18:10 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-14 14:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-11-13 14:52 - 2013-10-17 15:25 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-13 14:52 - 2013-09-30 04:56 - 00738682 _____ () C:\WINDOWS\system32\perfh005.dat
2014-11-13 14:52 - 2013-09-30 04:56 - 00151404 _____ () C:\WINDOWS\system32\perfc005.dat
2014-11-13 14:46 - 2013-08-22 15:44 - 00485208 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-12 23:32 - 2014-07-11 00:49 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-12 23:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-12 16:57 - 2014-08-19 15:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 16:57 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-11 21:49 - 2014-05-07 13:26 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-11 17:22 - 2013-07-17 18:37 - 00343552 ___SH () C:\Users\uzivatel\Desktop\Thumbs.db
2014-11-09 21:11 - 2014-08-27 18:44 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\TS3Client
2014-11-08 00:24 - 2014-08-28 11:27 - 00000000 ____D () C:\Users\uzivatel\Documents\Zálohy registrů
2014-10-31 23:35 - 2014-10-02 15:16 - 00010801 _____ () C:\Users\uzivatel\Desktop\TERA-Excel.xlsx
2014-10-30 20:47 - 2014-08-19 21:53 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1408481574
2014-10-30 20:47 - 2014-08-19 21:52 - 00001057 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-10-30 20:47 - 2014-08-19 21:52 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-10-30 16:52 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-10-30 01:55 - 2013-08-22 16:38 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-10-30 01:55 - 2013-08-22 16:38 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-28 22:41 - 2013-11-29 17:34 - 00000000 ____D () C:\ProgramData\Origin
2014-10-28 22:40 - 2014-05-29 13:18 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-10-28 14:44 - 2013-04-19 14:35 - 00000000 ____D () C:\Users\uzivatel\Documents\My Games
2014-10-28 10:53 - 2014-08-15 19:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2014-10-28 10:50 - 2012-11-27 15:51 - 00000000 ____D () C:\Games
2014-10-25 23:58 - 2014-07-09 22:14 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\CrashDumps
2014-10-20 16:25 - 2014-08-19 16:34 - 00000000 ____D () C:\Users\uzivatel\Documents\Poznámkové bloky aplikace OneNote
2014-10-19 07:52 - 2014-09-17 13:05 - 00000000 ____D () C:\Programy
2014-10-19 07:26 - 2014-04-09 08:29 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-10-18 18:03 - 2014-07-17 20:34 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-10-17 21:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-10-17 21:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-10-17 21:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-10-17 18:01 - 2013-08-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-10-17 17:58 - 2012-12-20 14:55 - 103265616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\uzivatel\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\uzivatel\AppData\Local\Temp\Quarantine.exe
C:\Users\uzivatel\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-15 00:54




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:930.71 GB) (Free:708.55 GB) NTFS

Available physical RAM: 6328.35 MB
Total physical RAM: 8146.36 MB
Percentage of memory in use: 22%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9CAA1C66)
Partition 1: (Active) - (Size=817 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\uzivatel\SkyDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\uzivatel\Desktop" je 11 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

A co mám spustit? FRST64 nebo FRSTLauncher?

FRST64.exe

Nejde mi to spustit, ikdyž to spustím jako správce, napíše to: "Systém Windows ochránil váš počítač. Filtr Windows SmartScreen zabránil spuštění nerozpoznané aplikace. Spuštění této aplikace by mohlo ohrozit počítač."

Moznost jako povolit vyjimku tam nikde neni?

Spustte kdyztak FRST64.exe obycejne dvojklikem a z fixlogu uvidime, jak se pocitac zachoval.

Ajo, už mi to jde, bylo tam povolit výjimku, máte pravdu. Takže jsem zkopíroval obsah toho bílého pole, uložil to jako textový dokument na plochu a pojmenoval jako fixlist. Teď, když jsem zapl FRST, mám dát fajfku na políčko Addition.txt jako předtím když jsem dělal ten log?

Ted uz fajfku nikde delat nemusite, protoze nic nebudeme skenovat, ale jen opravovat, takze klik na Fix a po restartu poslete fixlog

Po restartu se nespustil, byl na ploše, tak doufám, že je to to, co požadujete.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 16-11-2014 03
Ran by uzivatel at 2014-11-16 20:01:10 Run:1
Running from C:\Users\uzivatel\Desktop
Loaded Profile: uzivatel (Available profiles: uzivatel)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
2014-11-16 19:23 - 2014-11-16 19:23 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
2014-11-16 18:54 - 2014-11-16 19:15 - 00000000 ____D () C:\AdwCleaner
2014-11-16 18:53 - 2014-11-16 18:53 - 02140160 _____ () C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe
2014-11-16 17:31 - 2014-11-16 17:32 - 00000000 ____D () C:\rsit
2014-11-16 17:31 - 2014-11-16 17:31 - 01222144 _____ () C:\Users\uzivatel\Downloads\RSITx64.exe
C:\Program Files\trend micro
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value deleted successfully.
HKU\S-1-5-21-711187828-1467515366-2434451568-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value deleted successfully.
EagleX64 => Service deleted successfully.
C:\Users\uzivatel\Desktop\FRSTLauncher.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\uzivatel\Desktop\adwcleaner_4.101.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\uzivatel\Downloads\RSITx64.exe => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 21.3 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

Ano, je to presne, co jsem potreboval Pocitac mate cisty, takze jeste pouzite nacini uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.